Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6bsCx35Ys2KHykYjh5YFKvTiuKE.roa
File:                     6bsCx35Ys2KHykYjh5YFKvTiuKE.roa (raw, json)
Hash identifier:          yDrNrgfnR7CDKwiHe1ccHKOQxZJfICTsri0xtGQZqTs=
Subject key identifier:   E9:BB:02:C7:7E:58:B3:62:87:CA:46:23:87:96:05:2A:F4:E2:B8:A1
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018A59D942577EAE4356F0534D1C88789851
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6bsCx35Ys2KHykYjh5YFKvTiuKE.roa
Signing time:             Sun 03 Sep 2023 07:02:04 +0000
ROA not before:           Sun 03 Sep 2023 07:02:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60539
IP address blocks:        77.81.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Oct 2023 10:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:59:d9:42:57:7e:ae:43:56:f0:53:4d:1c:88:78:98:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Sep  3 07:02:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9bb02c77e58b36287ca46238796052af4e2b8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:15:9c:73:09:67:80:83:5a:ed:31:cd:f8:
                    4f:56:b0:d0:bf:c9:0e:a9:9d:d3:7f:e6:71:35:61:
                    85:68:f2:b9:ce:67:c4:41:ca:d7:93:1a:b2:35:57:
                    f0:70:ff:c0:9d:b0:3c:93:ea:42:91:7b:48:16:30:
                    42:5e:06:2b:22:30:40:7e:31:a1:6b:68:6e:11:13:
                    6c:7c:3e:5d:3e:77:93:0e:cf:77:56:a9:55:a9:bf:
                    a2:93:0a:4b:1b:a0:7a:1e:40:79:85:bb:eb:d8:33:
                    68:8c:6d:78:ba:85:e1:81:6a:c8:dc:2a:23:ff:cf:
                    2c:a8:07:e5:e0:28:f0:94:ca:47:c1:e7:e1:fe:d8:
                    a6:c4:58:bf:d5:37:47:a9:4e:cc:bf:a9:3b:a2:79:
                    c8:a7:ea:43:62:a7:af:3f:50:be:28:f7:8a:c7:a3:
                    43:c2:c3:bb:45:c9:90:37:07:f6:d4:24:d4:c6:1a:
                    13:35:7b:13:e7:05:b8:c4:61:0b:27:5f:62:a7:8c:
                    b9:7d:0e:a3:f6:d9:6d:f4:0c:7d:de:77:81:44:8c:
                    57:a9:d2:b7:d5:7f:cd:65:43:f2:1e:fc:0a:d7:f2:
                    89:f0:86:5d:43:34:b3:94:16:99:58:0c:a0:9f:e9:
                    d1:28:2f:cb:6e:36:1b:9c:d8:e9:65:c0:60:1f:f1:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:02:C7:7E:58:B3:62:87:CA:46:23:87:96:05:2A:F4:E2:B8:A1
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6bsCx35Ys2KHykYjh5YFKvTiuKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:76:ee:cb:49:30:02:0d:42:dc:01:a9:22:3b:fb:db:de:54:
         14:77:f6:f3:28:0f:13:28:a6:82:81:c0:86:d5:12:c7:b5:d8:
         14:96:9b:0d:6e:d4:12:44:ab:6f:3e:ae:6e:1f:8e:9f:34:69:
         bd:82:1d:6b:38:dd:c2:e4:69:00:ec:1d:49:5e:bb:1e:7d:c9:
         bf:b4:d8:c7:02:d0:5c:23:2e:09:3e:3c:1a:61:a3:94:27:db:
         8d:ad:86:fc:d5:71:b7:77:5a:e5:39:e7:8c:b1:d0:0f:73:ae:
         79:e2:01:57:e4:15:f7:46:4e:c0:49:c8:04:a1:b7:65:7f:b5:
         2d:26:49:80:0e:73:ea:57:24:82:e4:39:59:5c:12:66:e6:29:
         f6:0c:21:39:3c:01:50:53:4b:6a:27:47:d3:ae:96:fa:1e:16:
         de:b9:89:77:7f:b6:2b:1b:9f:ab:cc:a0:a1:94:61:0a:31:f7:
         5c:eb:8a:f8:52:8d:e6:68:f1:ab:db:4f:cc:36:97:5c:83:f4:
         7f:4b:c6:c2:c7:d8:6a:81:2a:b9:58:05:0b:f0:0c:dd:97:b8:
         2c:d3:cf:1c:16:4a:ce:91:f6:ef:3b:09:ff:5d:46:64:a6:ee:
         a3:7d:ba:d3:32:1a:84:d8:3c:56:11:3c:61:96:e7:03:62:77:
         f1:55:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org