Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UO9Md12JtJKPy4LJ-QNnySzvkPM.roa
File:                     UO9Md12JtJKPy4LJ-QNnySzvkPM.roa (raw, json)
Hash identifier:          mt6fSM/r1Gd7WSxbQbjm2o7d8/HRJOIVwvWs5JVaFnU=
Subject key identifier:   50:EF:4C:77:5D:89:B4:92:8F:CB:82:C9:F9:03:67:C9:2C:EF:90:F3
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       018698EDCB0E7B4322F431998B94A99B96BE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UO9Md12JtJKPy4LJ-QNnySzvkPM.roa
Signing time:             Tue 28 Feb 2023 16:49:26 +0000
ROA not before:           Tue 28 Feb 2023 16:49:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51102
IP address blocks:        77.81.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:98:ed:cb:0e:7b:43:22:f4:31:99:8b:94:a9:9b:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Feb 28 16:49:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50ef4c775d89b4928fcb82c9f90367c92cef90f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ae:ac:35:1d:5c:fd:e3:14:04:ba:82:bf:27:
                    4a:27:46:2b:c5:f8:20:1d:b4:80:93:49:bc:50:6c:
                    25:dc:e8:1b:6b:e9:30:7e:8d:d3:81:bd:7b:0c:0f:
                    86:8f:ba:db:ee:de:8f:e2:ed:29:04:77:b3:3b:1d:
                    b8:63:56:da:11:e9:e0:9e:d0:ac:45:91:af:c0:bf:
                    9f:f3:3a:1b:37:bd:f9:25:c1:eb:6e:a0:a5:e3:95:
                    72:5a:b4:c1:1f:9c:8f:9d:c8:4f:84:f8:54:bc:32:
                    22:1f:cf:33:2e:29:08:e9:b6:08:1f:00:aa:34:af:
                    72:87:6e:f0:71:4a:4b:db:e4:50:7a:31:d9:55:65:
                    5a:50:00:3c:09:0f:6b:3a:db:77:b7:de:04:5a:b9:
                    18:89:ac:f4:4c:55:fb:29:22:04:7c:fb:74:5f:7c:
                    05:d2:d4:9d:c8:94:71:56:fd:8a:99:03:9e:28:21:
                    e6:ae:7e:06:08:5d:09:84:e6:bb:a1:bf:81:be:4e:
                    03:aa:05:50:a2:ba:7f:25:57:fe:8f:5c:51:83:00:
                    75:cb:d2:27:2a:80:68:df:a4:74:0b:93:89:16:f1:
                    c2:29:bc:f3:4c:36:06:a2:d0:15:5e:91:0d:1e:c7:
                    55:dc:97:c9:53:20:cb:40:8c:3b:6f:d5:70:44:a6:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EF:4C:77:5D:89:B4:92:8F:CB:82:C9:F9:03:67:C9:2C:EF:90:F3
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UO9Md12JtJKPy4LJ-QNnySzvkPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f4:02:9f:4a:d0:9b:35:51:d8:d0:d9:9b:8a:84:f0:b6:c1:0a:
         f9:10:fc:f0:79:f6:7d:82:9f:81:0a:6b:4f:44:46:2e:9a:7e:
         b6:b9:cc:a7:f7:48:8d:4f:12:b5:37:48:f5:86:1d:02:4e:d6:
         69:6e:69:dd:b6:6a:5d:ce:c4:f5:b3:03:30:4c:26:4e:39:ae:
         bb:f5:36:50:85:d7:35:8b:de:f3:69:1a:db:0e:eb:66:4a:e4:
         19:15:c1:5a:bc:f7:b4:1b:4e:4d:25:46:28:18:86:bc:23:d2:
         96:1b:c7:e3:34:9b:21:99:a9:15:7d:69:97:28:7c:a2:ba:3d:
         a5:4d:09:30:98:06:27:be:10:b7:c7:46:0a:e5:2a:69:17:8b:
         88:1b:0d:93:65:a5:1f:48:2c:04:44:b3:77:63:58:45:25:fe:
         56:1a:60:e6:cf:0e:35:e2:d1:26:bb:bb:e1:89:2c:22:88:32:
         38:00:a5:78:82:e4:74:4c:6c:6d:d5:ae:81:06:02:0c:04:cd:
         4c:a6:a8:a8:9e:df:d3:b0:b7:fa:b5:4d:6e:3a:42:10:e7:f8:
         ea:64:fe:35:74:06:3e:2a:37:cb:de:28:b1:72:cf:b7:35:66:
         39:b3:c8:bf:12:e3:14:d5:11:17:da:3f:63:1e:16:85:6d:31:
         6a:ec:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org