Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/dernZBTcIjvexNQmEW30g5KihWI.roa
File:                     dernZBTcIjvexNQmEW30g5KihWI.roa (raw, json)
Hash identifier:          bDvz4tyi/1CkXNqKy7xRSXUDQNoP6equNc6s8y1WfLM=
Subject key identifier:   75:EA:E7:64:14:DC:22:3B:DE:C4:D4:26:11:6D:F4:83:92:A2:85:62
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEE9493CA51523747331B3EC7F2F22
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/dernZBTcIjvexNQmEW30g5KihWI.roa
Signing time:             Sun 01 Jan 2023 06:04:57 +0000
ROA not before:           Sun 01 Jan 2023 06:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213174
IP address blocks:        77.65.160.0/21 maxlen: 24
                          77.65.168.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:e9:49:3c:a5:15:23:74:73:31:b3:ec:7f:2f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75eae76414dc223bdec4d426116df48392a28562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:2b:2c:e1:b4:df:ce:a1:1a:29:aa:f9:15:
                    46:02:d4:e3:a5:c8:79:17:0a:c4:51:df:3c:75:4e:
                    5b:3f:1d:ac:45:f3:b4:e4:ff:8e:e2:81:87:da:a5:
                    ef:11:8b:4a:ba:8f:0c:c6:b2:02:52:92:d1:19:98:
                    08:70:1c:8a:fe:fe:bc:a6:8e:0c:31:29:ea:c4:71:
                    57:c2:8d:73:5b:cf:7d:e2:d3:3b:f6:e6:c2:5e:d2:
                    fc:c1:e9:c0:f2:d6:e9:a8:78:07:96:80:19:dc:66:
                    f2:94:7c:98:d4:9a:61:c2:9d:a4:f3:38:ae:89:fb:
                    45:d9:23:10:fa:07:e4:f6:cb:2c:48:de:dd:44:a8:
                    dd:17:21:14:23:2e:09:2f:f6:59:f9:e2:5a:3e:8d:
                    75:42:ce:7c:6c:dc:05:ba:9b:66:e2:ce:91:53:51:
                    ff:a6:e8:bc:3d:f9:30:6b:34:fa:ea:66:7b:c2:a7:
                    84:3d:69:27:24:9a:d9:d3:63:bc:4a:36:91:03:b5:
                    c1:37:6a:ec:54:d2:54:d2:1a:03:de:df:47:5e:82:
                    ab:8d:e8:4a:1d:13:83:6e:a6:34:2d:55:cf:a8:68:
                    5b:ba:62:70:fa:bf:08:cc:0c:61:06:4c:a9:3c:43:
                    9d:f1:89:9a:b8:c6:bf:df:c1:ca:f2:f6:e5:75:3c:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EA:E7:64:14:DC:22:3B:DE:C4:D4:26:11:6D:F4:83:92:A2:85:62
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/dernZBTcIjvexNQmEW30g5KihWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.160.0-77.65.169.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:ee:bf:5b:01:46:4e:53:a9:77:aa:7e:c9:ec:82:e5:74:
         cf:2e:d4:11:8f:ae:31:a4:0c:78:ef:d1:25:24:b3:06:de:35:
         2e:4e:68:e1:27:b0:d8:c5:f5:0e:d9:08:9a:51:b3:d6:54:dd:
         d2:ff:d3:09:8b:19:83:f1:f6:3f:9e:ff:b9:47:59:f0:b3:e0:
         85:0e:a9:db:52:ea:a8:cd:6e:67:66:cd:df:04:ca:39:61:9e:
         12:7d:f6:2c:27:94:2c:ff:77:de:c2:01:90:31:59:fb:27:d3:
         eb:58:52:45:48:8a:64:30:8b:70:df:90:d4:dd:81:15:8c:fa:
         74:eb:c9:70:a3:68:e3:5b:76:b6:9f:d8:6b:bf:5c:93:a6:0e:
         90:24:26:08:12:0b:16:ca:39:21:82:6f:fc:73:d9:36:60:8a:
         fe:77:02:3c:c5:35:e5:be:66:19:98:3d:06:1c:0a:9c:27:3c:
         7e:50:35:95:98:00:38:c0:fc:ef:4b:69:7e:92:7a:39:99:89:
         49:65:5d:8e:ce:88:40:aa:1d:9a:80:26:f2:a2:ca:26:a7:58:
         bc:bb:c4:66:23:ab:80:40:28:1a:11:26:18:00:89:8f:d2:79:
         b5:1b:b2:9b:cc:14:55:e6:d7:24:5e:b5:af:ef:7a:48:86:eb:
         c4:1a:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org