Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/B6sDk-VYzArxULjLa-rrwu2OnvM.roa
File:                     B6sDk-VYzArxULjLa-rrwu2OnvM.roa (raw, json)
Hash identifier:          LXAFm/ZAMz7h41x78H7zzlaHXElpUPtu22h6KEJUSqg=
Subject key identifier:   07:AB:03:93:E5:58:CC:0A:F1:50:B8:CB:6B:EA:EB:C2:ED:8E:9E:F3
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEE7B131E8E34F1F1E7B9592D06E64
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/B6sDk-VYzArxULjLa-rrwu2OnvM.roa
Signing time:             Sun 01 Jan 2023 06:04:57 +0000
ROA not before:           Sun 01 Jan 2023 06:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213144
IP address blocks:        77.65.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:e7:b1:31:e8:e3:4f:1f:1e:7b:95:92:d0:6e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07ab0393e558cc0af150b8cb6beaebc2ed8e9ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:f3:44:a2:53:ef:93:b6:4d:b7:a7:5c:02:
                    a6:5e:a7:35:ad:6f:07:bc:ca:41:30:0e:c5:46:c8:
                    87:e5:8e:ee:e0:41:22:cc:51:5a:d4:a3:01:ba:be:
                    e3:ef:f9:3b:6f:ab:ef:35:e5:b4:1c:f8:d8:95:2a:
                    32:2c:5a:ce:67:bb:e5:b2:e1:b5:14:3d:8e:d8:f7:
                    78:f0:8a:08:24:a8:1a:64:09:5a:22:01:84:4e:d9:
                    fc:25:bb:e6:74:61:b2:78:e9:77:d0:ca:d8:fc:ae:
                    9e:62:69:ba:9e:28:f4:a5:1d:c8:e1:28:9b:4f:88:
                    a5:ab:3f:1b:13:10:2d:34:81:79:7f:3a:bb:fd:61:
                    fd:de:1d:ed:86:98:68:07:9e:a2:cd:fe:9a:ae:70:
                    05:41:93:64:4c:1e:e2:f8:36:68:b7:84:15:e5:90:
                    67:16:11:3b:47:b5:e8:a5:3b:eb:1d:1a:c3:fc:15:
                    03:97:f4:24:14:0e:45:9a:54:c6:e7:d2:d3:72:6d:
                    01:f7:85:70:59:2c:d5:d0:ac:72:bb:a6:96:5c:ee:
                    06:23:97:a9:5c:5f:b6:44:26:13:12:67:3c:4a:7d:
                    5a:dc:c2:06:bc:6f:6c:d8:71:93:cd:2e:0f:82:5b:
                    cb:e0:6c:e1:d1:d9:38:5a:b9:1d:79:03:a9:d8:b3:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AB:03:93:E5:58:CC:0A:F1:50:B8:CB:6B:EA:EB:C2:ED:8E:9E:F3
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/B6sDk-VYzArxULjLa-rrwu2OnvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:24:98:d5:b9:d3:4a:0b:df:29:68:c9:22:69:bb:63:40:b6:
         bd:e1:67:72:4d:82:f5:e2:a9:84:e9:d0:68:0b:d4:62:c2:5b:
         60:29:c9:ad:96:92:30:30:7f:1e:48:70:5a:17:d1:7f:dc:0c:
         30:74:9e:42:c1:21:5d:25:d5:0b:65:08:16:42:e7:65:3d:c5:
         3d:0b:aa:69:45:4d:5f:9c:31:0c:b0:94:33:8d:cf:66:a5:bd:
         59:2c:0c:2c:c0:88:10:1a:86:9f:b8:6e:45:82:a2:00:05:f1:
         78:dd:8d:86:9d:2d:32:f8:c5:5a:35:f6:7a:2f:2e:86:88:f1:
         40:66:05:b0:3e:72:c2:c4:2e:44:77:52:f8:43:40:fe:1d:dc:
         e4:c4:80:51:27:16:dd:3d:02:0b:8c:a3:ff:fa:5b:67:09:29:
         07:b8:fd:60:25:61:b2:86:fa:54:35:80:d5:c4:f7:92:4c:07:
         ea:82:37:65:e0:19:51:b0:2e:b8:83:f6:f0:39:90:5f:17:a4:
         f2:5d:1b:2c:30:e0:67:90:dd:d6:34:e4:41:27:02:00:a0:fe:
         65:e6:11:b2:66:18:ce:72:4b:e3:3e:8f:0b:50:e7:29:f3:96:
         78:60:dc:3d:82:01:9b:c8:80:3f:8a:af:9d:3f:83:1a:38:a9:
         ab:ca:d2:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7uexMejjTx8ee5WS0G5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FiMDM5M2U1NThjYzBhZjE1MGI4Y2I2YmVhZWJjMmVkOGU5ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWnzRKJT75O2TbenXAKmXqc1rW8H
vMpBMA7FRsiH5Y7u4EEizFFa1KMBur7j7/k7b6vvNeW0HPjYlSoyLFrOZ7vlsuG1
FD2O2Pd48IoIJKgaZAlaIgGETtn8JbvmdGGyeOl30MrY/K6eYmm6nij0pR3I4Sib
T4ilqz8bExAtNIF5fzq7/WH93h3thphoB56izf6arnAFQZNkTB7i+DZot4QV5ZBn
FhE7R7XopTvrHRrD/BUDl/QkFA5FmlTG59LTcm0B94VwWSzV0Kxyu6aWXO4GI5ep
XF+2RCYTEmc8Sn1a3MIGvG9s2HGTzS4PglvL4Gzh0dk4WrkdeQOp2LMIOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAerA5PlWMwK8VC4y2vq68Ltjp7zMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvQjZzRGstVll6QXJ4VUxqTGEtcnJ3dTJPbnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUGaMA0G
CSqGSIb3DQEBCwUAA4IBAQB1JJjVudNKC98paMkiabtjQLa94WdyTYL14qmE6dBo
C9RiwltgKcmtlpIwMH8eSHBaF9F/3AwwdJ5CwSFdJdULZQgWQudlPcU9C6ppRU1f
nDEMsJQzjc9mpb1ZLAwswIgQGoafuG5FgqIABfF43Y2GnS0y+MVaNfZ6Ly6GiPFA
ZgWwPnLCxC5Ed1L4Q0D+HdzkxIBRJxbdPQILjKP/+ltnCSkHuP1gJWGyhvpUNYDV
xPeSTAfqgjdl4BlRsC64g/bwOZBfF6TyXRssMOBnkN3WNORBJwIAoP5l5hGyZhjO
ckvjPo8LUOcp85Z4YNw9ggGbyIA/iq+dP4MaOKmrytK3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org