Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Ie9PdLLTtI6tHc-bsqlVqPjNU8g.roa
File:                     Ie9PdLLTtI6tHc-bsqlVqPjNU8g.roa (raw, json)
Hash identifier:          sSKDRLWMsmoGKQvBuMd9dVASvuPesgcvE/o7BpGmHfo=
Subject key identifier:   21:EF:4F:74:B2:D3:B4:8E:AD:1D:CF:9B:B2:A9:55:A8:F8:CD:53:C8
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       018F5ED0DA7DA7BEE83DAC9CA3B8D227EAAB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Ie9PdLLTtI6tHc-bsqlVqPjNU8g.roa
Signing time:             Thu 09 May 2024 19:24:56 +0000
ROA not before:           Thu 09 May 2024 19:24:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215133
IP address blocks:        77.72.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 09:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5e:d0:da:7d:a7:be:e8:3d:ac:9c:a3:b8:d2:27:ea:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: May  9 19:24:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=21ef4f74b2d3b48ead1dcf9bb2a955a8f8cd53c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:5d:2f:ab:d0:04:7b:12:cc:7f:3f:5c:ff:
                    f3:2f:b2:f5:46:4a:ad:ea:94:43:67:4b:b3:b0:84:
                    c2:0d:22:48:d1:56:2f:59:99:fd:e1:84:e0:60:c3:
                    0f:b4:17:77:79:2e:cf:2f:ea:b2:8f:78:6d:ed:ab:
                    da:3f:7f:5a:93:b9:e7:db:5f:98:5f:4b:87:31:9b:
                    01:b2:f8:7b:8a:2d:c0:70:ec:ee:5b:b7:ce:60:58:
                    41:d3:ef:e0:f7:4a:a1:ad:18:1a:fe:24:ba:2c:9f:
                    7d:5b:cd:1c:e2:45:79:ff:b8:2d:c0:e0:94:aa:f8:
                    c7:69:45:e2:bf:37:24:53:ad:0b:3e:3e:41:26:19:
                    e6:ad:33:ec:52:47:2c:be:fb:d0:bf:67:b1:39:b4:
                    7d:67:f4:35:a6:99:4a:1f:0e:f3:bb:00:97:1c:75:
                    be:57:cd:0a:82:78:42:09:4e:f8:57:40:d3:04:37:
                    96:8c:37:fb:c7:6e:71:b4:23:ab:c6:a4:92:38:01:
                    e9:aa:5a:73:88:4c:3a:92:a4:f9:98:2f:a3:93:e2:
                    f0:47:84:57:a0:c4:74:77:cd:94:7c:31:d7:0a:73:
                    d9:ff:c3:bb:ed:ed:ca:3b:99:13:69:83:3a:08:e5:
                    03:5c:6c:f0:df:59:28:53:c7:ac:09:90:77:4d:01:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EF:4F:74:B2:D3:B4:8E:AD:1D:CF:9B:B2:A9:55:A8:F8:CD:53:C8
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Ie9PdLLTtI6tHc-bsqlVqPjNU8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:1a:c0:4b:83:54:8d:cd:d6:de:42:34:44:0e:40:ee:ce:
         ef:0c:4c:32:93:17:40:28:c9:ec:fe:5a:79:c5:bc:1a:42:53:
         a3:c2:da:54:2d:65:a1:3a:b5:86:b0:b6:67:6a:d0:a0:f5:20:
         85:0e:75:98:55:b8:81:c1:5a:b8:c3:ac:e5:94:70:15:61:98:
         a2:22:9d:a5:d8:1d:7d:7f:48:3e:7b:d4:e4:ea:a3:01:89:3a:
         08:44:e0:07:0c:3f:a0:42:23:17:63:98:26:2e:78:82:f5:cc:
         d2:84:93:dc:32:d3:cf:e3:da:b6:68:0b:92:1b:ba:e5:2d:68:
         a3:e7:3f:38:55:33:65:99:0b:ac:5c:16:f0:ad:d1:18:61:07:
         92:cf:ff:09:c3:fc:71:d4:94:c8:5a:45:e9:30:88:de:7b:00:
         ca:2b:c1:32:54:96:d0:dc:30:b0:44:ad:6e:18:d2:41:ae:9d:
         0a:f1:ef:04:7e:fd:ec:e3:f1:0f:dd:88:25:a8:bf:80:73:ec:
         26:e7:53:1e:44:e9:8b:04:33:93:e5:e4:95:85:17:31:72:64:
         3b:0e:39:ff:36:d3:18:82:70:00:be:11:2a:ca:c2:dc:a4:c2:
         62:e0:d7:9b:a2:e4:fa:6b:84:eb:03:84:c3:94:1a:cc:24:b2:
         7c:25:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org