Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-efcCWXnNaYmWew3_Cka58pUlv0.roa
File:                     1-efcCWXnNaYmWew3_Cka58pUlv0.roa (raw, json)
Hash identifier:          QmaFocM9nRlqt/ZfGPQGaKAMehrSZfMkR8ivCPfDLNQ=
Subject key identifier:   F9:E7:DC:09:65:E7:35:A6:26:59:EC:37:FC:29:1A:E7:CA:54:96:FD
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0187813EAF2E44D76922B601A82A66A75940
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-efcCWXnNaYmWew3_Cka58pUlv0.roa
Signing time:             Fri 14 Apr 2023 19:29:41 +0000
ROA not before:           Fri 14 Apr 2023 19:29:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19437
IP address blocks:        77.105.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:81:3e:af:2e:44:d7:69:22:b6:01:a8:2a:66:a7:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Apr 14 19:29:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9e7dc0965e735a62659ec37fc291ae7ca5496fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:8e:b3:2b:40:e3:fa:2e:55:c5:eb:c2:34:
                    4c:c3:be:aa:f4:fe:8e:a0:26:51:86:12:d3:75:e1:
                    54:d0:9b:0c:2b:00:77:ff:3f:3a:ab:1c:34:cc:2b:
                    ef:ce:dd:9b:d7:61:e5:e7:c7:a5:0a:84:33:00:21:
                    61:9a:4c:36:83:97:24:6f:b3:5d:29:71:9b:8d:e4:
                    71:31:ff:c3:10:42:5b:2e:91:9c:c5:84:a6:ac:25:
                    54:86:e6:99:84:16:a3:5d:be:04:3b:42:4a:0e:93:
                    65:e8:cc:87:57:98:e2:62:a0:43:6b:db:cc:da:b6:
                    d7:81:24:1d:1f:ef:55:13:b7:9d:55:2e:61:e2:18:
                    47:11:21:36:b7:1d:b8:88:97:08:b1:5d:69:bb:a7:
                    f7:bf:e8:8c:11:a8:2a:d6:8f:be:25:7c:92:c6:cd:
                    98:7a:68:82:b1:ca:ec:18:e5:ff:64:66:c3:15:eb:
                    30:e2:9a:db:c7:52:0b:a2:b9:8e:be:9a:41:fc:4b:
                    b8:86:05:1a:63:42:1d:15:93:5a:47:46:ec:22:c7:
                    21:be:52:0f:06:a1:95:3e:89:16:0f:55:ae:9c:02:
                    c0:c0:3c:09:73:8e:af:ea:74:5c:b7:cc:21:bd:30:
                    fe:f6:d4:52:dd:ac:3e:97:98:43:51:93:0c:48:94:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E7:DC:09:65:E7:35:A6:26:59:EC:37:FC:29:1A:E7:CA:54:96:FD
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-efcCWXnNaYmWew3_Cka58pUlv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:ce:19:16:52:8c:23:21:5d:ee:bf:dd:a4:45:93:f9:34:
         ca:23:29:cd:9e:ee:5a:86:d5:19:5e:30:2b:6a:4f:d6:23:d3:
         ec:89:b5:2e:57:cd:26:a1:50:60:fd:05:5c:99:6e:a2:dd:08:
         5a:a8:41:6c:2d:3a:65:9b:2f:24:39:dd:10:16:b3:2b:fd:e6:
         bc:8e:85:ae:97:da:f2:7b:44:16:0d:14:a0:2a:7d:e0:71:a0:
         ff:87:cd:7f:23:d7:b1:22:d0:51:f5:57:a0:d3:08:6e:5c:59:
         6c:ee:f2:55:fe:ca:2f:3c:6e:c5:ea:92:c9:63:5f:18:ed:7e:
         55:56:19:27:55:e0:6d:56:9f:27:e3:65:07:3b:38:da:a7:89:
         4d:c8:b6:5d:4a:78:44:95:75:d8:7c:46:ce:d5:65:6a:01:49:
         89:91:63:2d:a9:f9:88:68:2e:51:b1:cd:87:58:03:a4:27:50:
         37:a3:5b:b6:36:87:a1:3b:78:8f:4e:b2:f0:12:63:ca:7b:bb:
         99:b1:4a:a9:81:7b:02:ff:d3:2a:85:2c:f1:dd:3f:c6:8a:e9:
         bd:91:45:0f:28:9e:3b:e6:91:87:2e:e3:dc:d6:4a:ed:5f:97:
         39:2f:ac:aa:86:0a:39:96:66:f3:14:a8:f0:bc:aa:10:a3:ea:
         1b:3c:d8:46
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYeBPq8uRNdpIrYBqCpmp1lAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNDE0MTkyOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWU3ZGMwOTY1ZTczNWE2MjY1OWVjMzdmYzI5MWFlN2NhNTQ5NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb+OsytA4/ouVcXrwjRMw76q9P6O
oCZRhhLTdeFU0JsMKwB3/z86qxw0zCvvzt2b12Hl58elCoQzACFhmkw2g5ckb7Nd
KXGbjeRxMf/DEEJbLpGcxYSmrCVUhuaZhBajXb4EO0JKDpNl6MyHV5jiYqBDa9vM
2rbXgSQdH+9VE7edVS5h4hhHESE2tx24iJcIsV1pu6f3v+iMEagq1o++JXySxs2Y
emiCscrsGOX/ZGbDFesw4prbx1ILormOvppB/Eu4hgUaY0IdFZNaR0bsIschvlIP
BqGVPokWD1WunALAwDwJc46v6nRct8whvTD+9tRS3aw+l5hDUZMMSJRg2wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPnn3All5zWmJlnsN/wpGufKVJb9MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvMS1lZmNDV1huTmFZbVdldzNfQ2thNThwVWx2MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2Ix
Yi8xL2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1pBDAN
BgkqhkiG9w0BAQsFAAOCAQEAfufOGRZSjCMhXe6/3aRFk/k0yiMpzZ7uWobVGV4w
K2pP1iPT7Im1LlfNJqFQYP0FXJluot0IWqhBbC06ZZsvJDndEBazK/3mvI6Frpfa
8ntEFg0UoCp94HGg/4fNfyPXsSLQUfVXoNMIblxZbO7yVf7KLzxuxeqSyWNfGO1+
VVYZJ1XgbVafJ+NlBzs42qeJTci2XUp4RJV12HxGztVlagFJiZFjLan5iGguUbHN
h1gDpCdQN6NbtjaHoTt4j06y8BJjynu7mbFKqYF7Av/TKoUs8d0/xorpvZFFDyie
O+aRhy7j3NZK7V+XOS+sqoYKOZZm8xSo8LyqEKPqGzzYRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org