Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/DTxrqnKc5nLjxYl69-KlC88PyPg.roa
File:                     DTxrqnKc5nLjxYl69-KlC88PyPg.roa (raw, json)
Hash identifier:          OsYV8HSnR3AqdWao9LSvXQbhZvba9V9FgQA7hTQ4qGY=
Subject key identifier:   0D:3C:6B:AA:72:9C:E6:72:E3:C5:89:7A:F7:E2:A5:0B:CF:0F:C8:F8
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       01879973E2767091FF41656C2B5BCA3FE952
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/DTxrqnKc5nLjxYl69-KlC88PyPg.roa
Signing time:             Wed 19 Apr 2023 12:18:41 +0000
ROA not before:           Wed 19 Apr 2023 12:18:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9121
IP address blocks:        94.79.96.0/24 maxlen: 24
                          94.79.97.0/24 maxlen: 24
                          94.79.98.0/24 maxlen: 24
                          94.79.93.0/24 maxlen: 24
                          94.79.94.0/24 maxlen: 24
                          94.79.95.0/24 maxlen: 24
                          94.79.92.0/24 maxlen: 24
                          94.79.103.0/24 maxlen: 24
                          94.79.104.0/24 maxlen: 24
                          94.79.105.0/24 maxlen: 24
                          94.79.100.0/24 maxlen: 24
                          94.79.101.0/24 maxlen: 24
                          94.79.102.0/24 maxlen: 24
                          94.79.99.0/24 maxlen: 24
                          94.79.106.0/24 maxlen: 24
                          94.79.110.0/24 maxlen: 24
                          94.79.111.0/24 maxlen: 24
                          94.79.112.0/24 maxlen: 24
                          94.79.107.0/24 maxlen: 24
                          94.79.108.0/24 maxlen: 24
                          94.79.109.0/24 maxlen: 24
                          94.79.117.0/24 maxlen: 24
                          94.79.118.0/24 maxlen: 24
                          94.79.114.0/24 maxlen: 24
                          94.79.115.0/24 maxlen: 24
                          94.79.116.0/24 maxlen: 24
                          94.79.113.0/24 maxlen: 24
                          94.79.124.0/24 maxlen: 24
                          94.79.125.0/24 maxlen: 24
                          94.79.121.0/24 maxlen: 24
                          94.79.122.0/24 maxlen: 24
                          94.79.123.0/24 maxlen: 24
                          94.79.119.0/24 maxlen: 24
                          94.79.120.0/24 maxlen: 24
                          94.79.126.0/24 maxlen: 24
                          94.79.127.0/24 maxlen: 24
                          94.79.64.0/24 maxlen: 24
                          94.79.68.0/24 maxlen: 24
                          94.79.69.0/24 maxlen: 24
                          94.79.70.0/24 maxlen: 24
                          94.79.71.0/24 maxlen: 24
                          94.79.65.0/24 maxlen: 24
                          94.79.66.0/24 maxlen: 24
                          94.79.67.0/24 maxlen: 24
                          94.79.75.0/24 maxlen: 24
                          94.79.76.0/24 maxlen: 24
                          94.79.77.0/24 maxlen: 24
                          94.79.78.0/24 maxlen: 24
                          94.79.72.0/24 maxlen: 24
                          94.79.73.0/24 maxlen: 24
                          94.79.74.0/24 maxlen: 24
                          94.79.82.0/24 maxlen: 24
