Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fpH6pxwjEhx8kffmCTqPAQcHuVY.roa
File:                     fpH6pxwjEhx8kffmCTqPAQcHuVY.roa (raw, json)
Hash identifier:          Gs27t9wKfZyMZA38EOkCKFo9SAi+DcBkdL2AzjXBB2o=
Subject key identifier:   7E:91:FA:A7:1C:23:12:1C:7C:91:F7:E6:09:3A:8F:01:07:07:B9:56
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01867438E5B48B72047FD2A4897411974C94
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fpH6pxwjEhx8kffmCTqPAQcHuVY.roa
Signing time:             Tue 21 Feb 2023 13:45:31 +0000
ROA not before:           Tue 21 Feb 2023 13:45:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.105.4.0/24 maxlen: 24
                          185.47.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:74:38:e5:b4:8b:72:04:7f:d2:a4:89:74:11:97:4c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Feb 21 13:45:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e91faa71c23121c7c91f7e6093a8f010707b956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:60:91:06:9a:85:d6:74:71:10:81:ba:68:
                    27:4c:bb:f7:32:07:3d:ae:52:2f:03:ec:06:ec:57:
                    35:28:cd:8e:1d:c9:1d:d0:9d:fd:5d:aa:70:22:07:
                    bc:99:5a:1a:98:53:38:51:23:b7:03:6b:38:c3:b7:
                    68:8e:68:da:b2:db:ad:0f:d8:dd:c9:48:ac:ae:ad:
                    ee:2b:e8:da:78:20:ef:01:a6:a4:37:9c:92:4b:55:
                    5a:e6:b6:6e:4f:43:3e:16:d9:f3:79:18:34:f7:91:
                    24:07:10:b5:d6:4f:fd:09:45:14:c9:d4:b4:65:b8:
                    cc:f4:1d:96:de:24:ad:3e:c4:2e:9f:1c:f4:3a:5b:
                    57:2e:b4:8a:11:5e:5b:12:a3:3c:8f:9d:89:fb:b8:
                    07:15:8e:c2:0e:13:2e:f7:c1:72:87:94:7e:da:34:
                    7f:30:04:48:0c:98:94:49:a4:dc:e6:60:29:d9:f9:
                    54:f4:e3:60:88:57:ac:13:89:77:35:f0:54:66:77:
                    2d:54:54:c2:82:d3:3e:2f:95:d3:79:0e:83:52:f2:
                    60:b2:9e:3b:e6:bd:42:81:fe:9c:e4:2a:05:a5:14:
                    ed:26:bf:b3:77:42:05:a6:0d:53:3d:20:58:ea:83:
                    c9:43:c9:0f:60:09:4d:cc:58:88:9d:f1:83:2b:62:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:91:FA:A7:1C:23:12:1C:7C:91:F7:E6:09:3A:8F:01:07:07:B9:56
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fpH6pxwjEhx8kffmCTqPAQcHuVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.4.0/24
                  185.47.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f7:97:2e:d9:fe:40:6f:d0:0d:aa:9c:76:b6:9d:18:48:1a:
         cd:2a:a4:66:09:92:df:29:94:a7:98:b6:ae:45:65:9c:86:e3:
         35:09:1c:8a:7e:b1:c4:31:3e:84:4d:66:31:25:f9:28:6f:e2:
         66:ec:b1:22:5a:a2:ed:e0:93:76:ad:43:8c:33:a2:07:76:1a:
         5f:55:28:fd:b2:23:95:61:3e:71:95:62:c4:55:c4:4d:73:6a:
         a3:38:88:cb:e0:1e:79:00:38:c6:53:30:ce:e5:78:59:57:53:
         36:8d:cb:15:d7:d8:3e:59:5e:07:fc:17:8c:82:6a:c4:eb:d5:
         ab:d1:97:69:be:5d:09:b6:2b:5c:94:09:6e:bf:0e:16:4d:15:
         34:a3:3f:49:7b:bb:76:e2:d6:01:71:8c:89:89:ab:19:0b:cb:
         6d:45:e7:ba:b2:18:c7:8f:54:08:11:17:2f:a4:13:83:98:13:
         d3:73:91:5d:08:69:98:37:c2:f5:3c:46:78:20:62:7a:e5:0f:
         8c:8d:a9:96:00:82:0b:d3:7e:21:06:a6:2c:bf:dc:c0:f1:1c:
         cf:0b:f9:02:33:9a:e0:e3:92:8e:0f:e5:be:c5:ac:f0:34:20:
         31:1d:c4:2d:9b:0e:fe:28:16:94:c2:dc:b2:04:65:c3:99:c4:
         18:e5:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org