Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uCElI17c1qOlpVjdHQ1R6SvQNhE.roa
File:                     uCElI17c1qOlpVjdHQ1R6SvQNhE.roa (raw, json)
Hash identifier:          5EoOWeoyB1zD1A1JZz2zLlFXkktkSkxDuUj811RfyU4=
Subject key identifier:   B8:21:25:23:5E:DC:D6:A3:A5:A5:58:DD:1D:0D:51:E9:2B:D0:36:11
Certificate issuer:       /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial:       019F9432A3840DD8FD8191BA5437B7B0ACD7
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uCElI17c1qOlpVjdHQ1R6SvQNhE.roa
Signing time:             Fri 24 Jul 2026 12:56:14 +0000
ROA not before:           Fri 24 Jul 2026 12:56:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402265
IP address blocks:        79.183.165.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 24 Jul 2026 13:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:32:a3:84:0d:d8:fd:81:91:ba:54:37:b7:b0:ac:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
        Validity
            Not Before: Jul 24 12:56:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b82125235edcd6a3a5a558dd1d0d51e92bd03611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:e6:16:1e:3d:fc:1d:76:66:df:a1:d0:4c:
                    de:c9:1e:7e:f6:1a:0b:62:88:80:f3:4c:26:09:6c:
                    0f:e7:a6:cc:58:cc:b0:76:e6:ce:50:35:58:e3:90:
                    a0:6d:03:47:b5:c2:c5:45:59:01:89:c9:5e:c7:2e:
                    fb:6a:45:12:92:13:72:03:f3:b1:e7:5c:61:1c:7b:
                    54:b6:a4:a1:c3:d1:c0:3d:60:1c:11:e6:37:43:53:
                    f8:8b:5f:fa:f9:9a:7d:37:a1:6a:01:1b:75:85:6a:
                    27:36:6d:9a:c9:94:25:7b:89:66:9d:03:c0:89:58:
                    5f:e7:41:6f:86:3a:bb:34:ef:dd:65:02:a7:c0:4f:
                    2a:6d:bc:ce:bb:cf:5e:82:b0:ce:c7:d5:ab:71:60:
                    a3:6d:3c:15:fd:ef:e1:6e:52:0b:c4:7a:22:78:88:
                    d7:61:f3:fc:94:e8:e5:19:04:9f:11:3a:da:6c:35:
                    ab:c8:b3:5d:4e:68:c8:3e:38:20:3c:64:3d:3f:df:
                    d2:0b:92:aa:49:e7:40:1d:6a:1a:d9:39:fe:10:c4:
                    fc:e3:8a:3d:d2:c6:91:44:7e:11:bc:7d:62:f7:b1:
                    80:cb:c7:26:f2:76:a0:6f:6b:1f:07:61:9f:a3:b5:
                    24:90:b5:4b:51:3b:06:a6:28:2a:a9:04:66:3a:87:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:21:25:23:5E:DC:D6:A3:A5:A5:58:DD:1D:0D:51:E9:2B:D0:36:11
            X509v3 Authority Key Identifier:
                keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uCElI17c1qOlpVjdHQ1R6SvQNhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.183.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d4:d4:b8:6c:f8:ef:08:2d:09:de:36:c5:d4:e6:d6:b2:9d:
         5d:e1:1a:c7:5a:06:78:ab:d3:69:26:45:a8:90:44:ce:bc:23:
         74:ae:af:b0:a3:51:0d:8e:e3:0b:e1:97:b7:0e:dd:9b:52:f1:
         9a:2b:3f:97:66:c9:11:b5:5b:57:a0:2d:26:82:f4:b5:cb:b3:
         7f:db:79:16:05:92:55:6b:45:a9:f4:f4:b3:a6:e2:31:9e:79:
         25:fb:70:b7:4b:97:d6:77:32:00:d8:b5:96:54:ee:47:d0:02:
         e3:77:51:1d:6b:99:d5:50:b3:b0:05:2b:61:bd:6e:87:8f:68:
         8a:b9:06:32:da:46:52:0f:5d:3e:a3:8c:02:1b:a8:d8:a8:ad:
         53:18:2b:92:73:e8:52:26:d7:36:de:21:5b:0d:d4:71:b4:b0:
         0e:db:d9:7b:ef:d8:2a:f2:6a:d1:a0:3c:99:7b:1c:a9:9e:f7:
         a8:c0:5e:40:2f:96:35:fb:3e:8b:18:1d:94:92:5b:12:fc:d5:
         a3:cf:de:0c:c4:68:7b:49:67:9b:58:1d:01:41:04:99:24:ba:
         9d:25:4e:67:dc:2d:fd:d7:ab:48:56:28:ba:9d:60:e2:14:22:
         36:5c:81:86:3c:b1:b4:6c:50:15:db:d7:05:40:85:87:92:d7:
         d5:3e:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:06 2026 by rpki-client