Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ms8Lc3S932ojp17WVxQIiVrxKSc.roa
File:                     ms8Lc3S932ojp17WVxQIiVrxKSc.roa (raw, json)
Hash identifier:          9J0Aw/IV2cZBvkZMVvkSA3CN4sAWT1/OHq0h7es7o4s=
Subject key identifier:   9A:CF:0B:73:74:BD:DF:6A:23:A7:5E:D6:57:14:08:89:5A:F1:29:27
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0185B4D66A88FD9AD0D8FB74100091349CC0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ms8Lc3S932ojp17WVxQIiVrxKSc.roa
Signing time:             Sun 15 Jan 2023 09:50:28 +0000
ROA not before:           Sun 15 Jan 2023 09:50:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206119
IP address blocks:        77.105.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 May 2023 09:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b4:d6:6a:88:fd:9a:d0:d8:fb:74:10:00:91:34:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan 15 09:50:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9acf0b7374bddf6a23a75ed6571408895af12927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:ba:19:69:69:b2:40:39:49:a3:12:0a:16:
                    89:f4:06:fb:70:f0:50:c8:a3:70:1d:5d:92:d6:7f:
                    b3:67:8e:7c:e0:3f:a0:6e:8b:9d:c9:db:e0:4d:12:
                    19:54:04:1d:37:69:ae:b6:87:4c:d3:d6:90:cc:50:
                    38:fd:3a:fa:a0:f1:58:a2:3f:29:0f:ba:ae:ea:d2:
                    61:71:9d:96:a1:03:4a:ce:c3:e9:ce:93:88:1b:20:
                    6e:18:f9:83:24:16:de:ae:77:ba:64:50:ac:a9:1f:
                    27:1e:e4:08:33:90:81:a2:5d:b2:34:b5:91:f1:ad:
                    42:7a:ea:78:23:f9:6a:e1:3d:b1:5c:92:c7:1a:89:
                    d8:14:06:ef:10:72:c8:cb:50:9e:4d:c0:9f:7b:e3:
                    53:48:66:c3:39:ac:fd:1f:3c:f9:c6:6a:93:08:38:
                    a5:d0:db:10:8a:e6:62:db:0a:af:a8:02:1e:bb:03:
                    3c:c6:0b:24:16:79:05:44:f2:3c:d6:58:2d:22:14:
                    db:99:f2:11:15:dc:28:6c:b2:a6:fc:5e:51:59:ea:
                    d1:e4:a1:8b:0f:57:99:8d:4b:e3:21:9c:66:da:54:
                    0c:67:0f:7e:b6:ff:dd:95:16:db:31:2f:6d:1b:ce:
                    f5:be:cf:3a:7a:85:19:28:90:89:03:08:fe:f7:8d:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:0B:73:74:BD:DF:6A:23:A7:5E:D6:57:14:08:89:5A:F1:29:27
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ms8Lc3S932ojp17WVxQIiVrxKSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:3f:0e:60:e2:4d:81:1d:32:d1:2f:be:48:eb:67:90:4b:
         38:02:ba:fb:b3:cc:e7:b6:8d:e9:a5:61:6e:ea:b6:8d:23:fa:
         11:97:3d:3d:7e:7b:e7:65:a7:26:31:ae:b8:ac:40:93:0b:f2:
         3b:0b:0e:d3:f0:8a:e1:ad:dc:b9:62:c7:d8:c6:8c:92:d7:7f:
         cc:07:80:b1:3e:58:eb:01:12:a3:9e:1d:c8:5c:08:14:86:a0:
         61:01:71:07:3e:c7:ba:55:0f:08:34:21:f2:d0:3b:16:57:76:
         90:52:4b:30:c3:2f:fe:b6:d7:a6:bd:70:51:79:21:4a:8a:84:
         67:09:db:78:0c:dd:ca:54:f4:d7:6f:dd:62:79:ff:4c:f1:1a:
         9c:4f:79:d4:9f:06:dd:5b:88:5b:2a:51:3a:ef:6a:77:13:f4:
         9e:48:00:ea:f8:52:b3:5d:62:fb:53:bb:b1:87:89:71:79:53:
         8a:d8:04:90:ca:91:57:53:f9:a7:c9:1f:13:1c:39:fe:55:bc:
         b2:d9:c0:fb:3e:2b:e3:59:47:90:52:d3:7f:56:27:98:b3:c6:
         b5:d5:59:78:88:a6:66:c0:10:e0:90:68:3f:47:af:c7:1c:12:
         28:0c:44:69:3d:79:c2:b2:a6:a2:df:6a:e9:a6:0b:46:bf:d3:
         83:00:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org