Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/uXG-h5_mwPCul1iLqgCRSPNq_1M.roa
File:                     uXG-h5_mwPCul1iLqgCRSPNq_1M.roa (raw, json)
Hash identifier:          5E1DsWUQZKhxGbU22LcDfEjcIKCnqJuyM3/nImjp+QQ=
Subject key identifier:   B9:71:BE:87:9F:E6:C0:F0:AE:97:58:8B:AA:00:91:48:F3:6A:FF:53
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       018572713263F06CA99E04D2BB4F17732972
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/uXG-h5_mwPCul1iLqgCRSPNq_1M.roa
Signing time:             Mon 02 Jan 2023 12:24:58 +0000
ROA not before:           Mon 02 Jan 2023 12:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        79.110.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 02 Jul 2023 18:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:71:32:63:f0:6c:a9:9e:04:d2:bb:4f:17:73:29:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan  2 12:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b971be879fe6c0f0ae97588baa009148f36aff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:26:85:ec:30:b1:56:af:42:9c:cf:81:d8:
                    90:2e:4c:59:6f:35:3a:d6:13:df:38:d7:b9:82:b9:
                    d9:09:5e:d3:18:85:04:6e:9e:d8:22:b9:f6:b7:89:
                    a1:eb:04:b2:25:d8:52:46:af:47:03:14:92:79:e3:
                    a8:07:10:1d:57:01:a2:fe:6e:5e:ca:26:27:d3:2b:
                    15:ff:e6:1a:d4:80:02:77:98:64:98:e0:15:cf:76:
                    4e:38:69:9c:6f:94:0a:5b:b6:a1:fb:a9:9a:12:51:
                    63:12:4a:0c:b2:39:4b:80:dc:c8:6a:e8:d2:c9:9e:
                    d7:27:5e:f5:0e:63:55:83:68:68:1d:b6:9a:de:d6:
                    fd:29:0f:c5:a2:f2:a9:76:00:06:e9:ec:e6:da:42:
                    e6:89:d3:27:ad:e3:f7:e5:63:9e:12:a4:48:b7:c1:
                    f6:5f:98:b6:76:2a:c1:73:4a:77:91:96:7f:3c:a9:
                    5d:d3:af:07:cf:2f:c0:41:0d:b7:d6:72:4f:e4:a0:
                    2f:39:95:03:0e:e6:b3:64:99:0c:2b:06:af:f9:42:
                    f6:8c:ff:3a:4a:e0:2f:1c:1f:4f:d4:e5:7d:44:7b:
                    b4:02:c5:81:c9:f4:32:8a:fc:80:32:95:50:98:92:
                    3a:a8:12:5d:94:03:d3:1c:66:78:b9:f2:a2:d6:0b:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:BE:87:9F:E6:C0:F0:AE:97:58:8B:AA:00:91:48:F3:6A:FF:53
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/uXG-h5_mwPCul1iLqgCRSPNq_1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:b2:a9:e4:63:af:be:bb:62:0c:95:c2:31:ee:4c:16:1c:
         42:b5:aa:ad:6b:a9:1f:03:65:bd:9c:dc:fe:c0:75:ee:87:71:
         8d:81:88:a7:64:77:ab:9e:88:c1:27:0d:34:80:91:17:3c:a7:
         91:92:95:77:4a:89:77:1b:19:aa:6d:db:1e:f3:cf:83:09:17:
         cd:4d:d7:24:b0:3e:9b:7d:b7:6d:42:f9:c0:27:94:fe:41:00:
         51:8a:b3:86:d2:19:50:6d:74:d0:f1:01:08:d3:e1:db:42:a2:
         4a:5e:7b:37:11:c4:71:3d:83:3a:95:ee:c2:47:81:8c:fd:48:
         a6:6f:d8:67:9c:1d:e4:86:1b:ec:51:e8:6c:24:b7:8b:cd:e1:
         2b:a3:cf:de:fc:1c:f9:eb:42:2d:26:8d:db:2c:85:ec:1a:10:
         f4:1e:ff:fc:36:6a:4e:eb:63:c7:63:48:e8:a5:b8:14:28:07:
         38:0d:5d:80:3f:42:10:f0:04:ae:c3:2c:01:b4:39:13:9b:2d:
         88:ae:29:67:5c:a3:d1:8e:de:8d:a1:0d:16:62:80:92:3b:06:
         eb:3a:03:ba:7b:0f:31:ab:05:91:66:ac:27:7e:b4:d3:54:1e:
         6d:24:cc:7e:41:31:6e:04:65:2b:7d:94:1d:0a:f3:9a:4a:21:
         6d:14:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org