Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/9MPeN_ICEHYrETNfqNggWLptuqg.roa
File:                     9MPeN_ICEHYrETNfqNggWLptuqg.roa (raw, json)
Hash identifier:          ieOH4EymmGpmzRdUw8MoZz76Ti5m9K60MNmb/KYmSFM=
Subject key identifier:   F4:C3:DE:37:F2:02:10:76:2B:11:33:5F:A8:D8:20:58:BA:6D:BA:A8
Certificate issuer:       /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial:       018ABC785492314B62F73F8C15C1E0BF642F
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/9MPeN_ICEHYrETNfqNggWLptuqg.roa
Signing time:             Fri 22 Sep 2023 10:38:37 +0000
ROA not before:           Fri 22 Sep 2023 10:38:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        77.236.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bc:78:54:92:31:4b:62:f7:3f:8c:15:c1:e0:bf:64:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
        Validity
            Not Before: Sep 22 10:38:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4c3de37f20210762b11335fa8d82058ba6dbaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:76:d1:53:95:43:41:6f:a9:d8:3a:14:8a:
                    56:5f:b1:37:2f:92:e1:cc:10:94:cb:d2:f6:ab:83:
                    9d:6e:59:f9:9b:80:f0:40:d7:d7:0f:3e:8e:0a:e2:
                    c2:4a:f0:9a:2b:ab:40:c6:57:f5:37:6e:fa:f9:b9:
                    ab:ff:81:33:87:2b:a2:00:fe:20:e2:44:60:7d:16:
                    07:8e:97:37:a5:00:d6:e6:40:f5:f7:79:41:ba:db:
                    82:93:2c:c6:17:32:d2:21:3b:70:84:03:e6:62:00:
                    50:08:03:e7:3e:d7:b1:13:e3:4f:69:50:ae:29:57:
                    1a:2f:a5:09:a1:60:40:04:24:c6:91:c4:65:c5:ca:
                    85:61:fb:d4:18:66:e4:29:80:6d:b5:5b:39:70:3e:
                    35:bc:fc:85:9f:d7:37:16:0d:3b:65:d6:da:73:02:
                    4e:a8:ad:81:fe:e3:49:a1:25:00:59:ac:57:d7:79:
                    71:dc:40:90:a1:92:26:14:1e:5a:91:3a:37:fa:cc:
                    5d:93:4c:04:ed:67:77:49:87:d2:3b:3e:be:ff:43:
                    cc:04:33:5a:6e:dd:3a:f9:a4:e2:1d:cf:74:a9:3f:
                    83:31:46:fc:dc:0b:48:4d:fc:cf:8f:b3:97:77:e2:
                    61:03:25:c1:03:4c:13:2a:72:e1:51:cc:73:60:40:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C3:DE:37:F2:02:10:76:2B:11:33:5F:A8:D8:20:58:BA:6D:BA:A8
            X509v3 Authority Key Identifier:
                keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/9MPeN_ICEHYrETNfqNggWLptuqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.236.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:be:19:a6:0c:74:f5:cd:63:a8:5e:6c:87:92:a1:13:ab:e7:
         6d:14:28:5c:2a:91:20:1e:aa:13:b0:11:85:7c:52:cd:7c:75:
         81:c0:14:21:7f:68:2e:fd:3d:00:12:07:bf:6e:c8:6f:ea:f3:
         6b:36:41:35:f6:8d:12:61:39:57:b9:66:15:07:af:e3:02:3f:
         e8:ee:2f:e1:f4:9f:ff:03:85:e5:d6:dc:22:09:8e:17:e8:7c:
         a4:80:e4:18:e4:44:ea:2e:e5:3a:68:8b:7c:56:32:ec:d0:15:
         c4:26:1c:8a:b0:c1:d9:98:c7:2b:23:be:58:9c:72:ec:cf:8c:
         fa:6c:8b:13:84:41:fb:17:01:c4:8d:61:97:e7:20:2d:e3:4f:
         23:b3:31:0e:cf:63:f9:79:97:87:e1:e8:be:b2:a4:9a:71:5f:
         39:2c:1b:27:88:c6:0e:6c:3f:03:ff:d6:a1:38:6f:15:1f:ad:
         29:20:79:c2:c1:db:df:f2:76:d3:0e:19:89:63:00:28:6b:d3:
         a2:05:ab:d7:1e:61:dc:60:34:2e:8e:d2:30:1a:2d:38:0c:59:
         a5:cc:eb:b9:3f:da:a3:ed:dd:be:be:ee:b1:23:b4:71:86:35:
         d4:25:b7:71:71:4f:a8:94:e6:fc:36:9d:9d:37:b3:4e:66:65:
         8e:76:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:10 2024 by rpki-client on console-fra.rpki-client.org