Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/j0yyk_SR2xaKgmPYPKkUvoDvPi0.roa
File:                     j0yyk_SR2xaKgmPYPKkUvoDvPi0.roa (raw, json)
Hash identifier:          j6bhzbLPLD9XGxR7tT05bdLAiayvMdgC0hg6t1y3uus=
Subject key identifier:   8F:4C:B2:93:F4:91:DB:16:8A:82:63:D8:3C:A9:14:BE:80:EF:3E:2D
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018B68CAB137E86B5D85E58DC6F97E636DCB
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/j0yyk_SR2xaKgmPYPKkUvoDvPi0.roa
Signing time:             Wed 25 Oct 2023 21:43:15 +0000
ROA not before:           Wed 25 Oct 2023 21:43:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211122
IP address blocks:        77.75.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:68:ca:b1:37:e8:6b:5d:85:e5:8d:c6:f9:7e:63:6d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Oct 25 21:43:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f4cb293f491db168a8263d83ca914be80ef3e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:4b:b6:c8:2d:4a:e8:a6:8d:cb:9d:22:52:
                    74:92:57:a7:3d:80:b6:8d:2f:b7:2f:19:02:ad:4f:
                    55:25:b0:d8:fa:b4:94:a6:cc:3b:8d:fe:57:a7:8d:
                    e1:fa:75:48:94:ae:a1:4a:99:7f:52:90:ad:69:cc:
                    c7:7c:5c:ec:3e:ae:42:d5:04:08:d9:50:d0:e4:d7:
                    2d:4a:0b:79:6a:42:f5:6f:ee:a0:40:8b:f9:91:72:
                    7b:bc:c4:69:78:97:f7:1e:61:fb:60:7c:5c:50:ad:
                    3f:59:6f:e5:97:17:27:bb:bd:b8:de:68:91:0c:73:
                    75:24:8b:04:1a:d2:fc:ce:f5:37:6e:56:31:b0:9b:
                    ee:9a:c6:ce:1c:40:7f:99:56:fe:19:35:a1:f4:c2:
                    08:24:f6:18:12:cd:59:cb:02:70:e9:de:a6:d3:c4:
                    c7:84:1e:f9:e1:c8:62:dc:e7:52:10:81:ae:32:91:
                    ec:b9:76:7a:74:95:48:7a:bf:c5:b2:72:38:6e:bc:
                    ae:31:3b:51:92:5c:c3:c4:78:50:10:d0:e7:80:89:
                    14:5a:55:01:8c:20:3d:25:84:c3:96:da:65:b5:02:
                    11:d6:66:01:88:84:19:a1:9c:6b:31:c8:76:52:a9:
                    43:6f:97:b0:33:1c:4e:22:b1:ec:8a:4f:18:ad:96:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:B2:93:F4:91:DB:16:8A:82:63:D8:3C:A9:14:BE:80:EF:3E:2D
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/j0yyk_SR2xaKgmPYPKkUvoDvPi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:cc:ba:d4:b8:64:c6:43:9a:ef:b0:9a:4f:1f:60:a9:d9:9c:
         a2:12:d0:70:63:e7:60:1f:c1:6d:14:58:8d:4e:c3:38:42:24:
         e4:86:aa:b2:d0:84:f8:92:62:6b:c5:93:2b:b9:9e:2e:f7:a5:
         65:7e:fc:d6:34:39:27:25:18:d4:96:32:a5:c5:e1:41:43:cf:
         f2:ea:7d:2d:f9:39:f9:0e:fe:96:e2:ac:a1:b0:d4:c5:aa:da:
         d8:c5:b7:a5:89:82:6c:15:b6:b1:7e:a4:3c:73:21:bc:25:f6:
         0d:79:fa:60:08:85:ab:a0:af:56:38:b0:a9:14:fe:6e:1f:1c:
         c8:aa:27:5f:8e:dd:8a:69:67:d6:22:14:33:a9:a0:3b:a2:c8:
         15:d0:38:8c:32:f5:25:b3:20:66:20:5f:65:77:f1:3a:9b:57:
         84:4c:b9:46:15:37:aa:ca:78:57:7a:79:a9:61:6c:81:0d:75:
         83:ae:7b:99:4f:30:e4:79:03:69:ee:a6:9b:39:35:a0:95:86:
         1a:47:b7:74:96:f3:4c:10:15:fe:82:1c:3d:13:72:60:72:16:
         f0:57:ec:54:19:d7:79:19:c0:e1:44:a7:1e:25:b0:b5:eb:5d:
         52:3c:f9:19:51:84:02:0a:06:9d:99:3d:a6:bb:b3:9b:08:54:
         85:3a:ea:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtoyrE36GtdheWNxvl+Y23LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjMxMDI1MjE0MzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjRjYjI5M2Y0OTFkYjE2OGE4MjYzZDgzY2E5MTRiZTgwZWYzZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiBLtsgtSuimjcudIlJ0klenPYC2
jS+3LxkCrU9VJbDY+rSUpsw7jf5Xp43h+nVIlK6hSpl/UpCtaczHfFzsPq5C1QQI
2VDQ5NctSgt5akL1b+6gQIv5kXJ7vMRpeJf3HmH7YHxcUK0/WW/llxcnu7243miR
DHN1JIsEGtL8zvU3blYxsJvumsbOHEB/mVb+GTWh9MIIJPYYEs1ZywJw6d6m08TH
hB754chi3OdSEIGuMpHsuXZ6dJVIer/FsnI4bryuMTtRklzDxHhQENDngIkUWlUB
jCA9JYTDltpltQIR1mYBiIQZoZxrMch2UqlDb5ewMxxOIrHsik8YrZa4UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9MspP0kdsWioJj2DypFL6A7z4tMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvajB5eWtfU1IyeGFLZ21QWVBLa1V2b0R2UGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUvjMA0G
CSqGSIb3DQEBCwUAA4IBAQB/zLrUuGTGQ5rvsJpPH2Cp2ZyiEtBwY+dgH8FtFFiN
TsM4QiTkhqqy0IT4kmJrxZMruZ4u96VlfvzWNDknJRjUljKlxeFBQ8/y6n0t+Tn5
Dv6W4qyhsNTFqtrYxbeliYJsFbaxfqQ8cyG8JfYNefpgCIWroK9WOLCpFP5uHxzI
qidfjt2KaWfWIhQzqaA7osgV0DiMMvUlsyBmIF9ld/E6m1eETLlGFTeqynhXenmp
YWyBDXWDrnuZTzDkeQNp7qabOTWglYYaR7d0lvNMEBX+ghw9E3JgchbwV+xUGdd5
GcDhRKceJbC1611SPPkZUYQCCgadmT2mu7ObCFSFOupf
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:06 2024 by rpki-client on console-ams.rpki-client.org