Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/rVdrbuwB_Cv4w4IuFBzLhXGw2aw.roa
File:                     rVdrbuwB_Cv4w4IuFBzLhXGw2aw.roa (raw, json)
Hash identifier:          Bq9jgdf8r114BR7GHhJPQpzyHm1lrDfzz00mhLcn0z4=
Subject key identifier:   AD:57:6B:6E:EC:01:FC:2B:F8:C3:82:2E:14:1C:CB:85:71:B0:D9:AC
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       018A239E1F71EC9D947C8406AA8F0F00EC26
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/rVdrbuwB_Cv4w4IuFBzLhXGw2aw.roa
Signing time:             Wed 23 Aug 2023 18:17:59 +0000
ROA not before:           Wed 23 Aug 2023 18:17:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        79.110.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Sep 2023 15:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:23:9e:1f:71:ec:9d:94:7c:84:06:aa:8f:0f:00:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Aug 23 18:17:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad576b6eec01fc2bf8c3822e141ccb8571b0d9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:58:4e:3a:ba:22:e0:a1:7e:a0:53:0b:2c:
                    b4:7f:3a:06:f6:5c:b0:5d:7f:35:cc:13:06:43:7c:
                    3c:d7:9f:b3:4f:e6:2a:96:27:f2:f1:71:8a:b6:8b:
                    58:c8:d6:4c:c5:01:ad:27:fb:e3:37:b7:dc:d0:b3:
                    ef:6f:18:85:df:f4:97:63:12:f2:39:71:54:28:fe:
                    1c:f2:79:b5:ee:e1:f0:c3:fe:b5:da:31:73:70:ac:
                    2c:5a:71:c5:5a:a8:56:d9:a6:27:b9:4a:d9:fe:8b:
                    34:ef:31:b6:b4:15:d9:cb:06:bf:b7:6e:b5:72:27:
                    31:42:aa:02:4b:45:74:fa:36:95:61:e2:30:1d:8e:
                    f2:5a:88:4b:9c:24:4d:5b:59:bb:35:ce:40:e9:52:
                    87:34:91:8a:9d:1c:10:6f:8f:f8:de:9c:f5:16:51:
                    7f:e6:a4:4c:43:f5:2d:28:51:c1:60:5b:42:11:b3:
                    fb:48:7b:95:7f:ab:c1:3c:c7:eb:c1:cf:c6:09:c3:
                    b7:61:23:82:7f:6a:5b:95:b6:15:2b:05:d1:55:2c:
                    f3:9f:2f:34:29:6c:14:6b:93:49:d4:61:27:b9:ad:
                    a9:3d:b7:a6:4b:96:34:da:9a:4c:a2:71:b8:c0:48:
                    18:d0:ab:99:c2:21:af:6f:aa:a0:9e:6d:db:70:94:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:6B:6E:EC:01:FC:2B:F8:C3:82:2E:14:1C:CB:85:71:B0:D9:AC
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/rVdrbuwB_Cv4w4IuFBzLhXGw2aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e4:be:2a:33:d0:e8:f5:f6:8f:9f:79:64:dc:63:06:3a:b3:
         8e:de:66:0d:0e:98:17:61:3e:a4:7d:ff:db:b5:fc:d3:2e:7e:
         d3:88:76:42:64:82:4e:cb:47:56:b1:fe:29:f8:b7:1c:f3:76:
         c5:79:8e:57:4e:af:eb:26:f3:fa:12:74:50:ef:ae:ae:14:66:
         4a:bd:66:92:dc:0d:69:78:e5:96:ff:f2:9b:c2:eb:57:97:5a:
         23:2b:77:6a:ad:3b:0a:3d:69:2e:83:de:e7:bc:51:05:74:6a:
         61:e7:12:92:d4:ff:1c:72:a2:f3:02:ed:47:9d:c8:c2:c6:cf:
         4e:0d:41:b6:89:c9:3b:32:c4:78:ba:1a:ea:71:d0:65:0a:eb:
         b9:59:8a:7a:ec:b9:15:2a:d0:28:5b:6e:7d:9b:c0:6e:ae:87:
         e7:ed:66:51:3b:d5:52:bb:bc:6f:af:a7:93:65:52:31:32:14:
         4e:d9:f0:c2:b3:68:d4:c0:ca:f0:83:8e:0a:ac:4f:46:19:75:
         77:f0:72:92:39:1c:02:74:ee:df:50:46:c7:c8:9d:47:d4:56:
         f4:f8:c4:c9:7b:a3:c8:49:37:b9:4f:bf:df:18:80:ca:78:4e:
         7b:46:01:c5:3b:fb:f7:85:47:6d:77:60:09:28:0b:78:ed:65:
         e6:e2:4f:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYojnh9x7J2UfIQGqo8PAOwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjMwODIzMTgxNzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU3NmI2ZWVjMDFmYzJiZjhjMzgyMmUxNDFjY2I4NTcxYjBkOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQpYTjq6IuChfqBTCyy0fzoG9lyw
XX81zBMGQ3w815+zT+Yqlify8XGKtotYyNZMxQGtJ/vjN7fc0LPvbxiF3/SXYxLy
OXFUKP4c8nm17uHww/612jFzcKwsWnHFWqhW2aYnuUrZ/os07zG2tBXZywa/t261
cicxQqoCS0V0+jaVYeIwHY7yWohLnCRNW1m7Nc5A6VKHNJGKnRwQb4/43pz1FlF/
5qRMQ/UtKFHBYFtCEbP7SHuVf6vBPMfrwc/GCcO3YSOCf2pblbYVKwXRVSzzny80
KWwUa5NJ1GEnua2pPbemS5Y02ppMonG4wEgY0KuZwiGvb6qgnm3bcJRATQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1Xa27sAfwr+MOCLhQcy4VxsNmsMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvclZkcmJ1d0JfQ3Y0dzRJdUZCekxoWEd3MmF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26nMA0G
CSqGSIb3DQEBCwUAA4IBAQBv5L4qM9Do9faPn3lk3GMGOrOO3mYNDpgXYT6kff/b
tfzTLn7TiHZCZIJOy0dWsf4p+Lcc83bFeY5XTq/rJvP6EnRQ766uFGZKvWaS3A1p
eOWW//KbwutXl1ojK3dqrTsKPWkug97nvFEFdGph5xKS1P8ccqLzAu1HncjCxs9O
DUG2ick7MsR4uhrqcdBlCuu5WYp67LkVKtAoW259m8Burofn7WZRO9VSu7xvr6eT
ZVIxMhRO2fDCs2jUwMrwg44KrE9GGXV38HKSORwCdO7fUEbHyJ1H1Fb0+MTJe6PI
STe5T7/fGIDKeE57RgHFO/v3hUdtd2AJKAt47WXm4k+b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org