Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/exGtz2PyjjEBJDgKo31GoU8ZRdg.roa
File:                     exGtz2PyjjEBJDgKo31GoU8ZRdg.roa (raw, json)
Hash identifier:          d6RR8G+e4RyhVppHhtQHBedI/QZpbCHalwCUC5ApmKA=
Subject key identifier:   7B:11:AD:CF:63:F2:8E:31:01:24:38:0A:A3:7D:46:A1:4F:19:45:D8
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       018A239E1FC3835B169DD62D20B3ED543EA3
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/exGtz2PyjjEBJDgKo31GoU8ZRdg.roa
Signing time:             Wed 23 Aug 2023 18:17:59 +0000
ROA not before:           Wed 23 Aug 2023 18:17:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        79.110.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Oct 2023 23:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:23:9e:1f:c3:83:5b:16:9d:d6:2d:20:b3:ed:54:3e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Aug 23 18:17:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b11adcf63f28e310124380aa37d46a14f1945d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:e7:0d:76:22:06:07:52:90:22:9c:69:a0:
                    d3:a1:a4:d9:60:9f:9a:5e:ab:47:72:ad:e3:9d:5d:
                    46:7b:e4:d4:44:64:88:b1:9f:ef:ff:0b:af:62:c8:
                    65:43:4a:7c:30:a7:1a:d9:ed:47:08:65:c2:09:27:
                    36:ac:78:30:41:50:da:35:f1:2c:be:d5:2e:3d:c6:
                    28:94:4d:f1:0a:15:c7:ca:10:44:3b:ef:e3:41:b8:
                    e4:c1:85:d7:70:ad:5c:aa:3c:71:ef:b6:bb:0d:24:
                    75:e2:ad:e4:10:98:a0:ea:32:42:c8:33:3a:43:76:
                    a1:89:95:b5:9e:50:a0:e0:31:b8:82:7e:bc:81:43:
                    41:8b:53:fa:57:8c:e3:bf:1c:71:f6:af:94:4f:a1:
                    d1:72:35:13:c7:aa:e5:0b:0f:35:2e:31:1b:ea:6b:
                    b7:6a:9a:16:b8:57:2e:ad:07:51:1e:83:64:7f:b8:
                    22:aa:d0:d2:1d:93:fb:8d:8a:34:e7:de:ae:cb:94:
                    75:51:6f:70:5d:01:bd:f8:5a:92:1e:90:7f:87:fd:
                    ad:e2:b5:f4:3c:a3:9e:53:2c:51:13:07:8f:ec:e9:
                    ed:7f:2e:95:c2:bb:12:ac:3f:e2:c4:49:06:31:ea:
                    bf:12:2a:1e:7b:3d:ba:eb:f1:9b:7b:da:f8:9f:66:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:AD:CF:63:F2:8E:31:01:24:38:0A:A3:7D:46:A1:4F:19:45:D8
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/exGtz2PyjjEBJDgKo31GoU8ZRdg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:28:65:9a:4a:36:13:14:e7:7a:18:8d:3b:b1:58:53:3a:
         e8:09:30:3d:a0:c5:35:2c:d1:f1:a7:e2:f3:79:4f:70:ed:3c:
         bd:dc:80:17:88:0a:85:1b:25:fe:10:d9:be:ff:44:e7:14:f5:
         d3:5f:df:0b:41:3f:14:8d:61:f0:91:e9:ba:45:56:1f:67:73:
         5c:24:2f:62:ac:e6:41:df:d3:50:07:72:8d:de:b7:15:f4:00:
         4f:0e:fc:bd:81:67:ad:b2:78:64:c6:7e:43:da:09:00:68:b7:
         e4:cb:8c:94:a6:41:51:a7:0c:2e:cf:2f:94:00:56:88:a8:a9:
         67:f0:b4:cf:2d:10:4c:45:51:f8:af:12:a9:3e:e2:f3:06:77:
         bc:5e:3e:47:36:75:0c:60:a5:81:e5:66:2e:8d:82:2f:d2:83:
         a9:63:2c:c4:ef:c1:e1:81:1c:db:b4:30:e7:ea:be:df:77:5c:
         14:a8:40:ff:89:95:b4:da:67:4d:e3:15:99:75:6d:d4:e7:cd:
         0e:00:ae:8f:88:e2:b9:a8:7e:36:75:60:ae:78:c1:ef:00:f6:
         5f:f2:e8:84:22:bb:2b:35:0b:4d:88:30:13:04:c7:f3:72:67:
         eb:d0:76:75:4a:94:6c:84:cf:26:cf:c9:d9:9f:97:cb:bb:6f:
         b7:18:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org