Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ftUitigbMVAEVLFJeExcNoLdyoQ.roa
File:                     ftUitigbMVAEVLFJeExcNoLdyoQ.roa (raw, json)
Hash identifier:          xM4iDLWclleLjnIh8udu8JwfSFQuIFrcTSs1bvPcKKw=
Subject key identifier:   7E:D5:22:B6:28:1B:31:50:04:54:B1:49:78:4C:5C:36:82:DD:CA:84
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       01856ED4F522B625B31E0BFD0ACB348CAA61
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ftUitigbMVAEVLFJeExcNoLdyoQ.roa
Signing time:             Sun 01 Jan 2023 19:35:28 +0000
ROA not before:           Sun 01 Jan 2023 19:35:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198821
IP address blocks:        5.8.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:f5:22:b6:25:b3:1e:0b:fd:0a:cb:34:8c:aa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 19:35:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ed522b6281b31500454b149784c5c3682ddca84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:67:96:f5:5b:19:7e:ab:98:c9:18:a7:a8:
                    33:d1:59:b8:1a:73:cf:fd:67:8e:50:f6:83:98:46:
                    99:37:7c:cc:93:7d:0a:78:8a:b9:78:3f:41:f0:11:
                    bc:c0:08:48:a6:22:9f:2e:f4:4d:09:6e:fd:8d:62:
                    b7:69:56:6e:6a:66:d3:99:fb:e9:ab:4c:e5:0d:65:
                    44:b8:4a:aa:f6:79:3d:15:1b:58:2a:3b:ac:80:44:
                    9a:11:e1:9f:ae:ff:a7:ce:2b:64:fe:ee:4a:c3:63:
                    26:d1:91:5c:b5:34:de:41:66:bd:51:22:f0:f1:8f:
                    d1:f0:32:9a:b4:33:a5:ae:2e:df:8a:dd:37:3a:c7:
                    69:77:f4:91:be:a3:2d:63:d6:ff:68:26:d6:41:a8:
                    a0:e2:19:cf:65:7f:90:7b:13:8d:d5:7e:39:58:55:
                    ce:6a:22:33:5c:4e:88:a2:84:38:05:24:38:66:ba:
                    4f:66:e4:da:e5:ed:24:a5:d5:8b:4c:e6:0b:b0:e7:
                    e8:82:26:7d:30:c4:8c:af:14:da:33:0d:45:29:d0:
                    c7:fe:11:12:35:9d:cc:fc:92:5a:5f:41:22:a9:90:
                    1b:1e:92:66:b4:bb:4e:4e:fe:bd:8f:43:2b:2b:90:
                    f3:07:51:43:d0:22:d8:97:d3:bc:a0:66:16:a7:dc:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:22:B6:28:1B:31:50:04:54:B1:49:78:4C:5C:36:82:DD:CA:84
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ftUitigbMVAEVLFJeExcNoLdyoQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4c:4f:52:7c:22:d9:b0:e4:f7:11:28:63:56:8d:58:4b:7d:
         4e:df:6b:3f:be:f9:9e:08:3b:de:f7:8e:0f:54:b8:5b:e7:fd:
         b3:6a:5b:a5:cc:62:fb:1a:94:38:2b:89:41:34:bd:cb:f3:10:
         da:44:ee:64:7e:e3:4a:e5:72:cc:1f:78:2b:98:03:fb:10:39:
         49:d7:76:0e:a7:a6:bd:f3:0d:49:d5:14:43:61:f5:74:bf:97:
         19:3b:7d:eb:1e:a2:b0:5c:83:9f:f4:9c:49:6a:a8:c1:bf:d8:
         4c:85:4e:50:eb:da:53:79:19:1d:88:f3:a3:b3:a4:19:08:fd:
         c8:cb:45:7c:2a:8b:35:df:37:37:5c:9b:a7:34:59:88:be:67:
         ae:86:d8:dc:b2:07:85:9d:80:6b:76:5b:3d:5d:e5:7b:41:98:
         6b:18:c9:8b:be:10:4c:71:28:3c:ea:2b:6c:d9:56:45:18:95:
         b2:59:1c:23:2d:5c:97:3a:e7:f0:52:ca:e0:bd:18:48:d5:af:
         29:9b:6d:ee:44:a2:05:8a:6f:b5:5b:6f:2c:f6:77:ad:ea:0a:
         5c:4b:d1:b8:8c:56:23:75:05:73:1c:62:44:f6:e6:d0:ad:e6:
         52:de:a6:2d:b3:43:f1:43:a2:1c:a2:c6:a4:8b:3b:b3:53:c5:
         36:83:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org