Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9VtIzP00zYQQtsRsNY1WXAAXlmU.roa
File:                     9VtIzP00zYQQtsRsNY1WXAAXlmU.roa (raw, json)
Hash identifier:          i75L3fEs9Kzlv/W98vMRYb3FeA3QLWPkKsbldrpczv4=
Subject key identifier:   F5:5B:48:CC:FD:34:CD:84:10:B6:C4:6C:35:8D:56:5C:00:17:96:65
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       01857002933FF3243611018855EB713E0C3F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9VtIzP00zYQQtsRsNY1WXAAXlmU.roa
Signing time:             Mon 02 Jan 2023 01:04:55 +0000
ROA not before:           Mon 02 Jan 2023 01:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206558
IP address blocks:        77.92.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:93:3f:f3:24:36:11:01:88:55:eb:71:3e:0c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Jan  2 01:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f55b48ccfd34cd8410b6c46c358d565c00179665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:14:9a:b0:9a:31:d0:98:20:f0:aa:e5:5a:
                    a6:f4:2b:32:1c:55:63:89:eb:0d:1e:65:7c:30:d5:
                    25:45:11:23:76:16:9e:78:b5:34:ef:ac:12:68:95:
                    88:8e:47:81:53:3f:2f:ad:c0:cc:40:d1:fb:4b:71:
                    8a:8f:6f:9b:07:27:33:9c:5a:c8:61:a4:3e:56:fb:
                    1c:5e:ac:a6:a1:a0:44:55:2a:01:25:0d:71:8a:a2:
                    dc:d6:6d:ad:9c:46:4f:69:7d:74:1d:5b:41:59:00:
                    d9:4c:40:1c:7b:24:d8:66:99:72:1d:65:2b:48:a6:
                    68:30:36:47:dd:ba:ea:dd:79:d8:44:ce:82:3d:37:
                    cb:3b:83:18:24:12:79:01:31:b3:3a:7c:92:db:d7:
                    3b:03:68:e2:12:fa:f0:ee:68:95:a1:0a:2b:d8:f5:
                    f9:52:3e:a1:09:b6:29:9a:34:4e:7d:c1:7d:9a:9c:
                    03:94:de:08:df:cf:50:cc:01:bb:25:eb:b4:77:b3:
                    99:1a:ad:a7:f9:35:66:c8:26:d6:18:cf:46:fc:18:
                    36:36:12:d8:c3:6e:07:87:7a:64:40:77:26:34:fc:
                    4f:ee:1d:69:fc:cf:4a:a2:6e:69:50:cf:fa:1b:ab:
                    72:27:31:72:fc:0c:72:33:8d:35:09:62:c1:5b:30:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:48:CC:FD:34:CD:84:10:B6:C4:6C:35:8D:56:5C:00:17:96:65
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/9VtIzP00zYQQtsRsNY1WXAAXlmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.92.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:51:ab:8a:61:94:8b:b5:75:db:5d:61:8c:99:49:9a:00:65:
         16:84:4a:f6:de:ef:ca:2c:f6:04:80:30:26:9e:ad:dd:25:f4:
         29:70:cf:39:60:f7:d6:4b:eb:14:b7:ac:9e:43:60:e1:ce:9c:
         dc:fe:f1:d9:a4:c3:9d:fb:95:2a:fc:c1:96:ee:62:a2:b4:91:
         7b:a5:49:46:4d:2d:62:8e:97:87:8a:02:53:b1:ec:2e:de:c1:
         fb:79:93:3f:ed:9b:29:1a:86:2c:5b:f3:e1:d9:9e:6f:34:18:
         54:8d:e4:78:eb:6e:f2:43:33:12:73:7d:1d:fa:f2:6f:62:2e:
         82:15:b4:f8:6f:bf:a2:77:46:cd:0d:8c:51:72:b7:67:95:7e:
         fe:39:ff:b8:9b:8f:85:6a:72:97:14:65:1e:bc:8e:a4:3c:1f:
         13:03:61:59:97:cc:c0:b9:f9:81:da:9b:a1:07:6b:b1:26:a7:
         3e:02:a7:2a:b2:02:98:c4:01:6a:21:7d:bb:18:dd:9d:e7:b3:
         01:35:57:6b:c8:ed:cf:ea:35:c3:62:b6:7a:76:ea:e5:7c:e8:
         03:20:6f:2c:8c:cc:fb:9f:03:5b:ba:69:f1:8e:33:85:04:78:
         fc:0d:8c:57:d2:d8:87:78:b2:ee:bc:86:63:fc:89:4d:a0:34:
         b1:79:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org