Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/CBhcVo1tSfufXf93TgaqEqZizm4.roa
File:                     CBhcVo1tSfufXf93TgaqEqZizm4.roa (raw, json)
Hash identifier:          bihB4AP9ezLtm/kFz1PWNUO9VLbsKnKnC13+TncyxL8=
Subject key identifier:   08:18:5C:56:8D:6D:49:FB:9F:5D:FF:77:4E:06:AA:12:A6:62:CE:6E
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       018969D8933D9DD0701CC244C4FE0515D6C6
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/CBhcVo1tSfufXf93TgaqEqZizm4.roa
Signing time:             Tue 18 Jul 2023 16:32:28 +0000
ROA not before:           Tue 18 Jul 2023 16:32:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203727
IP address blocks:        77.91.97.0/24 maxlen: 24
                          77.91.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:69:d8:93:3d:9d:d0:70:1c:c2:44:c4:fe:05:15:d6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Jul 18 16:32:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08185c568d6d49fb9f5dff774e06aa12a662ce6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:66:83:3f:0e:93:7f:1b:91:88:8e:87:2c:
                    bc:8f:97:02:be:03:6c:39:f9:25:b6:12:fd:b7:ef:
                    6c:d1:6b:9d:a5:95:d9:eb:e6:95:90:17:75:b5:06:
                    5c:aa:97:f7:4c:74:e7:9f:0b:00:25:76:bb:af:5f:
                    ec:9c:c9:6b:84:28:ff:1f:93:82:39:b9:54:d8:b4:
                    df:c8:82:ad:fa:30:98:12:63:41:a8:dd:a1:a5:c8:
                    00:20:b5:71:7b:b3:06:7e:2b:51:6b:a1:b5:a0:c3:
                    01:f5:fe:ea:c3:75:b7:64:c8:a9:c3:a7:14:84:a5:
                    9a:be:25:ea:93:54:a8:42:11:a6:0d:22:f7:dc:d7:
                    93:f1:9e:3b:82:5e:39:d6:9d:77:4a:ee:e6:7d:74:
                    33:ae:57:2a:5d:b6:0e:82:bc:4e:4a:16:23:c8:81:
                    7e:bc:b7:d1:1c:2d:17:95:22:51:a8:01:ca:dd:ff:
                    23:68:ee:86:8f:d2:fe:73:9e:df:a7:a8:d5:b1:50:
                    9e:26:f7:61:73:10:d1:43:69:6a:14:f1:54:89:ce:
                    52:ec:ef:72:11:8a:b1:8e:06:af:ae:d9:cc:ed:60:
                    9b:6a:5e:28:51:f0:ef:44:a1:5d:e5:9a:a5:c8:c6:
                    34:32:cd:5e:b6:c7:46:4c:9f:16:36:4c:2c:3d:ee:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:5C:56:8D:6D:49:FB:9F:5D:FF:77:4E:06:AA:12:A6:62:CE:6E
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/CBhcVo1tSfufXf93TgaqEqZizm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.97.0/24
                  77.91.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:73:21:2b:32:2b:7e:3a:fd:06:4c:01:80:d7:2b:0d:54:
         02:21:5c:a0:f4:fc:34:ee:33:e7:83:7a:92:d4:62:d3:bf:d2:
         66:16:da:ac:14:79:d8:b3:82:5a:f0:9c:df:67:bf:ef:c7:b1:
         06:79:46:31:9c:87:7b:09:ba:d4:11:11:1f:5d:9d:24:e4:5a:
         e2:04:29:63:9a:0a:17:32:24:d9:e8:7d:15:35:be:91:74:ce:
         a8:35:fe:1e:56:12:b5:ad:ec:d1:52:aa:2f:98:37:81:10:82:
         44:6a:86:a8:20:21:04:ea:9d:97:c0:f3:a0:2d:78:93:5d:38:
         84:08:63:d9:3b:63:74:9c:4d:16:c2:03:38:93:48:2a:52:74:
         0b:f5:5d:c0:fb:7e:d3:71:e4:72:97:30:14:a2:17:61:e2:36:
         56:16:ea:ac:f0:c6:7f:c2:0e:51:55:33:21:91:b0:fb:86:97:
         95:9d:62:dd:97:b1:17:73:6c:40:99:f9:06:5c:e8:73:22:91:
         a2:a4:2d:94:7d:89:3d:6f:87:b5:3f:a2:8a:3d:1d:94:6a:eb:
         cf:78:55:4d:8e:9f:5d:2a:47:ad:5a:5f:7b:d5:3d:a9:c0:95:
         c8:37:0a:ad:15:30:69:38:c2:40:bf:2a:85:e0:83:cc:5b:78:
         6c:e8:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 18:11:27 2023 by rpki-client on console-fra.rpki-client.org