Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa
File:                     b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa (raw, json)
Hash identifier:          360j4Sfy1k2GMmAmii9XqN9RWUSzBfJgJGf9fSBqjiI=
Subject key identifier:   6F:DA:E7:B8:CC:E0:F7:F4:25:FA:33:EF:CA:CE:BB:92:90:0A:ED:D4
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       018CDECA4957C6C3B520BB9202A9748E2AF1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa
Signing time:             Sat 06 Jan 2024 12:40:48 +0000
ROA not before:           Sat 06 Jan 2024 12:40:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        77.72.81.0/24 maxlen: 24
                          2a13:b9c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 08 Jan 2024 17:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:de:ca:49:57:c6:c3:b5:20:bb:92:02:a9:74:8e:2a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Jan  6 12:40:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6fdae7b8cce0f7f425fa33efcacebb92900aedd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:f1:45:34:72:f9:31:28:27:22:bd:39:02:
                    fa:04:ee:bb:b1:81:ec:b9:a7:3c:d8:81:78:85:49:
                    b5:f9:13:d3:42:8d:99:e9:db:94:10:dd:67:66:f2:
                    14:d0:00:0a:5f:e7:b6:d6:75:cb:c3:39:cf:90:a4:
                    d5:ad:de:23:62:22:fe:f5:44:6a:d9:cc:02:97:d5:
                    83:08:d9:8d:82:fc:10:d3:42:ac:b5:ce:55:10:4b:
                    1e:4d:5c:15:50:61:1a:03:71:a7:a9:56:14:37:e6:
                    45:31:01:c0:4d:9c:a0:15:62:03:d6:3b:92:8b:ad:
                    4e:db:1a:f9:02:7c:61:5b:f2:9a:a8:15:eb:bb:f4:
                    b1:6b:d9:f3:83:77:ec:b0:65:18:a6:01:f3:e1:79:
                    4d:3f:02:97:09:64:68:9a:4b:54:b5:11:57:3f:1f:
                    b4:f8:15:c0:6d:65:61:08:15:a8:0c:02:ad:39:76:
                    b7:55:d8:1e:5a:b5:03:fb:d6:65:20:d2:4f:d8:aa:
                    f2:31:e4:da:fb:28:a8:b5:4d:ea:b9:b9:92:69:83:
                    3e:a2:03:1f:34:a3:81:2a:be:f7:16:e6:39:3b:de:
                    3f:d1:5d:c8:d2:d9:92:28:9c:96:a0:60:62:f7:2f:
                    93:ce:61:a8:21:4f:2c:cb:69:1e:78:e1:85:86:27:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DA:E7:B8:CC:E0:F7:F4:25:FA:33:EF:CA:CE:BB:92:90:0A:ED:D4
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b9rnuMzg9_Ql-jPvys67kpAK7dQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.81.0/24
                IPv6:
                  2a13:b9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:66:b2:30:b1:cf:5a:19:ae:a7:6a:bf:26:49:ef:8d:37:5c:
         b9:90:41:b5:ab:53:bf:7b:a0:aa:c1:f4:e5:37:02:f1:8a:c3:
         d3:2e:7c:d6:ee:8b:77:7a:b2:66:16:13:67:99:b4:b2:3a:96:
         8f:59:53:36:75:7b:4c:cc:c8:0d:c6:f8:98:18:0e:dd:45:78:
         a1:a3:fa:85:14:62:39:c9:0c:79:9c:4c:e9:2d:63:7d:51:38:
         34:80:82:26:2f:b8:7f:b3:68:50:f3:dd:13:f1:ae:6d:1f:33:
         c7:6b:2d:a9:fe:c3:99:08:c0:41:d3:83:4f:97:ca:fc:c0:53:
         83:83:de:d2:8f:51:eb:df:95:95:41:22:db:75:fd:43:92:f4:
         f9:2b:de:72:9d:4b:cd:7c:0d:ec:bd:dc:b8:33:86:fe:e8:56:
         dc:03:a7:60:87:1f:1f:b3:09:19:68:ac:c7:82:f1:42:0c:7a:
         1f:bc:1a:12:9a:72:f1:d4:48:05:37:fc:b6:c0:00:0a:98:91:
         41:38:9d:10:6e:e1:8c:96:03:00:07:31:8e:6e:7f:c6:6d:7f:
         74:5f:61:45:e5:26:6c:e2:34:63:78:03:17:e8:d4:fb:ce:6b:
         26:c1:36:e4:d3:61:2d:38:1b:44:77:3b:e4:0e:ea:54:92:aa:
         0e:5f:c5:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzeyklXxsO1ILuSAql0jirxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwMTA2MTI0MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmRhZTdiOGNjZTBmN2Y0MjVmYTMzZWZjYWNlYmI5MjkwMGFlZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl3xRTRy+TEoJyK9OQL6BO67sYHs
uac82IF4hUm1+RPTQo2Z6duUEN1nZvIU0AAKX+e21nXLwznPkKTVrd4jYiL+9URq
2cwCl9WDCNmNgvwQ00Kstc5VEEseTVwVUGEaA3GnqVYUN+ZFMQHATZygFWID1juS
i61O2xr5AnxhW/KaqBXru/Sxa9nzg3fssGUYpgHz4XlNPwKXCWRomktUtRFXPx+0
+BXAbWVhCBWoDAKtOXa3VdgeWrUD+9ZlINJP2KryMeTa+yiotU3qubmSaYM+ogMf
NKOBKr73FuY5O94/0V3I0tmSKJyWoGBi9y+TzmGoIU8sy2keeOGFhiePNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG/a57jM4Pf0Jfoz78rOu5KQCu3UMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvYjlybnVNemc5X1FsLWpQdnlzNjdrcEFLN2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATUhRMA0E
AgACMAcDBQMqE7nAMA0GCSqGSIb3DQEBCwUAA4IBAQAHZrIwsc9aGa6nar8mSe+N
N1y5kEG1q1O/e6CqwfTlNwLxisPTLnzW7ot3erJmFhNnmbSyOpaPWVM2dXtMzMgN
xviYGA7dRXiho/qFFGI5yQx5nEzpLWN9UTg0gIImL7h/s2hQ890T8a5tHzPHay2p
/sOZCMBB04NPl8r8wFODg97Sj1Hr35WVQSLbdf1DkvT5K95ynUvNfA3svdy4M4b+
6FbcA6dghx8fswkZaKzHgvFCDHofvBoSmnLx1EgFN/y2wAAKmJFBOJ0QbuGMlgMA
BzGObn/GbX90X2FF5SZs4jRjeAMX6NT7zmsmwTbk02EtOBtEdzvkDupUkqoOX8Wh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org