Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa
File:                     wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa (raw, json)
Hash identifier:          EHkgHWBlCJZmc7H7mJFQDd5uNDCJ7gMQiAeJIOHreC0=
Subject key identifier:   C0:9B:E1:9D:B2:9D:E9:2C:17:3F:73:0A:63:43:30:19:74:7D:6B:49
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       018602469C3E6B8CA399AFDC471EFAB5C6F0
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa
Signing time:             Mon 30 Jan 2023 10:43:47 +0000
ROA not before:           Mon 30 Jan 2023 10:43:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200181
IP address blocks:        77.74.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Jun 2023 07:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:46:9c:3e:6b:8c:a3:99:af:dc:47:1e:fa:b5:c6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Jan 30 10:43:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c09be19db29de92c173f730a63433019747d6b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:42:60:6e:85:38:3e:dd:c8:fc:ba:8f:e1:
                    86:93:5e:d6:c0:02:a1:c0:14:f6:03:93:68:c9:4b:
                    e6:6f:b6:2d:14:de:84:ab:ae:bd:b4:94:2a:b5:99:
                    94:87:1a:e3:e9:8f:9b:bf:f0:63:38:b0:12:fa:12:
                    ac:52:89:24:2f:0f:10:06:d9:f6:df:72:ab:06:18:
                    80:8b:8c:4c:ec:d5:59:84:a5:ea:0e:cd:f3:a4:8c:
                    15:b0:a3:b7:59:1c:4d:1d:c6:d0:21:bc:a8:83:32:
                    d9:12:e5:5a:a5:c2:86:e0:3b:8c:2a:44:1b:19:2f:
                    19:80:64:5a:69:db:7b:8b:70:e1:a8:52:35:48:9c:
                    33:c7:2e:20:e2:34:a3:d7:c6:ed:8d:5b:cc:77:59:
                    fe:7c:70:df:a2:df:95:03:78:dc:58:6c:ef:fe:a9:
                    a9:d7:48:b4:c3:25:af:6e:a4:ce:3a:2f:24:8d:50:
                    92:b7:7a:e7:b3:3e:63:0d:f8:4d:51:ea:b1:26:c5:
                    ef:bb:0f:7f:bd:1e:5d:1f:c7:d9:aa:c6:15:18:5d:
                    78:a3:d6:fd:21:3c:95:3b:08:0b:fb:85:3f:af:d0:
                    7a:92:58:1f:ce:81:e4:e2:6c:ee:60:28:bd:c4:37:
                    32:fe:91:56:ca:97:b3:91:ab:e0:c5:fa:21:ef:83:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9B:E1:9D:B2:9D:E9:2C:17:3F:73:0A:63:43:30:19:74:7D:6B:49
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/wJvhnbKd6SwXP3MKY0MwGXR9a0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.74.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:7c:44:f3:b2:bd:d2:ff:60:8f:10:16:eb:1b:2a:39:77:
         b2:63:a3:96:4b:6a:f2:c0:79:79:e2:ca:9b:99:37:ed:6d:55:
         69:8e:0a:ec:d7:7e:af:c5:3c:32:c0:6a:92:22:f1:c6:65:b0:
         66:00:9e:0e:04:24:d6:12:59:06:d9:1d:36:7b:ac:5d:6c:9e:
         53:8a:64:3c:99:33:10:7b:1f:99:9a:1f:f9:1d:f0:f9:05:db:
         73:50:24:45:c4:19:e6:71:c4:7b:21:d9:1f:e8:34:b6:ce:27:
         75:c3:2c:cb:5d:c9:85:f6:e2:5f:3e:8f:f3:2b:d0:48:1e:25:
         f8:0a:64:57:31:b6:13:8d:8c:d0:ae:f8:ed:91:ac:35:38:fe:
         f2:70:e0:95:39:42:d3:f3:c8:f7:b0:87:fb:94:42:fd:8f:46:
         dc:d0:cd:92:46:50:d7:35:b8:86:74:3d:6a:c4:41:20:3a:57:
         52:b3:61:43:1a:7f:aa:3f:38:9c:1a:2d:4f:f8:6a:d5:44:14:
         bf:f6:47:3b:45:b0:26:73:bf:19:0e:13:78:22:00:46:f3:67:
         3f:b2:5a:de:bf:5f:dc:d9:b0:42:2b:84:ec:1a:17:97:d1:8d:
         53:e0:ed:88:61:a4:58:a4:68:e5:bb:0c:9c:ef:e2:64:4e:c2:
         22:04:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org