Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0J08Z_asAKu6QmZBVBwlUPSHsHo.roa
File:                     0J08Z_asAKu6QmZBVBwlUPSHsHo.roa (raw, json)
Hash identifier:          jomYp3W4UNJlhM1uvCbQS3A5H8mKkQZM9d8JY4MnAPA=
Subject key identifier:   D0:9D:3C:67:F6:AC:00:AB:BA:42:66:41:54:1C:25:50:F4:87:B0:7A
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018B1F27ACA5A182F39C3B25260B4B01CDD7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0J08Z_asAKu6QmZBVBwlUPSHsHo.roa
Signing time:             Wed 11 Oct 2023 14:32:55 +0000
ROA not before:           Wed 11 Oct 2023 14:32:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398465
IP address blocks:        77.81.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 Nov 2023 14:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1f:27:ac:a5:a1:82:f3:9c:3b:25:26:0b:4b:01:cd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Oct 11 14:32:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d09d3c67f6ac00abba426641541c2550f487b07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:e2:97:ce:36:9d:f6:7a:b6:4b:42:bb:78:
                    15:6e:ad:a3:27:22:e6:08:79:85:da:a1:d5:14:9b:
                    2e:b8:35:5e:1b:9d:65:64:cb:b4:43:3f:71:0b:4a:
                    0a:ad:5a:2f:94:f3:e6:6e:d1:e7:dd:16:98:07:e1:
                    54:7c:1c:ca:7f:85:43:91:82:68:ec:b8:2a:31:9d:
                    19:66:b0:44:d5:9f:c8:78:43:60:46:1a:92:32:fc:
                    f0:e6:87:fd:1a:f6:c7:a0:41:9c:e8:2c:83:70:a7:
                    24:8b:c3:2b:b3:5a:33:88:8a:43:82:82:21:5d:b6:
                    c5:19:dd:42:41:21:f9:05:f0:4f:00:cd:23:aa:5e:
                    bf:fd:3e:db:77:5c:99:65:b3:c0:19:7e:c6:60:c5:
                    59:32:a4:8c:c3:a4:83:ed:c1:2c:e4:3d:bc:ce:f5:
                    ff:d7:97:27:0c:e1:dd:5d:3c:00:ec:7e:c7:23:0c:
                    f9:3c:48:57:49:a3:fe:5d:43:42:8a:7d:92:fe:88:
                    50:67:42:48:21:32:d3:69:fc:69:3c:93:fd:73:01:
                    18:53:3e:fa:d4:fe:11:5a:8d:30:56:15:03:f4:4e:
                    7a:0a:d9:be:63:2c:72:7b:aa:cf:0b:a0:a9:aa:a9:
                    72:39:6c:88:b5:e5:b0:aa:59:74:ad:06:a0:7b:29:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9D:3C:67:F6:AC:00:AB:BA:42:66:41:54:1C:25:50:F4:87:B0:7A
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0J08Z_asAKu6QmZBVBwlUPSHsHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:78:21:23:09:aa:26:34:27:9f:f3:74:bf:5e:d2:4c:c0:59:
         37:18:61:d1:86:3a:7d:8f:35:49:1f:86:e1:54:ca:96:ad:ac:
         e3:3a:2d:74:cd:02:31:a6:91:f3:3f:d8:eb:c0:fc:70:86:f8:
         e8:c2:34:7b:d4:6a:37:60:cc:d6:5b:a7:b4:20:c2:28:a8:36:
         84:4e:35:68:38:2b:12:28:8d:e3:e0:92:b0:47:70:82:f2:2e:
         71:ad:e6:61:4c:20:b1:2e:a3:fb:37:1e:62:8f:4a:9c:e8:a4:
         b1:cb:22:61:74:76:cf:70:bf:4a:21:8c:6e:fd:1c:5b:a7:e1:
         aa:e9:b3:84:e4:1a:46:11:79:fb:98:ed:2c:bb:8e:81:1f:e0:
         00:d3:0d:c8:b3:09:08:bf:74:bd:e3:ea:bb:6f:17:48:c1:fc:
         85:9d:c9:7c:af:03:4f:34:15:9c:6d:6d:e8:bf:65:5a:57:88:
         9f:95:fc:01:b4:09:6b:22:d5:48:34:d4:ff:4f:1e:0d:e9:f0:
         31:b1:c8:c8:4d:97:ae:31:d2:c8:28:f9:db:52:e4:c8:c2:9b:
         3e:2d:c3:75:6f:3b:eb:28:40:f3:db:20:6a:bd:e5:53:bb:15:
         bd:ec:1e:77:3a:5b:cf:bd:d7:c6:01:e1:8a:72:16:48:91:9e:
         e5:fe:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org