Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H1AuSoo5axkGvCreBZ9gd2KPGgg.roa
File:                     H1AuSoo5axkGvCreBZ9gd2KPGgg.roa (raw, json)
Hash identifier:          E454SZ04EUotXfpRZT7PfsgdGEdWLW8SlCKQAz0DizI=
Subject key identifier:   1F:50:2E:4A:8A:39:6B:19:06:BC:2A:DE:05:9F:60:77:62:8F:1A:08
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       018CC8DF8C9C7C6E00945FC216B4DEB222C6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H1AuSoo5axkGvCreBZ9gd2KPGgg.roa
Signing time:             Tue 02 Jan 2024 06:32:22 +0000
ROA not before:           Tue 02 Jan 2024 06:32:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209466
IP address blocks:        77.92.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 21:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:8c:9c:7c:6e:00:94:5f:c2:16:b4:de:b2:22:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Jan  2 06:32:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f502e4a8a396b1906bc2ade059f6077628f1a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:2d:a6:c7:1e:43:a8:89:ae:e7:f6:3c:92:
                    1b:0c:b6:1f:e0:b1:a9:8e:cc:94:7b:7c:f0:fd:49:
                    c6:19:09:f6:0f:a0:8a:05:57:e0:84:b9:d6:56:30:
                    17:9e:ff:0c:1b:71:6f:1c:43:68:23:ec:6d:c6:c6:
                    99:63:10:ed:65:c7:4c:71:2c:ac:b3:a4:be:3f:8c:
                    87:3f:a8:c8:4e:f6:c6:72:9a:ef:3f:0c:d0:bc:e6:
                    8a:5e:d3:e1:66:9e:c3:13:50:2c:2c:c4:43:6c:26:
                    5c:9f:8d:e1:c2:7d:3a:00:3e:ea:ce:4c:fd:aa:03:
                    41:c4:63:a3:d1:e5:99:55:43:46:8e:46:5f:8a:82:
                    89:33:44:19:20:38:c2:c5:17:44:b1:b5:24:6e:25:
                    8d:37:fe:f3:95:79:75:22:b1:f4:c7:8c:18:a7:83:
                    dd:6a:04:54:9d:80:2c:20:95:a9:61:cf:93:d3:9c:
                    cf:0d:ea:f7:2b:8e:46:5a:63:01:62:4a:06:ce:6c:
                    81:ce:00:af:50:d4:51:10:34:85:98:d1:e5:27:43:
                    01:05:df:ba:30:5d:bf:1c:d5:ff:61:bd:db:80:cf:
                    a0:60:74:3f:6e:3c:37:fd:b0:18:96:c7:e8:a2:29:
                    83:37:37:06:bb:9c:30:12:94:63:71:30:d7:c0:03:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:50:2E:4A:8A:39:6B:19:06:BC:2A:DE:05:9F:60:77:62:8F:1A:08
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H1AuSoo5axkGvCreBZ9gd2KPGgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.92.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:97:1d:e4:9b:11:15:ae:0c:86:7e:32:fd:91:fb:16:40:8f:
         d4:b2:8a:bd:fb:6f:b5:7d:f9:8b:1d:01:d5:0a:d7:4a:5f:63:
         ef:5a:75:f3:d0:57:26:61:5a:b5:4b:e9:a0:32:62:e5:4b:e0:
         c8:ea:b3:df:0a:cc:f1:9b:a1:5a:b7:36:7f:48:9a:7f:72:12:
         9d:de:7b:1f:b7:09:5a:86:b6:5c:55:93:64:e2:0d:1c:a5:f7:
         c5:45:24:c6:39:35:f9:54:56:a4:7f:3f:7a:32:3d:f9:53:35:
         f4:14:de:fc:91:f6:d3:79:ca:78:0f:dc:8d:04:26:1f:9c:aa:
         3c:47:2d:c3:aa:7f:16:e4:af:ab:4d:f3:3b:2a:21:83:7c:3f:
         c4:be:ce:50:95:55:d0:b8:a1:e2:5e:00:1c:5f:70:b7:f3:6a:
         14:8b:72:80:53:bc:b1:77:4b:30:0d:fd:b1:cb:3f:e1:ef:ad:
         a6:d0:08:9d:53:6c:da:fd:34:14:af:6e:32:ad:7e:c3:13:fa:
         58:6f:8a:28:a0:aa:97:74:16:3f:fe:58:fc:38:82:0f:d8:2d:
         ba:3e:06:14:c0:1e:55:8a:43:df:47:b1:e4:df:2d:c5:d8:a7:
         cf:f3:cd:d8:6d:05:cd:ac:f1:85:95:71:84:70:2c:05:44:54:
         67:72:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org