Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6P6Cz68z6q6Xv55irPAfae4lDoo.roa
File:                     6P6Cz68z6q6Xv55irPAfae4lDoo.roa (raw, json)
Hash identifier:          OEHjpYvo7jK3tSy29D/6iJr6AcvSkWQiOA2g+3SKaRQ=
Subject key identifier:   E8:FE:82:CF:AF:33:EA:AE:97:BF:9E:62:AC:F0:1F:69:EE:25:0E:8A
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01856E38C8D0F736C1AF7FDBDF51CB026EBA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6P6Cz68z6q6Xv55irPAfae4lDoo.roa
Signing time:             Sun 01 Jan 2023 16:44:53 +0000
ROA not before:           Sun 01 Jan 2023 16:44:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34450
IP address blocks:        77.47.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Jan 2023 15:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:38:c8:d0:f7:36:c1:af:7f:db:df:51:cb:02:6e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  1 16:44:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8fe82cfaf33eaae97bf9e62acf01f69ee250e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:91:0d:78:58:3c:68:c1:83:b6:a7:11:ce:
                    3d:7a:c4:30:8e:e1:28:c8:82:85:4a:cf:69:4c:2c:
                    0e:3f:b4:f9:52:a2:00:e0:64:b4:ca:ce:7d:be:28:
                    64:8c:26:c7:2c:8d:79:f3:ec:a1:7f:4d:be:b3:54:
                    96:66:b5:6f:55:69:9f:e3:b8:89:e1:c7:5f:d9:ae:
                    05:d9:22:9a:93:06:08:af:15:a3:57:5b:68:d2:55:
                    c5:01:45:5c:2a:39:34:6b:2c:97:e0:9e:5d:6f:84:
                    fb:b1:69:bb:71:4a:63:67:9a:b2:5e:0a:fd:1f:10:
                    f3:56:e0:d7:c3:76:1f:7f:81:4b:71:be:b5:c9:1c:
                    5b:2f:15:24:64:b8:bb:0f:ad:b1:49:9a:a3:78:8a:
                    c5:bd:a4:6a:fb:c5:84:64:78:d3:97:f8:6f:84:69:
                    c3:76:92:27:eb:f7:be:ec:07:1f:5b:24:df:27:78:
                    ae:00:02:d1:e9:2e:25:df:8c:c6:9d:37:a3:87:58:
                    56:ff:87:5a:0d:f1:09:73:a4:0c:f9:74:85:cd:75:
                    cc:c4:20:49:3e:ee:6b:b4:b8:32:70:b4:46:0e:c5:
                    a6:25:38:e5:ec:92:93:f1:a6:7b:e6:c7:82:d4:20:
                    99:07:42:42:46:65:5d:a0:43:f2:a2:df:24:00:37:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FE:82:CF:AF:33:EA:AE:97:BF:9E:62:AC:F0:1F:69:EE:25:0E:8A
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6P6Cz68z6q6Xv55irPAfae4lDoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:eb:f6:63:b7:cd:8e:c9:bd:d0:fd:8f:e9:bc:eb:bc:fd:
         1c:85:d4:02:77:9c:93:7c:e4:1e:48:15:3c:7e:e9:9c:2b:6d:
         34:aa:6e:d0:b6:1a:ac:6a:bc:d4:f0:2a:02:70:55:d1:99:59:
         46:21:99:5b:6d:23:21:7a:01:20:82:da:a2:a1:98:08:4d:5a:
         61:02:9f:a7:16:84:a2:ac:fe:2b:f9:68:b1:86:89:ac:db:0d:
         20:bf:eb:5b:64:63:64:59:e5:91:34:99:fe:4d:55:cb:fe:30:
         ba:7b:42:1d:5a:c8:78:30:b3:ca:92:1e:2e:dc:a1:82:cf:db:
         3e:aa:f0:da:63:e3:ba:f4:fd:f8:03:93:db:40:b3:00:d5:c1:
         13:b4:79:b3:26:f3:ed:36:3c:e3:71:d9:2b:06:68:6e:09:fb:
         f3:98:11:fd:f3:de:37:27:bd:3d:2d:49:3f:7a:3a:8b:9a:89:
         1d:29:93:e9:d4:90:51:61:d4:85:e0:80:a8:ec:7f:9d:aa:f4:
         8c:f4:42:2f:df:f1:d3:74:3d:5a:96:cf:dd:f7:0f:9e:15:8b:
         be:a7:ef:4c:7b:bc:88:8c:19:fd:78:d0:05:2f:ce:08:29:e6:
         b3:5d:f7:f3:52:77:d5:32:b3:37:3a:05:de:d5:fc:7c:ad:cf:
         ef:c4:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org