Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ou_Grbb5Beqr3ESZlGUjmku3KNo.roa
File:                     ou_Grbb5Beqr3ESZlGUjmku3KNo.roa (raw, json)
Hash identifier:          V+i4VFaj3UyQg2aRFUeydWFxxaIc6H4ps6x8ouwd2lQ=
Subject key identifier:   A2:EF:C6:AD:B6:F9:05:EA:AB:DC:44:99:94:65:23:9A:4B:B7:28:DA
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018571D7CE97B59DBE2C6CD93AED71DACA1F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ou_Grbb5Beqr3ESZlGUjmku3KNo.roa
Signing time:             Mon 02 Jan 2023 09:37:26 +0000
ROA not before:           Mon 02 Jan 2023 09:37:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        77.105.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:ce:97:b5:9d:be:2c:6c:d9:3a:ed:71:da:ca:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  2 09:37:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2efc6adb6f905eaabdc44999465239a4bb728da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:70:34:3e:2d:93:b9:9b:a6:16:63:ac:5c:
                    6b:e6:17:a2:11:ec:38:26:bd:ae:cc:ae:9f:70:bd:
                    2e:61:cd:24:d4:7c:09:8f:39:62:af:af:fd:3f:aa:
                    17:2d:24:f9:28:11:3a:b1:83:2e:0b:99:06:f4:8e:
                    6b:d7:69:2d:ef:e5:ce:93:36:fc:2a:36:b0:40:98:
                    69:e0:75:14:e5:6d:41:b7:55:ff:ef:1e:2f:e1:db:
                    77:a9:6b:9a:37:fd:8b:ec:a7:55:ca:fa:6a:a0:be:
                    9f:c6:67:29:82:ed:00:cd:59:11:ca:5c:f1:3c:19:
                    29:17:d2:27:71:be:f8:b1:75:2b:8b:f3:5b:c3:b9:
                    e4:77:a0:49:0d:d7:03:f3:9c:e3:d2:25:39:a3:dc:
                    5d:da:ed:0d:0e:33:90:1f:a0:35:c6:96:e6:65:bc:
                    05:81:1d:11:74:4d:2a:72:0e:1e:7f:60:ab:30:32:
                    ec:bd:04:09:91:70:d8:78:c6:c6:8b:17:49:a5:15:
                    3d:d2:82:b9:1f:3f:78:66:6b:49:7b:c1:e9:7a:7e:
                    6c:a9:4c:4b:31:d1:2f:61:ad:b5:d6:75:84:bf:84:
                    1c:ee:74:c6:77:b0:4f:f3:39:8f:a1:42:57:c7:7e:
                    06:01:bc:65:2e:fd:83:e3:21:e7:95:9a:a8:7b:26:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:C6:AD:B6:F9:05:EA:AB:DC:44:99:94:65:23:9A:4B:B7:28:DA
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ou_Grbb5Beqr3ESZlGUjmku3KNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:47:51:29:79:eb:c7:eb:36:5a:50:73:31:ec:6d:76:68:
         ce:d9:2b:8b:1f:54:21:98:8c:b0:a4:51:d1:a7:87:00:56:dd:
         fe:30:77:84:13:5b:20:e1:54:83:3c:3a:1c:80:88:75:c2:1f:
         9f:cb:5e:68:2a:63:47:f2:0e:30:a0:5e:b1:b9:fe:60:54:f8:
         03:d4:a1:03:59:f5:ef:f7:bf:37:0b:35:58:e2:1e:5a:56:2d:
         cc:a8:cc:12:a4:f6:97:a7:af:d1:b9:17:7c:3d:0b:e2:01:aa:
         d3:a3:9d:d7:2a:78:b6:a7:77:6b:b1:08:b3:09:ad:1d:46:f8:
         0a:14:a6:f6:84:64:f2:f9:a0:ca:c8:46:87:33:1e:69:dc:a7:
         ba:89:d0:6f:d2:63:66:2a:f6:78:10:92:56:9a:4f:42:76:12:
         e8:d2:b3:e9:88:90:e1:1b:4c:b7:a4:40:26:a7:3b:96:60:44:
         0b:40:c2:1c:d8:42:70:6e:2a:f5:47:1b:9d:29:45:06:d5:75:
         d2:58:98:43:fa:e8:39:08:b2:e2:2f:0a:1d:3d:08:be:de:66:
         5d:b5:4b:a5:46:7c:3d:18:24:29:0f:a0:20:ea:b7:de:98:16:
         40:fc:50:74:a2:5c:11:9f:0f:70:19:a5:9d:68:ef:7c:ee:e1:
         90:b3:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org