Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/C1Tp2ZEC8jl5zTiO_kGYsrXFqFE.roa
File:                     C1Tp2ZEC8jl5zTiO_kGYsrXFqFE.roa (raw, json)
Hash identifier:          X7eH9PZtDA0HUdrTUYfaWH3m7LcX5pNu6Aozwy3CdXE=
Subject key identifier:   0B:54:E9:D9:91:02:F2:39:79:CD:38:8E:FE:41:98:B2:B5:C5:A8:51
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       018C1FC21399FD9795E3296E79BA7625EAD6
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/C1Tp2ZEC8jl5zTiO_kGYsrXFqFE.roa
Signing time:             Thu 30 Nov 2023 10:24:21 +0000
ROA not before:           Thu 30 Nov 2023 10:24:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        89.23.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Dec 2023 07:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1f:c2:13:99:fd:97:95:e3:29:6e:79:ba:76:25:ea:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Nov 30 10:24:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b54e9d99102f23979cd388efe4198b2b5c5a851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:11:7d:0d:a3:d6:03:56:b9:02:73:37:3b:
                    68:2d:4a:69:39:62:38:0c:ce:bc:ee:9f:ac:04:e5:
                    2a:b5:b6:94:46:66:40:3e:fa:f0:b3:b4:f3:68:d8:
                    04:74:3d:03:33:c4:c6:1e:53:de:3f:ba:2a:69:97:
                    e9:86:8c:f8:d8:c5:00:32:8e:3e:12:08:d8:89:42:
                    be:ce:16:e8:8f:26:8d:78:4a:73:0b:dd:06:cf:3c:
                    e9:57:00:3f:26:d3:ce:2e:6c:12:47:0e:a4:b2:e1:
                    0d:36:b2:75:96:2e:dd:bf:db:e1:e3:a6:55:dc:1a:
                    c3:ec:0f:c6:00:11:4d:b0:65:89:2c:18:60:2a:83:
                    2b:5d:7b:9d:82:26:5e:96:d7:f8:f2:9d:83:9b:55:
                    9a:f8:80:5e:19:19:93:47:55:9a:95:38:98:8e:94:
                    8f:11:0c:9c:3e:a5:e2:ea:de:13:cc:8f:09:8e:d5:
                    0b:7e:ad:64:5c:18:c2:bc:92:7c:6a:a5:fb:a9:0d:
                    4c:c7:69:58:54:20:a3:3a:c0:97:1e:64:8c:7f:27:
                    5f:fb:24:0e:80:6a:97:6c:f6:b1:34:4a:0f:01:2e:
                    5c:9d:05:eb:64:d3:a8:14:dd:a1:2c:7a:86:dc:fb:
                    d4:15:31:36:b6:6d:9e:34:aa:e7:21:5b:0f:0a:5a:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:54:E9:D9:91:02:F2:39:79:CD:38:8E:FE:41:98:B2:B5:C5:A8:51
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/C1Tp2ZEC8jl5zTiO_kGYsrXFqFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:33:d8:f5:c2:26:fd:34:d6:84:10:8a:dd:8a:bf:75:0c:
         ef:29:a3:e9:1f:8a:ae:14:a1:0f:70:95:56:fd:ae:62:fb:63:
         68:d3:95:47:1c:2c:46:6a:56:ed:7a:9e:bb:d5:ac:39:2a:e6:
         29:30:a0:9c:67:14:de:69:50:9f:a2:56:57:c6:e4:ab:e1:ce:
         1f:d1:85:cb:79:ee:0c:87:ae:48:4f:0d:53:99:47:0f:60:10:
         db:cd:f2:1c:29:01:d3:29:ea:a0:54:64:59:f6:f5:2d:3f:d9:
         c4:30:3d:a5:db:90:50:91:c4:ec:75:49:e9:2d:05:71:bd:82:
         7b:70:d1:5b:1a:58:21:b7:e4:ad:89:47:a0:20:82:0c:0d:dc:
         e3:82:81:ea:97:58:4e:11:ce:c7:a9:cc:d0:5b:bb:ab:33:52:
         40:3a:99:d7:c8:7f:69:bd:3f:c7:7b:21:a3:99:7b:e3:36:d7:
         69:d6:24:ff:7b:ba:07:74:6e:77:9e:ba:54:63:c7:de:a9:0b:
         4a:47:56:47:ee:e7:58:5c:13:66:66:c7:f5:a7:98:02:27:3a:
         22:21:3a:67:8e:85:4a:eb:37:9b:e2:da:f8:e6:20:d3:d8:9f:
         0d:f1:95:2e:66:fe:36:88:63:29:5f:d9:72:f7:4e:1c:f7:7e:
         f1:a8:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org