Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/V_hjI4wF2aGfxlPcYzVw0zHCHYA.roa
File:                     V_hjI4wF2aGfxlPcYzVw0zHCHYA.roa (raw, json)
Hash identifier:          aEwH6/x7wmhILVACD+pJ/WdICZXq1BNjFIa/gZqI4GU=
Subject key identifier:   57:F8:63:23:8C:05:D9:A1:9F:C6:53:DC:63:35:70:D3:31:C2:1D:80
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEE0A7D5D6725B0A1007685B6926E4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/V_hjI4wF2aGfxlPcYzVw0zHCHYA.roa
Signing time:             Sun 01 Jan 2023 06:04:55 +0000
ROA not before:           Sun 01 Jan 2023 06:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209066
IP address blocks:        77.65.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:e0:a7:d5:d6:72:5b:0a:10:07:68:5b:69:26:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57f863238c05d9a19fc653dc633570d331c21d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:c6:c2:fa:e3:32:dd:f1:43:1a:6d:e1:11:
                    39:39:d4:0e:e7:f3:a7:b8:13:b7:67:79:20:5e:9f:
                    8e:86:33:48:6f:18:97:6d:c1:75:ae:8a:0e:5d:b5:
                    82:43:57:26:f4:88:fc:8b:f4:36:8a:ee:81:76:58:
                    d8:e5:2c:10:8a:01:4e:a3:a9:b7:83:9d:35:da:33:
                    aa:8a:49:19:3f:a9:34:8f:b3:53:e3:d2:53:cc:c8:
                    53:12:ab:a5:db:87:49:95:e9:c9:44:ce:d7:6a:10:
                    86:f7:4a:51:6a:8e:86:7a:c3:73:7a:41:a2:80:c8:
                    e4:f3:3d:6e:54:65:90:82:15:e4:e8:1a:37:c0:6e:
                    3d:54:1d:39:a6:72:c1:e2:89:6b:a7:ba:e7:8a:1a:
                    e2:44:f3:2b:35:09:86:2c:db:65:fe:ad:ee:69:a2:
                    60:53:ab:cf:1c:bd:dc:09:3b:eb:fa:2d:d4:e1:2c:
                    50:86:49:8c:ff:6f:57:9f:ab:9e:49:84:77:60:09:
                    a3:92:1a:13:17:0b:13:93:88:a8:ba:c3:74:93:1d:
                    1c:b2:37:b9:f5:5d:b9:23:48:54:84:bb:21:63:0b:
                    aa:32:43:8d:32:70:da:bd:1e:7c:5b:2c:3a:ec:49:
                    a3:df:bf:ff:07:a9:fd:41:72:68:da:3a:84:04:fe:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F8:63:23:8C:05:D9:A1:9F:C6:53:DC:63:35:70:D3:31:C2:1D:80
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/V_hjI4wF2aGfxlPcYzVw0zHCHYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:25:9d:cf:85:b0:15:ea:c2:f5:d9:5a:d0:4f:2f:07:5d:
         56:a9:00:fb:c8:6e:da:52:be:e7:72:dd:70:26:47:36:6d:c4:
         10:1c:e7:ef:ea:0f:a1:3b:ed:79:94:82:db:96:a8:20:7c:32:
         f2:a0:95:f2:64:40:01:87:f5:90:da:97:d6:fa:1d:53:39:5a:
         23:30:fe:18:b3:72:3d:8f:ab:fe:b9:d7:66:7c:29:23:ba:82:
         38:40:ac:bb:11:c1:01:1f:cf:b7:ca:34:a3:88:b0:fb:b9:cb:
         7b:17:b4:7a:2a:34:ea:99:08:23:3b:c3:f7:5f:20:af:8a:36:
         cb:de:60:c5:2c:94:0a:bc:20:c0:6d:01:2d:e7:78:25:92:be:
         93:9e:db:ea:5f:7a:f8:3f:62:d9:23:63:d2:d3:af:97:de:3e:
         28:d7:d9:32:3e:b4:ff:64:9d:2d:1e:30:e0:bc:ed:84:f5:98:
         6c:79:ae:65:33:43:83:65:29:f0:0e:36:8b:a7:b7:c3:d4:a7:
         75:bb:d3:55:5a:a0:df:30:49:7d:e4:c3:af:76:e7:25:e7:6f:
         83:4f:5b:29:b8:6b:ec:b7:9a:42:c2:16:77:e2:2c:fa:46:e0:
         60:17:b5:24:52:bc:14:6b:c1:01:b4:02:82:22:d3:b6:37:45:
         8b:8c:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org