Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/makeUyFy6K2GKIhzFVi7O5nIkwE.roa
File:                     makeUyFy6K2GKIhzFVi7O5nIkwE.roa (raw, json)
Hash identifier:          NN95gm563XRJKtPXixbwcegq/vtwXZZ79L3Dr43PKhM=
Subject key identifier:   99:A9:1E:53:21:72:E8:AD:86:28:88:73:15:58:BB:3B:99:C8:93:01
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       018571278620649BBB1C7A545C013FC94B86
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/makeUyFy6K2GKIhzFVi7O5nIkwE.roa
Signing time:             Mon 02 Jan 2023 06:24:53 +0000
ROA not before:           Mon 02 Jan 2023 06:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30952
IP address blocks:        80.79.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:86:20:64:9b:bb:1c:7a:54:5c:01:3f:c9:4b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  2 06:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99a91e532172e8ad862888731558bb3b99c89301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:fd:f8:f6:23:a0:1a:04:93:a8:8d:ec:59:
                    4a:f4:ce:a5:e5:f5:48:fd:79:3f:9b:3b:8b:24:fc:
                    76:1b:6b:28:d8:37:24:98:6c:1a:36:ae:c4:58:1d:
                    b5:29:0c:78:b2:2a:42:85:01:68:db:6e:cf:39:48:
                    5c:13:66:42:af:0d:af:98:8b:10:24:a6:21:11:85:
                    e2:92:ef:cc:a9:70:88:1c:cc:fa:87:8a:08:ef:3d:
                    81:81:b0:28:95:5a:55:26:8f:79:4f:20:a2:9e:43:
                    71:12:56:77:61:de:8a:14:d7:a5:65:28:71:e2:ba:
                    60:d7:27:2e:8f:3f:f6:69:59:37:29:f0:44:ff:02:
                    06:8c:42:4a:b8:c9:03:6d:4e:06:c5:f6:ea:28:0b:
                    4f:ca:eb:af:c6:44:c2:8a:50:19:1b:3a:0c:a9:ed:
                    64:dd:d4:c9:c5:7b:f7:ca:a8:78:ad:cd:f1:d8:09:
                    dd:00:b5:49:2a:54:b8:9d:91:95:2c:35:ed:46:9c:
                    dd:ba:0e:d2:5e:5e:ee:0f:c4:8e:2a:a6:5d:9d:ec:
                    68:20:0b:f9:7b:40:12:22:fd:83:3d:3e:19:fe:ac:
                    0e:35:49:29:c7:e3:e0:76:41:98:45:d9:e6:5d:23:
                    62:95:b1:e0:ce:19:a6:f2:97:c9:f7:29:1e:5e:cc:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:1E:53:21:72:E8:AD:86:28:88:73:15:58:BB:3B:99:C8:93:01
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/makeUyFy6K2GKIhzFVi7O5nIkwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:3e:36:fa:00:64:93:20:30:20:8f:68:93:f2:13:79:fa:
         ed:1d:f4:de:de:74:ac:95:f5:c4:a4:61:d3:74:45:78:a2:66:
         58:f1:3f:bd:aa:b7:bc:f0:1a:37:13:81:13:c9:38:69:fb:96:
         83:b6:f5:24:eb:37:f4:f6:87:a7:a8:53:4a:8a:f7:b3:92:a8:
         cb:ff:f7:81:0f:3d:e6:8c:9f:34:ec:89:47:b8:26:ba:ea:3d:
         c9:8f:03:08:1d:7a:c6:c9:30:06:01:b6:5d:1c:af:2e:da:8b:
         5d:ec:1c:a5:41:75:e3:8d:e8:3f:d4:00:66:4d:6c:d7:8e:7c:
         6b:0f:51:a1:8b:e8:63:07:bf:b0:4d:a9:15:d1:2b:d4:e1:8a:
         88:95:25:38:5e:79:a0:2b:c1:68:60:d7:c6:38:d5:3e:be:25:
         12:25:e1:7b:41:40:bf:ab:8b:b6:eb:29:a0:66:a2:ee:f7:bd:
         25:51:c0:8d:d3:f8:78:8a:49:a7:5c:b5:e2:17:d0:f7:63:bb:
         81:e9:6a:77:9c:02:b6:f9:a6:f5:43:06:d6:db:0f:f5:95:1e:
         15:3e:3f:e8:6b:4c:2b:89:fb:8c:9d:39:de:06:4b:6a:17:ea:
         15:12:0e:95:0f:2a:b0:e7:47:aa:7e:a8:a5:d7:46:09:7e:6e:
         dd:16:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org