Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GGMSUpa1pSJ7IvniBPs54OMQV-Y.roa
File:                     GGMSUpa1pSJ7IvniBPs54OMQV-Y.roa (raw, json)
Hash identifier:          D7OHAy1BEp4Mz/Ma3yOpFh7cGhA5zjCUlZ0zAqV0uhw=
Subject key identifier:   18:63:12:52:96:B5:A5:22:7B:22:F9:E2:04:FB:39:E0:E3:10:57:E6
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       0192048B933585DEC87168C5448884D0DAF9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GGMSUpa1pSJ7IvniBPs54OMQV-Y.roa
Signing time:             Wed 18 Sep 2024 09:51:48 +0000
ROA not before:           Wed 18 Sep 2024 09:51:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214170
IP address blocks:        79.124.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 29 Sep 2024 07:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:04:8b:93:35:85:de:c8:71:68:c5:44:88:84:d0:da:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Sep 18 09:51:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1863125296b5a5227b22f9e204fb39e0e31057e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:a0:81:ac:68:e5:cc:42:51:d0:39:d5:c3:
                    e9:ee:9f:40:2b:87:bd:2a:27:b3:bb:34:e2:59:de:
                    44:78:bc:c5:64:1a:3a:0c:75:ad:88:56:75:95:f5:
                    07:50:68:78:d1:96:6d:b5:e9:5f:94:81:87:cf:0b:
                    04:bc:47:e4:12:4c:f0:f0:e3:09:66:fe:4d:92:f4:
                    5c:f0:5c:9a:9b:29:07:d3:8b:df:84:37:27:04:af:
                    7b:1b:85:16:47:6f:db:30:c8:cb:55:5b:96:dd:20:
                    86:a6:45:7c:fe:d6:44:2b:94:53:4d:d5:c6:c6:96:
                    cf:3e:4d:82:8b:5d:6a:1e:45:2a:49:ed:e4:39:84:
                    cb:35:fb:fd:d8:9a:46:37:27:28:6f:87:73:1d:67:
                    5b:80:23:b0:b8:30:95:c0:28:74:e1:af:5b:1e:13:
                    a2:75:21:17:6f:e7:ff:86:bc:0b:10:c7:e8:5e:07:
                    b7:f8:04:d0:8d:b2:79:6c:c0:e2:bb:60:3b:5c:cf:
                    03:b8:c7:55:1f:92:29:be:a7:0d:92:9a:fd:6e:95:
                    86:0d:4a:78:88:4f:58:bf:73:d7:55:bd:52:29:6c:
                    42:96:28:39:23:23:af:0a:e4:68:98:d9:2e:93:00:
                    fc:dc:87:a8:aa:d5:24:ce:ed:a9:92:c5:da:7f:cd:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:12:52:96:B5:A5:22:7B:22:F9:E2:04:FB:39:E0:E3:10:57:E6
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GGMSUpa1pSJ7IvniBPs54OMQV-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.124.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:1e:dc:5a:79:cb:24:e5:7b:4d:54:86:fc:9e:a3:7f:fd:
         b4:e2:62:ee:87:0d:60:c4:bb:35:9b:ea:47:6b:51:bd:73:4e:
         ab:66:d4:1d:f0:65:c8:c1:45:6f:40:d9:3c:bb:ec:ae:cb:73:
         18:0e:28:49:92:bf:51:fe:fd:da:8d:e1:29:34:3b:f9:a7:48:
         1c:17:10:ee:92:56:6d:1a:fc:b2:fd:ed:db:af:eb:46:5c:df:
         c5:7a:d3:53:06:41:49:b0:7e:1a:35:4d:94:3f:2c:6f:7a:31:
         42:1f:44:c8:e6:83:b2:e4:ba:fa:83:1f:9b:97:3f:97:af:f3:
         d9:4d:64:71:f2:a6:85:75:75:54:e1:7a:ea:e2:11:15:4b:5e:
         9d:34:63:99:ef:23:42:ec:2c:50:f7:86:f0:be:9a:8b:84:00:
         61:15:13:fe:05:ff:15:cd:dd:6c:67:1b:03:53:11:af:9f:02:
         0b:84:de:9a:7f:ea:e1:ee:7c:7c:c4:f6:2f:28:05:29:b2:de:
         a5:ea:b5:db:a4:15:70:f5:ed:43:1b:4e:95:ab:d4:1f:64:f9:
         2a:55:a2:15:42:a3:85:b9:52:25:27:b7:db:1a:9f:31:a5:90:
         8e:bb:cc:4a:4b:ef:b5:9e:c2:5c:8d:d1:d5:98:12:57:0d:dc:
         ca:3f:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 10:26:23 2024 by rpki-client on console-ams.rpki-client.org