Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Zme8S-9vHLPmJLU6k_XoCzYsa6I.roa
File:                     Zme8S-9vHLPmJLU6k_XoCzYsa6I.roa (raw, json)
Hash identifier:          wfJ3YOXAQ/MZ425kqC1AqqmnaTq21+2DuInzO6tErc0=
Subject key identifier:   66:67:BC:4B:EF:6F:1C:B3:E6:24:B5:3A:93:F5:E8:0B:36:2C:6B:A2
Certificate issuer:       /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial:       018FCA395D3CC7C9F4C6459D5788535BBF39
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Zme8S-9vHLPmJLU6k_XoCzYsa6I.roa
Signing time:             Thu 30 May 2024 15:58:28 +0000
ROA not before:           Thu 30 May 2024 15:58:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212912
IP address blocks:        77.93.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 23:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ca:39:5d:3c:c7:c9:f4:c6:45:9d:57:88:53:5b:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
        Validity
            Not Before: May 30 15:58:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6667bc4bef6f1cb3e624b53a93f5e80b362c6ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:5b:60:cf:cd:d6:a6:8a:1c:a9:00:ae:54:
                    e9:58:58:24:e2:07:21:40:44:93:96:54:5e:0e:55:
                    1c:e9:84:0d:d4:96:ea:90:82:be:44:6e:f2:26:d2:
                    19:9d:70:af:db:ab:bf:cd:23:74:a2:af:38:dc:39:
                    a0:09:ea:e8:80:19:c3:15:b1:01:9c:b9:5a:d4:63:
                    ad:ad:9f:2d:36:3b:e3:2e:c8:c4:e0:c8:56:54:97:
                    28:01:07:c5:14:57:03:03:e5:40:0c:3e:0d:81:ec:
                    56:91:f1:2e:d1:48:e1:74:f6:6a:3b:ef:2e:4e:1f:
                    0a:71:b4:b5:30:de:a2:a9:e0:d7:b2:21:94:7d:aa:
                    81:9e:f1:35:58:f6:dd:1a:6c:ac:51:c0:c6:46:2d:
                    27:92:4f:c7:62:56:b7:7e:1b:b6:e0:a3:bf:33:11:
                    7f:1c:cd:df:5c:19:1c:89:89:93:fa:fb:f0:7a:88:
                    b2:a8:dd:70:b4:cc:00:5b:3d:1b:dc:5b:06:77:71:
                    6e:12:11:ff:a3:ec:b0:37:5a:2d:cd:14:3e:3c:fe:
                    8b:f1:ba:e9:06:9f:87:eb:51:ee:65:8c:55:ef:64:
                    fb:ea:30:7d:02:16:c4:e9:39:8d:8e:cb:c8:2a:80:
                    d4:0f:ac:a7:0e:d6:26:f7:9f:7a:40:8e:bf:cf:45:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:67:BC:4B:EF:6F:1C:B3:E6:24:B5:3A:93:F5:E8:0B:36:2C:6B:A2
            X509v3 Authority Key Identifier:
                keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Zme8S-9vHLPmJLU6k_XoCzYsa6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:38:a6:05:39:e2:cd:fb:48:55:0d:e7:fa:3b:5b:cb:8b:d8:
         be:79:8b:49:b0:3e:e8:d1:4e:30:e1:98:55:ae:c6:bc:8c:08:
         d1:57:74:be:ba:27:70:bc:25:70:9d:9c:fa:7c:2d:4d:bc:db:
         09:04:ae:50:66:6f:69:62:af:50:0b:98:e9:3c:66:16:ae:91:
         f9:c2:92:7f:a7:b7:06:97:8f:5d:79:b2:d2:00:de:80:4d:de:
         95:10:75:e7:c5:17:af:8c:24:e3:1d:85:8a:60:23:1c:31:0b:
         4f:a7:88:61:cc:d9:45:7d:9c:90:da:df:83:62:a6:79:a9:d7:
         2c:76:28:4f:4b:fe:28:c6:a7:62:16:1a:8b:28:54:57:08:e7:
         0b:c5:60:26:05:9f:3f:61:82:1a:18:57:2d:ec:41:fc:43:1d:
         16:ee:36:44:2e:88:89:f5:fb:4c:cd:74:b0:76:00:c0:82:c1:
         9c:99:c4:53:10:a7:65:1d:da:f4:63:73:cd:6e:4f:b1:8a:3c:
         66:0c:56:db:44:b8:18:41:16:e6:63:1e:4a:a9:8c:23:87:10:
         46:42:d7:83:d4:64:e9:23:64:b6:d3:d1:a6:83:8b:c3:ca:e1:
         fc:dd:da:c4:29:18:d3:c7:07:81:aa:b7:63:b6:68:ab:3b:3f:
         58:d3:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 00:23:39 2024 by rpki-client on console-fra.rpki-client.org