Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/t2iqea7xqJb2GHaAGEbeQaXiEFE.roa
File:                     t2iqea7xqJb2GHaAGEbeQaXiEFE.roa (raw, json)
Hash identifier:          48aG9ksMmE/3n4nC7hEtZamc4rGyx+1faQ4XlAEcBmo=
Subject key identifier:   B7:68:AA:79:AE:F1:A8:96:F6:18:76:80:18:46:DE:41:A5:E2:10:51
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       018572BA777D72C22E51CA693C0BF656A1D9
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/t2iqea7xqJb2GHaAGEbeQaXiEFE.roa
Signing time:             Mon 02 Jan 2023 13:45:01 +0000
ROA not before:           Mon 02 Jan 2023 13:45:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     28893
IP address blocks:        77.79.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:77:7d:72:c2:2e:51:ca:69:3c:0b:f6:56:a1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  2 13:45:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b768aa79aef1a896f61876801846de41a5e21051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:65:fe:41:db:fd:3f:8b:b9:a5:26:6b:24:
                    4a:ca:ed:9f:e1:16:22:a1:f5:e3:84:16:47:8e:51:
                    b7:de:d1:eb:ca:9b:86:88:ab:7e:fe:ea:5f:4d:2c:
                    08:52:ec:31:c8:d3:ed:c0:dc:bf:cb:b6:95:aa:2b:
                    40:b6:99:fd:ad:a8:58:60:e1:ee:83:4c:c3:06:af:
                    90:52:e7:5b:46:f9:1a:b8:07:34:1a:5c:0b:9b:d1:
                    ae:83:c3:b4:b3:ad:ff:f4:56:54:91:ea:1f:e9:c6:
                    e9:0a:80:82:e9:04:4d:a0:d7:78:4f:e2:76:ad:68:
                    b2:38:a9:9c:f7:5b:13:34:2d:a6:bd:f5:f9:75:70:
                    ba:da:8b:09:28:62:39:58:ef:79:d7:06:90:aa:1f:
                    65:94:f7:3e:15:70:ab:60:ce:7f:cc:a5:23:d7:44:
                    8f:cf:cb:6f:e3:cc:1b:ce:e9:e2:8e:74:ff:92:9e:
                    c7:99:43:7b:1a:87:17:1a:0e:31:2f:50:62:29:a1:
                    f9:9d:ca:6b:61:a0:b0:1c:cd:ec:90:6d:c1:21:34:
                    c2:94:d6:8c:c5:d7:f7:c4:b1:f7:87:b8:31:5b:c0:
                    4c:6f:4d:7d:71:97:38:b0:0e:88:40:11:9c:f5:8e:
                    a9:ec:1c:d1:d6:1e:af:4e:24:9f:46:27:4d:c2:2c:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:AA:79:AE:F1:A8:96:F6:18:76:80:18:46:DE:41:A5:E2:10:51
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/t2iqea7xqJb2GHaAGEbeQaXiEFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:05:9f:1c:e0:e9:d7:6d:f9:3f:65:6f:4e:40:e7:c3:7d:e6:
         ec:e4:2f:4c:69:15:12:ef:6e:86:85:d3:6b:9f:61:20:71:8c:
         76:d0:ea:8a:81:aa:e9:01:64:ad:9e:51:c9:43:85:92:cb:89:
         72:f2:73:92:00:5b:25:cb:39:b5:64:a3:e9:c4:91:33:47:e0:
         24:5e:57:a3:e1:7a:86:6a:e9:2e:0f:ba:2b:b5:ee:a4:df:b3:
         49:26:ff:30:d6:e4:51:8c:cb:bb:bf:bb:25:38:c8:b9:5a:63:
         2f:dd:08:85:9d:11:94:83:4b:56:56:79:fe:7e:54:cb:7a:6b:
         41:1b:c9:74:57:6f:e8:a8:c1:e8:22:86:2c:d3:82:af:cc:92:
         2e:aa:42:5d:8d:06:cf:8d:b8:c4:82:d0:9a:4f:df:7f:10:67:
         df:e6:31:50:83:98:b3:bd:b9:de:5c:f2:bd:46:09:8d:17:65:
         41:8d:86:44:d1:8b:4f:6f:8d:b2:c8:67:4e:aa:60:43:49:03:
         c3:67:ec:cf:4f:f2:92:7a:bd:7c:2d:da:35:a6:75:87:10:b2:
         ec:54:a7:45:1a:6c:3a:0b:b4:6f:93:43:39:90:59:cd:96:57:
         03:b5:a3:d3:2f:fe:cc:86:90:ab:fa:a3:7c:a8:e5:1a:96:eb:
         a6:fa:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org