Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa
File:                     n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa (raw, json)
Hash identifier:          4RYEENCAUA8UYTVXCTNYxV9L9fksjrbd55BhygT+Gus=
Subject key identifier:   9F:91:31:15:9E:E8:99:E7:B1:F3:B6:6A:F4:99:61:F8:F5:6E:08:88
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       01856C65F36D79294C59BD8EFEAEF21A812A
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa
Signing time:             Sun 01 Jan 2023 08:14:58 +0000
ROA not before:           Sun 01 Jan 2023 08:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61052
IP address blocks:        79.133.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:f3:6d:79:29:4c:59:bd:8e:fe:ae:f2:1a:81:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  1 08:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f9131159ee899e7b1f3b66af49961f8f56e0888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:1d:10:75:c9:1e:fb:4a:28:df:84:65:ca:
                    d5:0b:c7:d6:db:76:8c:4f:80:2e:4a:32:ab:a7:3e:
                    10:04:7e:74:f0:30:08:45:b4:ca:32:a8:f2:16:5e:
                    d0:c9:4e:f3:b3:66:be:30:08:ba:ba:e5:e6:86:4c:
                    40:cc:eb:e7:dc:61:63:07:cc:f5:25:4b:9f:61:d2:
                    7a:30:aa:c0:8f:ec:b4:5d:8e:81:eb:cd:2e:89:61:
                    1d:d6:c7:e7:ae:08:ff:45:bf:29:b1:8d:10:e4:42:
                    b2:db:ac:6d:8e:ad:1a:eb:cd:13:d6:8e:06:29:d2:
                    e0:5c:31:af:08:f0:66:14:8a:95:0a:5c:00:d2:d2:
                    91:b6:a2:7c:7c:2f:5b:95:82:3e:a3:51:52:96:29:
                    9e:71:60:e4:44:25:76:09:2e:65:ba:06:e3:0b:12:
                    f3:8a:38:7c:c0:02:e8:88:ab:ce:1d:9d:ff:4f:55:
                    9a:e2:a9:7e:fc:dd:cb:fb:04:1f:fa:39:44:86:02:
                    56:ae:34:7e:7a:c1:fe:30:ae:de:f3:b0:10:b0:db:
                    de:6d:a9:96:20:3e:31:bb:8d:1d:a3:50:3e:1d:4c:
                    f1:c6:bd:9a:3a:f5:e2:2b:a9:70:a2:e1:c3:a3:7b:
                    03:6d:91:7f:c3:95:e2:c3:f8:e2:a6:ed:9c:e4:69:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:91:31:15:9E:E8:99:E7:B1:F3:B6:6A:F4:99:61:F8:F5:6E:08:88
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/n5ExFZ7omeex87Zq9Jlh-PVuCIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:e9:ff:43:4d:76:06:e2:4f:25:e4:c5:56:3f:ff:78:e7:
         94:82:8c:2b:de:81:d2:bc:61:1a:1a:b5:d3:24:83:e3:eb:60:
         c3:9f:4d:bc:b9:68:d8:66:8d:21:32:2b:6c:7d:aa:24:68:73:
         dd:ba:f9:6f:c8:d1:5a:74:e6:54:c8:1f:f5:2e:6b:1f:80:bb:
         2c:a6:63:d7:0f:66:4c:23:90:c0:52:50:73:c0:33:f4:55:15:
         a0:bb:c2:ee:99:97:fd:51:50:ee:02:12:45:d5:38:fb:1d:ff:
         ff:53:2d:c0:25:56:a6:83:1b:35:ac:4e:ae:cf:ab:1c:68:ab:
         1c:bd:79:dc:66:15:65:d5:dc:ec:cd:c4:ab:18:ec:65:b4:13:
         80:90:6c:f9:7b:20:58:90:84:c6:85:31:7a:2e:d2:d2:f6:42:
         a2:e2:ec:c1:6b:81:bc:95:a2:c1:75:dc:17:35:94:80:82:c8:
         b2:2b:b8:36:76:4b:bd:f1:15:c3:60:df:74:93:8c:4e:02:2f:
         56:9f:34:05:15:81:45:f5:86:fe:7b:78:b7:1f:64:9c:53:fb:
         c7:d6:dd:04:f9:d6:2e:9e:41:b5:0b:a8:ea:1f:1b:65:2a:98:
         d3:3e:af:04:16:b1:9b:c2:e3:d6:6b:b3:bb:14:16:71:39:0f:
         bc:7f:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org