Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/WYDSjXcddNelFuaOdxW0dL_1wDk.roa
File:                     WYDSjXcddNelFuaOdxW0dL_1wDk.roa (raw, json)
Hash identifier:          jXfbgCHtME2RbaJhKdk889WxAvoxvDISKo/1H28/sMo=
Subject key identifier:   59:80:D2:8D:77:1D:74:D7:A5:16:E6:8E:77:15:B4:74:BF:F5:C0:39
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       01857271333EAB7C5E126AF2A43E63110C06
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/WYDSjXcddNelFuaOdxW0dL_1wDk.roa
Signing time:             Mon 02 Jan 2023 12:24:59 +0000
ROA not before:           Mon 02 Jan 2023 12:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        79.110.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:71:33:3e:ab:7c:5e:12:6a:f2:a4:3e:63:11:0c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan  2 12:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5980d28d771d74d7a516e68e7715b474bff5c039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:7c:0a:4b:1e:14:7d:9d:72:d9:c0:94:30:
                    61:72:0c:06:e7:a8:1d:70:75:d3:d8:58:07:01:57:
                    08:04:01:13:fa:96:51:be:46:d3:92:ed:17:9e:cf:
                    0b:7d:ed:c3:9c:41:8d:9d:f6:59:ae:87:0b:d1:8b:
                    11:cc:b0:d0:0a:74:2f:bc:d9:06:ab:ff:28:c5:87:
                    28:a6:77:30:17:e6:f3:c2:cc:53:f4:ed:ba:ca:87:
                    23:7f:87:11:0e:72:b5:78:d7:80:03:0c:50:d4:fd:
                    e6:6a:91:d3:5e:3b:2b:32:11:94:d1:5d:e1:f9:b2:
                    a1:26:ee:95:2f:d1:93:bd:96:d6:f0:b0:0f:ef:00:
                    24:60:f0:f7:f3:54:6e:17:43:7f:97:33:94:d8:87:
                    41:cf:b9:1d:7e:8a:8a:fe:4f:5c:5e:9c:fd:09:2b:
                    fa:f3:fb:b8:92:03:78:a1:eb:0d:37:8a:d4:07:01:
                    8a:73:7d:53:a1:f7:78:c1:76:00:bc:4b:58:92:b6:
                    be:13:e8:dd:30:71:d3:94:d0:ff:78:24:cf:f1:a7:
                    f4:63:80:9c:13:f3:33:24:71:7b:fb:69:94:83:c7:
                    cf:1b:3b:f4:f9:de:70:93:1d:20:05:10:c7:35:c9:
                    69:9b:51:08:e8:ba:5a:b5:15:18:cd:df:2f:f1:8f:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:D2:8D:77:1D:74:D7:A5:16:E6:8E:77:15:B4:74:BF:F5:C0:39
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/WYDSjXcddNelFuaOdxW0dL_1wDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:bb:a9:a0:e6:65:5e:cf:56:e7:f8:e7:80:00:60:a7:54:
         66:80:19:a9:61:3c:fd:3f:d5:2d:79:59:63:08:17:02:3e:8d:
         2d:89:49:8b:36:5d:e9:84:41:71:ee:b1:2d:d2:d4:d7:7f:04:
         3a:56:f5:b0:c6:c1:b2:e8:28:85:fa:ba:14:79:69:eb:0e:53:
         d9:41:7a:3f:b1:0a:bd:6f:2b:bd:85:84:80:f9:04:dc:ae:37:
         08:d3:dd:89:35:92:3f:dd:98:0c:80:87:ca:85:77:68:c2:44:
         d0:4f:c1:8b:f3:2c:8d:03:b6:e2:02:e7:0c:c6:56:9a:e0:50:
         28:5e:73:52:c3:af:12:01:23:52:27:68:6b:11:e4:45:b5:25:
         d9:5e:6d:e7:e5:fb:30:5f:39:4e:8b:a3:aa:eb:7a:c0:2a:8b:
         69:23:04:aa:ad:29:a8:69:87:91:16:73:8b:3c:41:62:ef:e6:
         fd:f7:f6:42:d7:da:37:a1:ef:99:d4:8e:8c:22:9c:e5:9e:da:
         50:80:eb:78:8c:68:95:27:f1:bb:5b:53:6f:43:69:4d:05:e2:
         bf:92:0d:88:f1:fe:1f:97:3f:66:fd:15:b3:99:66:92:dd:a8:
         8e:10:04:23:b4:a2:64:a7:f9:89:90:d8:b6:03:96:bf:79:e2:
         de:75:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-fra.rpki-client.org