Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/hl17tu82AhZeZUa2Zg3Ds8SnODI.roa
File:                     hl17tu82AhZeZUa2Zg3Ds8SnODI.roa (raw, json)
Hash identifier:          pC/VtZL19c7WfOLXl68sAtpdPw/YhpEf/RHskx9tZog=
Subject key identifier:   86:5D:7B:B6:EF:36:02:16:5E:65:46:B6:66:0D:C3:B3:C4:A7:38:32
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       01856FDDDE106E3023CFB6444A368E54DDDD
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/hl17tu82AhZeZUa2Zg3Ds8SnODI.roa
Signing time:             Mon 02 Jan 2023 00:24:49 +0000
ROA not before:           Mon 02 Jan 2023 00:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.134.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:dd:de:10:6e:30:23:cf:b6:44:4a:36:8e:54:dd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Jan  2 00:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=865d7bb6ef3602165e6546b6660dc3b3c4a73832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:9f:a3:a4:e2:17:9a:6e:9c:8a:22:32:08:
                    21:d2:aa:95:2f:69:e4:5b:08:3a:fa:ca:46:db:91:
                    e7:e1:5d:d8:05:ef:ab:1c:41:1d:e2:89:ea:b4:8b:
                    f4:ae:81:64:af:92:cf:3d:77:19:6b:8a:15:e0:00:
                    28:9d:4a:20:c3:09:43:87:e4:df:f6:73:d8:64:3b:
                    f5:ab:48:fa:75:99:71:0b:a6:74:12:ea:46:53:24:
                    c9:33:07:0f:ba:db:ed:6e:26:37:6b:81:92:eb:f2:
                    cb:51:ae:dc:be:68:9e:51:aa:21:65:a2:0c:91:1a:
                    1c:4a:3f:57:c2:a3:7f:b3:c6:3d:58:68:b0:c5:60:
                    6f:3a:5f:ad:bf:ed:a5:ad:94:34:0e:e3:b2:47:68:
                    28:33:22:b1:f7:22:19:d5:0b:88:ef:e5:68:c1:f4:
                    7b:f5:6b:af:c5:6c:21:af:4a:bc:b7:67:30:55:b9:
                    e6:22:7f:a0:62:40:86:4b:e9:50:8d:02:26:4d:8e:
                    b9:32:73:bc:33:e7:81:70:4b:ba:09:a2:3e:29:33:
                    37:93:ae:88:23:71:fc:aa:fc:1b:28:32:ba:ca:27:
                    f3:d6:57:c0:af:a2:76:17:a6:f6:06:22:1d:40:53:
                    be:ef:c9:91:47:56:7a:8b:a2:57:14:51:5c:04:15:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:7B:B6:EF:36:02:16:5E:65:46:B6:66:0D:C3:B3:C4:A7:38:32
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/hl17tu82AhZeZUa2Zg3Ds8SnODI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:6c:f1:6b:78:e3:5b:31:e0:4f:a0:5f:24:cf:61:49:dc:
         69:8b:8c:96:fa:b8:5c:5d:2e:57:14:29:40:81:ba:38:ae:63:
         48:cd:e6:bb:2c:eb:c9:11:66:fb:0d:ba:4e:ac:23:fb:53:68:
         33:22:bb:d9:65:c7:0c:4b:ab:82:26:7a:72:84:57:3f:16:72:
         de:00:ed:4b:63:db:8e:67:7a:aa:82:d6:a0:42:66:7d:04:3b:
         5a:0b:3c:1f:95:43:e3:12:da:81:cb:29:46:65:a4:f8:e6:9e:
         36:15:de:ce:de:fd:07:ec:a7:6b:91:8d:dc:80:2a:28:5d:5a:
         c1:16:24:d4:74:f3:48:68:9c:81:9b:33:be:7c:0c:d6:1d:ae:
         c4:03:66:1b:a3:08:f0:40:ac:77:3f:10:5a:c9:1c:dd:90:d0:
         8f:53:64:82:4a:11:77:81:00:12:40:5d:fa:30:2f:57:9c:00:
         0b:c1:b7:63:34:80:66:e1:d4:d0:45:5d:2a:34:5e:2a:1a:a0:
         38:34:e3:fd:7b:df:4c:e8:52:fa:8d:92:16:57:92:e5:1a:a0:
         56:d0:84:4d:de:b4:27:c7:53:90:28:f1:d1:6e:2d:d7:3d:11:
         3e:43:4d:56:ae:19:e4:29:ea:df:c9:f8:f0:c2:53:29:9c:8d:
         ab:72:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:22 2024 by rpki-client on console-fra.rpki-client.org