                          94.79.83.0/24 maxlen: 24
                          94.79.84.0/24 maxlen: 24
                          94.79.85.0/24 maxlen: 24
                          94.79.79.0/24 maxlen: 24
                          94.79.80.0/24 maxlen: 24
                          94.79.81.0/24 maxlen: 24
                          94.79.89.0/24 maxlen: 24
                          94.79.90.0/24 maxlen: 24
                          94.79.91.0/24 maxlen: 24
                          94.79.86.0/24 maxlen: 24
                          94.79.87.0/24 maxlen: 24
                          94.79.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:99:73:e2:76:70:91:ff:41:65:6c:2b:5b:ca:3f:e9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Apr 19 12:18:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d3c6baa729ce672e3c5897af7e2a50bcf0fc8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:bf:a5:4f:ff:5c:23:57:9b:cd:5c:af:93:
                    af:b6:6a:59:2a:ab:79:05:6a:88:47:48:11:f0:14:
                    6a:fb:50:f9:af:57:ec:b9:58:fa:77:4e:d8:c5:09:
                    98:42:57:68:19:3d:c8:67:e0:39:62:37:9f:2f:80:
                    82:a5:b2:6f:bd:24:78:50:0a:d3:78:33:34:b1:3e:
                    7d:08:bc:93:fc:42:e4:1b:38:22:97:35:93:d5:18:
                    50:59:c1:fb:bb:97:fe:ef:ec:a2:59:c9:70:a0:c6:
                    f0:90:bb:69:b6:81:69:0f:47:63:d1:9e:cb:22:8d:
                    6a:86:58:56:fd:05:91:03:2b:a6:3a:ef:ba:3a:7d:
                    e8:41:b6:d5:c0:09:65:d9:14:df:2a:0e:63:9a:48:
                    e3:18:1c:16:b3:08:97:df:c6:68:c8:d4:f7:72:4f:
                    03:50:b5:4a:b0:b0:b6:40:82:cc:18:12:42:91:4e:
                    10:22:88:f3:63:83:66:1e:b5:c6:5a:3e:10:47:9c:
                    b7:aa:90:bd:69:80:d9:5d:fb:39:12:e1:e0:71:1c:
                    71:73:ed:7c:77:97:e1:a6:f7:65:29:4e:d9:bd:d7:
                    92:16:a6:3d:e8:d6:fd:df:90:7f:50:f7:ad:4b:7b:
                    46:84:ef:01:ea:bc:15:1b:62:8a:0a:8d:92:8e:a5:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3C:6B:AA:72:9C:E6:72:E3:C5:89:7A:F7:E2:A5:0B:CF:0F:C8:F8
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/DTxrqnKc5nLjxYl69-KlC88PyPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.79.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:5d:bd:ff:89:15:47:f7:72:86:15:83:96:58:4c:0e:89:
         fc:64:b2:f8:6d:79:3d:94:ef:d6:cd:c8:e2:af:cd:af:1f:f0:
         d0:98:a5:e1:65:34:e1:67:9b:7a:f1:03:27:5b:c4:3e:99:0a:
         0e:71:54:56:5f:5f:cd:13:09:ed:14:e8:7c:7e:ee:e0:c4:9c:
         80:6a:b3:7a:01:4b:19:55:81:fc:ac:48:4e:4d:58:6b:c0:4c:
         c3:fe:07:b4:b0:d7:a7:72:3c:1c:a5:3e:f1:e2:5d:0c:22:cc:
         58:2a:9e:f9:d3:c2:f9:b6:27:18:76:d5:9f:1a:88:e0:8c:4d:
         7c:06:5e:44:bc:af:3d:0e:46:ca:cf:36:d6:87:ee:5f:34:d7:
         25:10:26:99:27:98:d5:b4:0a:fe:4f:7d:1e:c4:a4:14:04:56:
         48:a6:c7:f0:e9:62:ec:82:fd:70:72:5d:c0:07:55:44:75:73:
         f9:a2:d3:df:2c:8c:5f:a1:35:e6:ce:cb:f8:0b:49:f4:3e:15:
         c1:f1:20:94:aa:13:ae:a0:fd:55:ea:1f:2e:fe:83:39:08:59:
         c9:49:35:20:15:ed:ca:3a:18:b0:ce:a5:d6:ed:2f:1c:e8:7a:
         4d:43:4a:8f:d9:b5:bf:b4:6d:43:17:7e:a4:9e:2e:b9:a7:db:
         8c:a7:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:42 2023 by rpki-client on console.sobornost.net