Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7dPcyEAhs9MwU_Uq78gQlcIxiYU.roa
File:                     7dPcyEAhs9MwU_Uq78gQlcIxiYU.roa (raw, json)
Hash identifier:          7cB1pkZnKEcldQKn37E1oAWHo1X6552AoySaSpcouaU=
Subject key identifier:   ED:D3:DC:C8:40:21:B3:D3:30:53:F5:2A:EF:C8:10:95:C2:31:89:85
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01889EBF87162810D94A5855273BB6C8C7F1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7dPcyEAhs9MwU_Uq78gQlcIxiYU.roa
Signing time:             Fri 09 Jun 2023 06:02:12 +0000
ROA not before:           Fri 09 Jun 2023 06:02:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206119
IP address blocks:        77.105.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Jun 2023 17:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9e:bf:87:16:28:10:d9:4a:58:55:27:3b:b6:c8:c7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun  9 06:02:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edd3dcc84021b3d33053f52aefc81095c2318985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:1f:13:36:7a:2c:0f:37:de:a6:9a:47:6f:
                    3d:d7:a5:fc:a4:9a:26:84:39:8e:8e:74:99:19:c2:
                    a9:78:80:7a:55:2b:5d:f9:73:10:85:28:27:56:03:
                    fb:34:82:2d:d0:59:de:e9:20:f6:fd:11:ab:d7:6e:
                    70:94:93:3a:5a:71:22:77:ed:4e:61:86:03:d6:7b:
                    d9:17:2c:ca:25:0e:d4:aa:fa:c1:3d:8f:66:32:56:
                    06:4c:61:63:ff:1a:b1:2f:fb:a6:7f:70:49:1f:a9:
                    fa:7d:a6:12:17:83:70:73:19:12:88:3f:da:66:48:
                    e4:09:02:8c:d6:84:f1:06:fa:58:8f:2c:63:6f:97:
                    92:8b:8f:aa:cf:d1:e2:b9:ee:e3:dd:80:98:94:2f:
                    7d:c9:d9:1a:cd:19:23:cd:88:c2:f2:f0:94:62:15:
                    cb:12:7f:a2:95:d6:0e:3e:3a:ff:b2:de:7f:64:9c:
                    4c:00:03:84:7f:e2:7e:7e:33:de:ea:5d:30:6a:c8:
                    11:d0:fa:bd:e5:3f:c5:6a:8a:b8:c0:80:39:19:15:
                    a3:6c:4b:b9:4d:fa:33:de:53:8f:c8:0e:36:0d:e4:
                    85:54:c3:19:8c:f3:79:6d:de:6b:44:c2:4b:b5:2a:
                    f5:18:c5:bd:b8:bb:b5:82:9d:ed:6a:47:d7:a3:d4:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D3:DC:C8:40:21:B3:D3:30:53:F5:2A:EF:C8:10:95:C2:31:89:85
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7dPcyEAhs9MwU_Uq78gQlcIxiYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:69:f4:e6:fd:b2:60:9b:aa:66:cd:cd:f0:6d:0d:8d:ec:ae:
         08:0f:27:55:8b:b7:d5:e3:90:48:b2:dd:c6:53:a1:1c:12:c2:
         64:91:cf:b4:0d:3b:4c:e4:ce:e7:53:5d:a6:8b:c2:8b:cd:a6:
         9e:7f:67:44:95:ee:11:e5:3f:0c:a0:c9:27:99:9f:06:4f:6d:
         62:d0:63:bc:14:bc:58:b6:cb:7d:32:a2:4f:80:ad:a0:17:f2:
         ae:1a:f4:6b:7b:84:c0:66:d5:a8:a5:76:b6:1f:ba:3c:86:39:
         30:cd:54:3a:0d:15:c9:25:cc:11:2f:cc:66:6e:ba:22:9e:a8:
         45:6d:ab:5d:7b:94:f0:71:45:14:a6:dd:1f:5f:2f:c7:ea:dd:
         3b:0b:5d:c2:58:cf:a6:a3:a8:b2:28:a6:b2:24:88:04:6e:0b:
         4a:2c:e2:5b:33:d5:ec:76:54:1f:ab:e3:d4:6d:63:06:c8:9e:
         22:84:ce:df:68:5d:98:34:1b:58:2c:c0:e8:7e:a0:18:08:d5:
         72:89:3d:66:fe:af:d0:88:f6:d5:28:3d:94:db:a9:3b:9d:7d:
         e1:7e:46:35:2b:0a:d0:0b:99:22:dc:82:d5:6a:eb:7f:7c:7b:
         40:cd:58:7b:d8:db:ca:7b:f3:ae:bd:45:d1:30:5f:df:77:69:
         10:aa:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:25 2024 by rpki-client on console-fra.rpki-client.org