Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/i8TtYGr715Xd4LnSp3n0VHYzyjM.roa
File:                     i8TtYGr715Xd4LnSp3n0VHYzyjM.roa (raw, json)
Hash identifier:          FuPwN6zQ/tx/ioIqJBKGiqZ47xavcN1v/pqfOnZRMg0=
Subject key identifier:   8B:C4:ED:60:6A:FB:D7:95:DD:E0:B9:D2:A7:79:F4:54:76:33:CA:33
Certificate issuer:       /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial:       018570CBE631B305C4375B42E3563232ECCB
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/i8TtYGr715Xd4LnSp3n0VHYzyjM.roa
Signing time:             Mon 02 Jan 2023 04:44:48 +0000
ROA not before:           Mon 02 Jan 2023 04:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8312
IP address blocks:        77.74.48.0/21 maxlen: 21
                          77.74.48.0/22 maxlen: 22
                          193.189.149.0/24 maxlen: 24
                          185.58.56.0/22 maxlen: 22
                          77.74.52.0/22 maxlen: 22
                          195.210.56.0/23 maxlen: 23
                          185.58.59.0/24 maxlen: 24
                          193.16.154.0/24 maxlen: 24
                          2a01:310::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:cb:e6:31:b3:05:c4:37:5b:42:e3:56:32:32:ec:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
        Validity
            Not Before: Jan  2 04:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8bc4ed606afbd795dde0b9d2a779f4547633ca33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9d:4b:95:99:90:13:a7:b2:58:d8:63:fd:b7:
                    60:64:ec:19:85:78:26:e1:7d:03:be:02:de:24:ae:
                    c4:32:99:da:7f:1b:dc:04:81:67:1a:72:8f:44:4a:
                    79:ae:8a:8d:6d:d1:1b:f9:f4:ff:33:1f:4b:03:b9:
                    f4:04:19:fb:2d:48:89:8e:0b:88:89:b2:57:59:fe:
                    41:92:31:c1:5c:9d:72:75:f9:95:36:1d:5d:70:ee:
                    ef:c6:1b:19:31:cc:91:ee:c2:31:14:9b:ce:3a:b9:
                    11:45:e4:8e:df:55:3a:41:7f:0e:3f:1e:bb:3b:7e:
                    47:f3:74:73:c4:43:bd:72:ef:97:f6:a0:ae:62:b1:
                    0e:62:f0:a9:8c:f3:53:3f:03:6f:42:0e:8f:71:b2:
                    eb:e5:11:4f:0d:96:ff:bc:33:9a:28:65:53:a5:f1:
                    df:29:57:8e:98:cd:a4:62:a8:e8:b4:aa:f9:18:6b:
                    5e:b5:0e:01:0b:25:96:4a:79:b2:20:e0:75:8b:ba:
                    20:98:11:99:7b:1d:c6:ca:41:4c:b2:d7:7c:8c:cc:
                    a1:40:59:08:1f:15:b0:b5:7d:f3:1f:44:bb:ac:35:
                    a9:38:eb:85:2a:42:f5:6f:de:0f:7b:fa:e7:30:7c:
                    c7:0f:6d:17:dd:61:72:56:3f:11:9b:1e:c5:ea:7d:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C4:ED:60:6A:FB:D7:95:DD:E0:B9:D2:A7:79:F4:54:76:33:CA:33
            X509v3 Authority Key Identifier:
                keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/i8TtYGr715Xd4LnSp3n0VHYzyjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.74.48.0/21
                  185.58.56.0/22
                  193.16.154.0/24
                  193.189.149.0/24
                  195.210.56.0/23
                IPv6:
                  2a01:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:4e:88:63:20:c4:81:d8:d1:3f:68:af:23:d7:ad:d2:5a:
         5d:00:4b:12:b9:59:1f:e7:f4:19:d8:b4:7f:79:f2:d4:c8:cb:
         19:4a:ce:3b:f7:a4:e3:33:04:a4:1d:33:ce:6e:48:c4:31:98:
         7e:fa:17:50:dc:5c:96:c8:59:5b:3a:9c:d6:5e:e3:2e:63:c0:
         87:0b:e6:f2:5f:ed:ca:00:99:f5:5f:98:33:2d:99:03:74:b4:
         2f:99:5d:9b:b1:dc:fd:b6:a8:57:7b:f4:11:ee:d7:eb:d5:7a:
         76:c6:b3:a2:0f:b3:28:83:3b:3b:2f:41:0c:5d:e0:ae:85:ee:
         55:d3:07:7b:3b:63:e6:d9:fe:a0:9c:04:62:99:94:1f:6d:d7:
         1f:5c:8c:30:9a:a9:85:8e:8d:2b:9b:a2:35:98:97:74:33:27:
         88:9a:31:34:ec:92:6c:38:af:97:70:ad:c3:27:5f:97:d0:d2:
         77:83:4d:85:8b:53:65:d9:9d:02:7a:42:dd:c6:65:d4:6f:4e:
         29:f9:8e:d4:a1:ca:35:4b:d3:9c:36:21:89:e6:17:3e:fe:dd:
         5b:13:e3:85:35:8e:a8:03:e9:4c:f5:df:a5:73:6c:c9:3a:83:
         1a:cb:50:7f:7b:cd:5f:32:ba:04:d8:19:e8:b1:0e:1e:22:d1:
         8e:95:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:24 2024 by rpki-client on console-fra.rpki-client.org