Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/8yVyIEWL31UAA08XsDh-bQ_vj54.roa
File:                     8yVyIEWL31UAA08XsDh-bQ_vj54.roa (raw, json)
Hash identifier:          NMczm0vVXzuICiCUY65CYBaxsG5lacWUPgrj2rUUVT0=
Subject key identifier:   F3:25:72:20:45:8B:DF:55:00:03:4F:17:B0:38:7E:6D:0F:EF:8F:9E
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       018571278C713B3CF660C1C8BA135C8B4FCB
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/8yVyIEWL31UAA08XsDh-bQ_vj54.roa
Signing time:             Mon 02 Jan 2023 06:24:55 +0000
ROA not before:           Mon 02 Jan 2023 06:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57631
IP address blocks:        80.79.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:8c:71:3b:3c:f6:60:c1:c8:ba:13:5c:8b:4f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  2 06:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3257220458bdf5500034f17b0387e6d0fef8f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:a4:6e:db:3e:7f:6b:08:fb:6f:82:c5:b7:
                    7c:d5:00:c0:7e:ff:42:64:52:a9:de:dc:99:72:8c:
                    9d:77:06:8a:81:a1:ff:77:8c:1e:7e:1b:66:a4:d1:
                    5c:ec:a5:81:27:38:ec:19:35:98:94:84:d7:ef:c1:
                    6f:eb:35:1c:df:8a:71:d2:cb:67:5d:44:ab:df:10:
                    1c:67:ca:34:32:48:2a:43:1c:15:10:98:ee:9d:1c:
                    08:1f:20:bf:eb:d6:7f:a3:a9:b8:69:58:bd:84:53:
                    87:9b:cf:e0:e6:26:67:70:73:6b:47:28:cd:d0:34:
                    48:99:78:7f:85:f6:21:2f:e3:86:17:d3:57:70:11:
                    37:77:ea:83:bb:44:34:48:b7:4f:12:38:89:43:b7:
                    a3:0c:d3:bd:0e:a8:9f:b9:4f:cc:0d:77:24:9c:9b:
                    b5:a4:d6:b5:bf:cd:15:ee:11:4d:96:66:59:c7:cd:
                    3d:f8:26:a0:37:f0:19:de:e1:67:15:be:38:83:8c:
                    2a:f7:a2:3d:9a:02:48:b7:41:e0:b3:06:9e:78:6a:
                    04:81:2e:1f:a2:75:b0:80:1b:31:9f:57:86:69:d6:
                    d9:e7:97:81:d5:82:5d:4e:fb:26:74:fb:11:09:e6:
                    fb:50:90:8a:20:92:b4:16:33:2d:ab:87:7d:fc:91:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:25:72:20:45:8B:DF:55:00:03:4F:17:B0:38:7E:6D:0F:EF:8F:9E
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/8yVyIEWL31UAA08XsDh-bQ_vj54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:48:3f:38:79:da:14:12:52:4f:09:7a:bb:fb:ab:ee:8e:
         8a:87:24:1c:83:6e:82:ea:79:fe:57:47:b8:6e:cc:bc:7d:f4:
         c4:0f:98:c7:dd:2d:8a:45:d9:1a:91:4b:89:d5:b1:56:48:b5:
         c1:89:9d:5e:cf:03:b6:15:a4:0e:90:2f:6b:ee:6d:92:ad:cb:
         79:18:6a:3f:e0:65:16:ca:ca:74:77:b2:9c:3d:47:96:3d:f1:
         2e:7e:59:f7:e1:33:8f:98:20:68:9f:04:1c:ac:2f:42:48:9f:
         36:35:ea:ac:79:d3:6e:ab:9c:3c:28:b3:a6:fc:d7:cd:be:5f:
         29:0d:34:45:08:8f:94:fa:43:73:d5:78:1d:5e:15:09:84:6d:
         f0:b9:e9:f6:a8:3f:54:40:0c:f2:98:b8:36:9c:ce:80:7e:f3:
         85:07:63:0e:48:2b:20:d5:e8:b7:eb:2d:76:b0:1b:5f:de:c0:
         aa:60:2f:42:db:ae:19:42:03:4d:92:c4:75:37:79:cc:80:44:
         16:5e:e5:27:74:ae:fb:10:ae:b7:3b:91:93:63:d2:7d:b6:2c:
         2d:8f:9b:76:ae:48:41:32:30:7b:81:4d:d6:3f:66:ba:af:46:
         c6:e0:f1:a9:70:cf:5a:68:47:ce:c0:a7:b2:ce:ed:3c:d7:6c:
         2d:33:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:13 2024 by rpki-client on console.sobornost.net