Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Mmv0bJ1vq2uWyxWLKroQ8Z9jh3k.roa
File:                     Mmv0bJ1vq2uWyxWLKroQ8Z9jh3k.roa (raw, json)
Hash identifier:          NEnn8+NMxxDJS2ZqYWMztBblNL+NEW/vKUNKiECayXQ=
Subject key identifier:   32:6B:F4:6C:9D:6F:AB:6B:96:CB:15:8B:2A:BA:10:F1:9F:63:87:79
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01878125F9B59D66A8DBD371CA3B3F66D652
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Mmv0bJ1vq2uWyxWLKroQ8Z9jh3k.roa
Signing time:             Fri 14 Apr 2023 19:02:42 +0000
ROA not before:           Fri 14 Apr 2023 19:02:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207459
IP address blocks:        77.105.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:81:25:f9:b5:9d:66:a8:db:d3:71:ca:3b:3f:66:d6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Apr 14 19:02:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=326bf46c9d6fab6b96cb158b2aba10f19f638779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:a9:40:95:5a:cd:03:10:f2:69:d7:73:1a:
                    ea:d1:46:7c:f6:b0:f1:0f:e2:1b:d7:d5:04:dd:0e:
                    78:c5:4c:72:59:3f:89:19:d5:83:48:0a:bb:be:60:
                    94:78:59:20:65:d9:3a:34:d0:aa:fa:40:74:ce:b6:
                    2f:1f:0c:88:f8:40:49:b1:56:0e:e3:d8:ea:ae:b8:
                    a0:ab:93:4b:e8:65:a9:26:df:a3:7f:5b:76:4c:30:
                    b7:0f:b6:dd:0f:33:2e:fd:f9:67:48:41:d9:29:14:
                    db:89:77:26:39:ba:43:e5:34:a4:4c:10:38:e7:2b:
                    db:a4:d5:d9:e2:dd:82:bb:35:a3:5e:7d:2b:26:37:
                    32:45:c6:b5:98:ba:76:4c:5e:e9:0f:21:b1:f9:84:
                    71:cb:01:6b:55:db:50:54:e2:b0:13:e2:12:4e:b2:
                    ac:5f:59:9d:41:0c:c6:83:35:07:20:f9:cc:c6:42:
                    b8:4d:c6:2a:e0:08:8f:d9:fd:b7:4f:b5:0f:36:43:
                    44:0a:b1:f4:d7:87:3a:17:01:9d:11:04:fd:4b:93:
                    0c:e0:46:95:f3:fe:3c:53:81:24:d3:6e:4a:c4:0f:
                    ff:af:4b:81:fd:88:36:b4:a1:0d:a7:cd:7d:1b:c5:
                    8a:a0:a2:43:f1:cf:b7:2d:8c:98:71:06:98:b5:f4:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6B:F4:6C:9D:6F:AB:6B:96:CB:15:8B:2A:BA:10:F1:9F:63:87:79
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Mmv0bJ1vq2uWyxWLKroQ8Z9jh3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:7c:1d:0c:7f:b5:31:62:58:e4:c2:ae:47:1a:83:00:92:
         b3:f8:87:11:06:94:5d:0f:3f:f4:55:68:65:d9:77:07:7b:ad:
         0f:b6:71:04:12:ae:a1:d2:f2:a0:02:ae:45:86:b5:fe:40:be:
         86:20:a2:c2:e9:69:68:59:28:09:b0:b3:cd:b3:23:8f:61:10:
         9a:f8:18:b1:0e:6d:92:1a:d8:a3:8d:2b:28:4e:55:db:6c:e4:
         b3:17:92:ed:fa:91:06:f1:ef:74:48:c2:7b:95:6a:d9:06:df:
         7a:09:92:50:69:5c:ab:a1:29:11:5d:17:e8:17:5e:6d:98:63:
         05:ca:08:a8:15:83:f0:1c:5c:6f:ce:1e:5c:15:84:de:86:3c:
         f3:fb:84:2e:11:25:32:a4:83:9e:ae:4c:50:a7:b7:19:6f:2a:
         16:75:7d:c9:8d:84:03:f8:13:cc:ab:25:11:92:ad:25:bf:49:
         fd:e0:6b:68:52:38:e6:1d:71:05:4d:5e:4f:8d:aa:93:f3:7e:
         0b:82:b7:13:a4:d4:07:39:66:ee:a0:4c:ed:ea:69:b4:fa:c1:
         8e:d6:b9:8f:e3:8e:ba:c1:04:66:5a:25:9d:37:af:31:b8:48:
         37:46:16:ee:74:03:1e:1b:30:dc:66:a4:03:03:6b:77:88:c1:
         10:f6:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org