Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YEp--qgvgWN1WSpEwyDYusN5IqY.roa
File:                     YEp--qgvgWN1WSpEwyDYusN5IqY.roa (raw, json)
Hash identifier:          AcJxkKfum2RBNOOGltTZm+fkeTVbB4p1AqHX9cgrMqc=
Subject key identifier:   60:4A:7E:FA:A8:2F:81:63:75:59:2A:44:C3:20:D8:BA:C3:79:22:A6
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019015A15B7600695928095D4AF8CAAB0970
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YEp--qgvgWN1WSpEwyDYusN5IqY.roa
Signing time:             Fri 14 Jun 2024 07:23:34 +0000
ROA not before:           Fri 14 Jun 2024 07:23:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215780
IP address blocks:        77.81.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 12:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:15:a1:5b:76:00:69:59:28:09:5d:4a:f8:ca:ab:09:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 14 07:23:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=604a7efaa82f816375592a44c320d8bac37922a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:3a:22:77:32:c4:11:2e:68:14:ae:4a:d3:
                    c9:33:28:29:e4:de:1a:0c:21:bc:88:f6:ed:2b:cf:
                    53:2d:a5:4a:bf:6f:fb:98:8c:06:e0:12:4c:27:9b:
                    13:82:08:51:6d:82:d8:99:bd:48:2d:a7:9f:4f:50:
                    f1:0b:0e:24:42:f7:44:77:10:9c:11:79:91:4d:6e:
                    38:50:04:33:bc:5f:c9:f1:ea:29:4b:80:d5:7d:b6:
                    54:a2:28:e3:ba:10:9a:04:f5:dc:89:76:25:6a:db:
                    91:98:c0:42:6f:38:68:d3:17:7c:fa:04:db:94:9d:
                    36:46:56:3d:19:6f:11:77:f8:42:ff:3c:b1:21:7c:
                    c5:04:75:24:c7:a9:6d:47:46:e0:ca:82:83:df:bf:
                    d4:f7:45:a2:79:c6:db:05:5c:87:80:63:a1:57:be:
                    a0:1d:17:62:a0:ac:33:86:0c:3b:6a:93:1f:de:2e:
                    e8:72:93:a5:0a:8e:d4:44:53:10:1f:07:80:ec:18:
                    30:c0:e4:ba:2c:57:98:74:41:a4:3e:a2:aa:64:70:
                    7f:bf:17:8d:d2:d5:5e:34:3b:e4:6a:41:a3:3d:36:
                    d6:fc:a6:4c:16:8a:13:79:0c:34:c9:30:2f:7a:fd:
                    4b:01:42:7f:0a:da:4c:f6:85:a3:62:3c:2e:ce:75:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4A:7E:FA:A8:2F:81:63:75:59:2A:44:C3:20:D8:BA:C3:79:22:A6
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YEp--qgvgWN1WSpEwyDYusN5IqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:f5:d9:c7:03:6e:bf:b3:cc:33:ed:ca:f4:51:ab:aa:70:
         a9:35:fc:e1:ba:2e:43:cc:14:e3:b8:33:db:a3:41:a4:0b:cb:
         b0:0a:63:73:6f:7b:6d:d1:59:49:61:fc:48:dc:02:6b:ff:1e:
         85:69:f3:73:b6:f6:6d:aa:86:38:3b:0c:05:de:af:5d:d8:24:
         53:19:a7:4a:c6:47:1a:5d:c8:3c:35:e1:1d:90:c0:48:38:8c:
         f4:7c:19:70:52:ba:4e:89:3b:33:88:c1:b3:eb:77:c1:0c:f4:
         03:b0:18:5d:51:0f:0b:cc:ea:76:0d:22:f7:7a:7c:2e:9c:69:
         30:66:42:3d:bf:c0:19:ad:3a:75:b2:b5:f3:ab:eb:55:34:17:
         13:b3:c8:81:69:40:48:bb:9e:69:fc:0c:24:28:99:c5:56:93:
         52:f4:87:f8:6b:7f:37:97:26:fb:ea:b3:c7:5e:c1:95:11:ac:
         26:b1:a0:a1:93:b1:59:aa:57:de:5c:3a:3f:c7:db:70:a9:90:
         70:4a:72:68:c0:49:ad:dd:6d:1f:2c:de:4a:81:44:3f:79:d4:
         c0:c1:a3:1a:c0:20:57:90:22:24:f1:77:f1:13:01:c1:1f:54:
         b1:ff:4c:a4:83:f0:a8:9b:bd:a8:f0:a0:c2:34:bc:0c:90:30:
         dc:68:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:30 2024 by rpki-client on console-ams.rpki-client.org