Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa
File:                     Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa (raw, json)
Hash identifier:          XjbGQuC4tXZkbLfE1Lc+ujq0gjB7+GrwFbLvXDPNvRs=
Subject key identifier:   42:EE:EC:7F:55:9F:54:BA:73:00:90:05:FF:B7:64:90:70:28:7B:18
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEE543F896BBBE8C5C8F480F609383
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa
Signing time:             Sun 01 Jan 2023 06:04:56 +0000
ROA not before:           Sun 01 Jan 2023 06:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210910
IP address blocks:        77.65.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:e5:43:f8:96:bb:be:8c:5c:8f:48:0f:60:93:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42eeec7f559f54ba73009005ffb7649070287b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:35:7e:2a:4a:96:72:93:2f:30:28:9e:c5:
                    86:89:40:7d:c2:23:69:a0:cb:63:e5:84:1d:a4:85:
                    c8:18:23:f3:e3:aa:b6:54:0a:ea:52:03:8b:b6:10:
                    c9:4e:6b:73:f6:2a:9f:90:de:ea:94:2a:f8:4e:24:
                    eb:26:ec:99:3d:4f:03:f6:20:01:10:37:42:e4:64:
                    f6:59:3b:d5:3e:3f:7a:3f:09:42:5b:a6:9e:fe:0a:
                    fa:43:88:0c:1a:86:77:28:11:04:91:ec:da:1e:ff:
                    ab:d1:09:f1:36:5c:a8:d7:db:b0:fe:1f:c2:da:7a:
                    42:22:18:1e:a0:69:97:cf:59:b3:13:df:ee:85:51:
                    31:8c:37:83:bc:64:f1:89:6a:79:28:07:df:09:f8:
                    ee:9e:85:2e:4c:76:09:cd:9c:50:1c:d5:8f:98:1e:
                    87:1f:5c:4c:87:7e:03:76:65:8c:8f:10:9b:37:33:
                    5e:7d:39:9e:1d:c1:de:57:6e:8a:45:aa:7b:16:17:
                    3d:5c:25:b3:da:fc:b5:2b:7a:39:71:ae:8e:36:68:
                    b6:50:d3:87:e8:15:6f:02:20:b2:40:6a:b3:46:f4:
                    e4:8a:fe:cb:27:c1:06:ec:e4:f0:8a:c5:89:53:17:
                    d7:cf:89:a7:40:aa:df:a6:b3:4c:c6:cb:4f:34:26:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:EC:7F:55:9F:54:BA:73:00:90:05:FF:B7:64:90:70:28:7B:18
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Qu7sf1WfVLpzAJAF_7dkkHAoexg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:f3:3c:ef:cc:7b:48:d3:cf:59:69:a6:ec:ba:cc:70:27:
         76:7d:a1:56:93:c5:a1:ec:04:0f:1a:a9:69:73:1e:74:16:d2:
         14:77:2d:7d:08:01:8a:e2:5d:45:66:ef:ac:7b:7c:5e:ee:26:
         3f:86:1f:71:61:0b:ed:bf:56:4b:a9:d7:02:5c:c2:35:71:36:
         76:47:12:5b:ac:7b:af:45:4f:b1:b2:5b:44:db:4a:f2:9c:9f:
         ab:94:45:7a:b8:4a:ce:9b:d4:75:f6:42:ab:61:b9:7c:4a:3a:
         0d:84:8c:91:7a:c0:2d:73:d6:2b:fe:c2:3f:e0:f6:75:99:91:
         cd:98:ac:3a:d6:b1:53:1f:50:bd:59:81:0a:b7:ab:af:36:30:
         f5:53:7d:1d:a5:66:01:c3:5f:77:d6:ec:2d:d5:ae:a1:99:7f:
         9d:5e:ff:d0:ea:f0:eb:e9:0d:26:27:16:06:c9:07:54:7a:bc:
         f4:72:16:3b:38:42:4b:59:e9:b9:9f:8b:e6:47:38:b2:bc:0a:
         fc:de:fc:46:41:b0:17:ab:35:44:f0:20:d1:6d:94:cf:1c:f8:
         1a:d5:65:11:07:c0:a6:c9:7b:79:af:97:a3:fe:0d:7b:52:c0:
         8a:0e:ef:6c:7c:a3:28:2f:e3:ef:5d:c5:07:ad:21:32:63:d7:
         83:09:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org