Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/IiRVMsVbLbsr8i15zeTTIHchhM8.roa
File:                     IiRVMsVbLbsr8i15zeTTIHchhM8.roa (raw, json)
Hash identifier:          TSK65ukq0e2HA3evLuXrdq31m1K/8Ns4rB3NWta4IrY=
Subject key identifier:   22:24:55:32:C5:5B:2D:BB:2B:F2:2D:79:CD:E4:D3:20:77:21:84:CF
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       0187141D7258EBC3F6616575BD0DB3E89E08
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/IiRVMsVbLbsr8i15zeTTIHchhM8.roa
Signing time:             Fri 24 Mar 2023 14:54:46 +0000
ROA not before:           Fri 24 Mar 2023 14:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61084
IP address blocks:        79.110.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 May 2023 12:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:14:1d:72:58:eb:c3:f6:61:65:75:bd:0d:b3:e8:9e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Mar 24 14:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22245532c55b2dbb2bf22d79cde4d320772184cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:c5:97:81:5f:a7:79:10:b5:cb:c3:2b:4e:
                    1a:4e:2d:3d:fb:19:ed:29:5a:c4:00:c6:e2:46:48:
                    dc:ce:81:03:31:a8:35:c5:25:d6:b8:82:4c:35:7c:
                    bc:a3:fd:01:5a:7b:47:ce:8a:8f:c9:9a:a6:47:d9:
                    d2:40:7a:00:88:da:2c:cf:40:ab:bd:9d:6d:00:56:
                    50:8e:90:43:7e:26:3b:e0:cc:31:10:7b:3b:9c:65:
                    7b:26:bd:84:79:a5:af:df:b9:5d:57:91:cf:ec:05:
                    fd:2b:4c:6f:69:82:3c:9b:8c:6a:38:2f:de:b4:b6:
                    83:4b:49:fc:42:ed:29:f9:2f:12:a4:dd:ae:75:86:
                    29:aa:71:43:25:8b:a8:16:19:89:d4:07:21:f5:ea:
                    a4:ee:39:1c:fc:17:a5:5b:bd:f0:76:cc:b6:79:3c:
                    9b:10:bb:fe:23:63:ed:47:7e:89:f1:d3:25:44:b4:
                    40:cc:1a:f8:d5:54:ac:83:58:f4:c1:e1:6e:d8:33:
                    6b:b7:60:a3:94:1f:74:36:69:a2:ba:7a:6b:32:6e:
                    34:ca:8a:2c:c7:53:22:ed:e1:e8:d1:0a:77:76:2b:
                    68:26:4f:ed:2f:0a:63:13:0b:f0:1e:69:e0:c2:15:
                    6a:c8:b3:d4:bc:54:91:cc:0d:25:1b:be:80:1c:b8:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:24:55:32:C5:5B:2D:BB:2B:F2:2D:79:CD:E4:D3:20:77:21:84:CF
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/IiRVMsVbLbsr8i15zeTTIHchhM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:09:43:49:3e:15:ab:d5:2e:94:de:ef:f4:bc:91:78:c1:63:
         fc:03:19:11:93:9e:c7:fa:51:01:b2:71:ad:a0:14:ee:25:0f:
         74:49:50:09:c7:6c:80:2f:bd:54:5c:28:28:db:52:f2:9c:09:
         4a:26:a2:ca:25:2b:1b:a5:16:e2:ba:f2:b3:28:cb:88:08:b0:
         a7:27:f3:c3:c5:cb:16:2b:b9:54:30:47:aa:0b:a1:1d:26:61:
         be:5b:b6:6d:e1:84:65:fd:05:f8:ec:9d:8b:2d:3a:33:76:b1:
         4e:5e:08:fa:77:9d:e9:f3:78:d6:2d:39:74:63:ea:c3:54:15:
         7b:9e:62:13:e3:31:e4:05:f6:b7:97:5a:a7:fa:e7:d7:c4:4f:
         8c:dc:74:9b:b0:7d:da:2f:10:0d:a1:1e:5e:0b:04:73:e7:c3:
         5b:fe:64:d4:3f:27:8b:e2:71:b3:6d:ff:a2:e4:49:8c:5c:5d:
         e1:56:e2:cf:ef:f2:7f:31:3b:70:5c:fd:49:e7:be:3f:23:05:
         c8:6c:db:a1:18:dd:30:0c:7c:5f:98:2d:b3:10:83:55:d3:9b:
         18:14:da:5c:89:92:44:fb:39:f0:8e:90:18:95:3a:76:5b:b0:
         3a:21:7c:b0:0f:21:97:aa:7a:b8:1b:a2:30:8a:79:e9:21:81:
         98:0a:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org