Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/v-B3k6TDUOprBaC0VJ7j_33OivI.roa
File:                     v-B3k6TDUOprBaC0VJ7j_33OivI.roa (raw, json)
Hash identifier:          f+EFz5FUJ9s5+uHQum3XgkyOexDIqm4shwxBFx2rViQ=
Subject key identifier:   BF:E0:77:93:A4:C3:50:EA:6B:05:A0:B4:54:9E:E3:FF:7D:CE:8A:F2
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       018C53718FFFB6016C8C2FE148ED0663ABA3
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/v-B3k6TDUOprBaC0VJ7j_33OivI.roa
Signing time:             Sun 10 Dec 2023 11:16:40 +0000
ROA not before:           Sun 10 Dec 2023 11:16:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61135
IP address blocks:        194.79.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:53:71:8f:ff:b6:01:6c:8c:2f:e1:48:ed:06:63:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Dec 10 11:16:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfe07793a4c350ea6b05a0b4549ee3ff7dce8af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:28:5d:eb:9e:54:79:d3:ee:8b:e8:03:72:
                    82:a3:d8:22:41:25:88:4a:ab:f6:a8:6a:7b:6a:5d:
                    e3:78:af:c4:29:d4:d4:c5:8d:73:9e:47:35:4c:d6:
                    73:8f:6b:06:f0:6b:03:80:26:7b:b9:6f:09:5e:c5:
                    05:72:49:19:0b:9e:83:95:54:4d:b7:8c:26:43:2c:
                    f0:b0:38:e8:20:43:ee:3e:96:2d:ee:d0:82:34:17:
                    2e:49:df:f2:71:8c:98:34:0d:c5:ea:bb:27:fd:3e:
                    1e:49:c4:e5:7a:80:fe:dc:34:9b:28:31:20:02:e8:
                    df:50:cc:c8:02:db:14:ab:09:64:89:91:dd:66:a2:
                    76:9b:6e:3f:81:40:45:73:f9:87:bc:3f:7f:58:c0:
                    d1:63:6b:8b:ce:2a:ea:a2:af:23:fe:35:54:04:fa:
                    6d:11:af:51:47:a2:8d:72:32:e8:36:32:7f:0d:5a:
                    73:ab:26:a0:d5:5e:fb:a3:fe:f6:c0:7b:8a:fa:d2:
                    7c:0f:7a:79:2d:10:3d:8f:64:34:00:72:4f:01:a6:
                    20:5d:e2:7c:24:93:48:42:3e:0d:d3:8b:a5:19:23:
                    b7:e9:ec:26:f8:a2:64:ef:6a:a6:a0:41:38:3b:fa:
                    51:64:48:cf:79:fd:4c:c4:8a:c3:be:9d:d5:5e:81:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E0:77:93:A4:C3:50:EA:6B:05:A0:B4:54:9E:E3:FF:7D:CE:8A:F2
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/v-B3k6TDUOprBaC0VJ7j_33OivI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.79.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cb:49:74:5a:03:54:5f:d5:e0:e7:b0:c1:2b:5b:62:cf:44:
         c9:2e:b4:12:47:ee:4f:fc:59:72:c3:ca:64:8e:71:c6:0f:c2:
         3d:6b:25:ab:62:ee:91:44:55:e2:66:c3:3e:c9:ae:2f:86:8a:
         cc:f7:fc:31:12:60:4b:ca:76:65:16:86:36:5e:c1:6c:a9:fe:
         c4:b8:f3:fa:b3:8b:c7:4e:ad:b2:93:27:a1:c1:5c:54:db:aa:
         d1:93:41:df:08:94:d5:42:92:84:22:04:91:89:d2:d3:c2:ca:
         a7:c6:d3:48:23:a0:49:3e:80:ee:1a:29:0c:61:c5:36:75:c9:
         55:43:0f:e2:e8:be:f0:ee:13:1e:85:25:94:3a:f7:ab:01:70:
         69:94:90:7c:af:a7:16:4c:47:2a:d0:6b:e7:d1:98:9c:66:49:
         af:99:5a:dc:64:a7:88:11:66:a7:7e:53:95:90:85:c5:7f:d5:
         d4:23:ec:29:83:44:cf:31:8b:c0:dd:c5:15:95:d5:4c:3b:03:
         8c:9b:39:f6:b1:59:24:a6:31:9a:3c:8c:89:53:0d:cb:32:4b:
         a7:da:8a:e1:ad:89:9c:6d:f2:7d:80:b0:43:4a:81:78:57:27:
         52:4a:11:dc:2f:09:c4:9a:78:b5:1e:89:a1:9d:a8:d2:de:ec:
         14:ea:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org