Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/Obo8JR6zTvxzwyIFIMk2Uft-o_U.roa
File:                     Obo8JR6zTvxzwyIFIMk2Uft-o_U.roa (raw, json)
Hash identifier:          TsnZ32n/0YUZdqXS+cY1UgHQUG3FbM35mRKaxaPtthY=
Subject key identifier:   39:BA:3C:25:1E:B3:4E:FC:73:C3:22:05:20:C9:36:51:FB:7E:A3:F5
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       0185727133D0A058B95B52C4A94EBC654086
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/Obo8JR6zTvxzwyIFIMk2Uft-o_U.roa
Signing time:             Mon 02 Jan 2023 12:24:59 +0000
ROA not before:           Mon 02 Jan 2023 12:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211936
IP address blocks:        79.110.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 02 Jul 2023 18:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:71:33:d0:a0:58:b9:5b:52:c4:a9:4e:bc:65:40:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan  2 12:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39ba3c251eb34efc73c3220520c93651fb7ea3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:e2:84:c9:7e:52:09:45:a5:b4:1e:87:7f:
                    53:85:23:f6:d0:73:b2:31:a5:df:27:9e:ea:69:6a:
                    03:00:3e:b4:5a:ca:70:1a:f3:8a:86:79:87:4e:56:
                    e9:b9:fa:9d:b5:50:a2:4f:d4:15:ea:81:7f:6d:e5:
                    1a:be:91:13:af:eb:97:fb:d9:46:0a:b8:6e:09:36:
                    94:3c:e1:cc:25:ad:b3:3b:6f:1f:4d:31:db:1e:5a:
                    a7:16:10:8f:84:91:22:7d:1e:17:89:18:a5:e5:80:
                    82:9e:a8:0d:03:2b:b9:a3:14:c3:aa:4e:55:b7:03:
                    55:ce:26:3c:b5:08:49:0d:97:69:b2:34:ab:c4:b6:
                    70:1f:a6:10:37:e9:1c:ad:75:6a:19:17:d5:ce:f9:
                    5f:46:07:5c:93:05:24:19:92:ca:7a:6b:0d:30:88:
                    59:06:0d:cd:bd:20:4c:34:98:b4:99:60:4d:55:2f:
                    c6:cf:00:dd:af:65:7b:28:a5:f3:9f:49:c2:b1:17:
                    c5:f3:43:e8:d2:d6:fe:86:f1:a9:ae:c5:d0:98:4a:
                    a5:1c:f1:00:a3:36:73:06:f5:0c:51:43:1e:9b:8f:
                    c1:6b:fd:65:7d:91:bc:17:46:40:4b:55:90:f3:64:
                    b9:d5:a7:f4:53:cd:32:6a:17:d8:e3:04:f9:6a:4e:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:3C:25:1E:B3:4E:FC:73:C3:22:05:20:C9:36:51:FB:7E:A3:F5
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/Obo8JR6zTvxzwyIFIMk2Uft-o_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:c6:8d:c3:48:ed:07:f3:79:f7:7f:36:3a:ff:a3:4b:7d:
         1e:37:c6:c3:d5:a9:5f:a7:8d:b5:72:d7:82:46:c1:ef:56:bc:
         39:69:2e:4f:6a:dd:02:54:0d:17:d5:e0:a1:31:8c:35:67:bc:
         f4:e0:e4:80:df:c8:e6:ea:24:87:42:93:e4:c2:b6:7e:15:0d:
         32:b3:61:27:34:a8:de:bf:b1:3c:8b:8d:42:db:5a:aa:27:14:
         26:7f:a5:99:6f:e8:13:63:f6:ad:6f:56:c1:03:ec:c2:bb:b7:
         9f:f3:1f:ba:2b:77:49:18:08:5d:62:a6:72:d3:0d:99:df:31:
         c5:3b:27:e8:7d:4e:a4:a6:10:5a:2d:e2:ca:ba:57:c0:9a:e3:
         81:56:de:c9:97:a2:c2:14:59:d5:56:b1:03:ce:03:d1:b7:57:
         2c:45:d9:e8:34:e1:44:de:36:89:de:32:e9:6e:51:3f:95:dc:
         74:ca:e7:c8:7b:e9:47:a9:dc:ea:35:1b:4c:e0:69:ae:4f:c0:
         85:2c:85:10:a7:84:14:3a:56:6e:53:8c:27:42:e8:25:5e:5d:
         82:b5:78:50:24:7a:fc:9a:8e:b6:bc:54:8b:16:57:fe:84:fb:
         08:3e:83:1b:10:c0:b6:3e:d2:72:36:2b:cc:d0:38:06:9f:6a:
         c2:dc:91:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org