Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dnoEPqKAkp9ib3cqA2-sk55H-Fw.roa
File:                     dnoEPqKAkp9ib3cqA2-sk55H-Fw.roa (raw, json)
Hash identifier:          unOiHUqkGW6dW9kkoBv97fY2xaaXLkYkT0ZwhTcr9a0=
Subject key identifier:   76:7A:04:3E:A2:80:92:9F:62:6F:77:2A:03:6F:AC:93:9E:47:F8:5C
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018857FB43A6D25B1FB0D9B8F9AAF7872E73
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dnoEPqKAkp9ib3cqA2-sk55H-Fw.roa
Signing time:             Fri 26 May 2023 12:14:24 +0000
ROA not before:           Fri 26 May 2023 12:14:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57043
IP address blocks:        77.81.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:fb:43:a6:d2:5b:1f:b0:d9:b8:f9:aa:f7:87:2e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: May 26 12:14:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=767a043ea280929f626f772a036fac939e47f85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:d3:8c:38:cc:83:27:06:86:30:89:8c:8f:
                    1b:85:e0:cb:56:91:09:98:6b:2c:af:2e:0d:bb:e8:
                    27:ce:a1:e4:cf:3d:98:93:d4:3c:14:c7:31:ae:b4:
                    d0:b9:a7:55:d6:a4:a6:60:96:66:b7:30:af:59:26:
                    9b:83:17:a9:cd:5c:a2:bd:9c:ac:3b:30:bd:a3:4e:
                    8c:4a:ce:5f:4f:7e:ee:cc:fb:0d:dd:49:44:8c:b7:
                    44:c5:be:52:31:1a:cd:cc:df:cb:e8:17:3d:8f:83:
                    56:dd:ea:45:b9:7f:b5:65:25:b3:57:d2:81:f3:93:
                    d9:62:4d:4b:5a:c5:d4:df:d7:f1:2b:8d:0c:f2:41:
                    6b:ae:9e:74:29:d0:29:db:9a:d4:a5:2f:0e:74:a3:
                    09:00:55:ca:75:84:69:98:fb:4b:15:ea:90:f2:dc:
                    d2:11:e3:44:15:e8:b1:b5:a9:23:1d:ee:5a:71:3a:
                    ec:61:1c:6a:a5:a0:f0:2e:83:49:16:af:b5:75:75:
                    c7:0b:e8:31:8f:56:7d:1c:26:e0:4b:94:45:b8:1b:
                    c0:24:bd:73:03:03:e0:f5:e2:71:aa:1e:a9:f0:49:
                    ea:68:da:b5:6d:5f:f6:81:76:30:b1:df:7b:04:57:
                    52:40:a0:6e:86:70:3b:ad:77:f6:ea:ac:0c:15:8f:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7A:04:3E:A2:80:92:9F:62:6F:77:2A:03:6F:AC:93:9E:47:F8:5C
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dnoEPqKAkp9ib3cqA2-sk55H-Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:f1:ea:12:cd:a1:30:fb:d0:f5:20:01:0b:17:45:e3:28:
         9f:3d:e3:ae:b9:db:1c:88:a9:cf:89:0e:6c:5b:81:d0:68:5b:
         41:68:8d:59:32:2a:1d:59:fa:19:4d:33:b2:4e:2e:4e:bb:c4:
         bf:6b:8d:90:c9:98:49:5c:7f:f4:89:37:41:4e:3a:48:25:94:
         c0:71:5f:cd:9a:e3:af:29:86:10:03:df:c7:87:90:77:1f:02:
         8f:ad:7a:e8:ec:54:25:b0:ba:46:91:76:1b:80:d1:f5:a1:e6:
         68:e7:28:13:16:0e:d7:a7:aa:d6:a3:58:81:b9:e1:e0:9b:e2:
         18:ed:5b:6d:9b:4d:67:0c:ac:9b:50:10:da:6c:14:5a:33:dd:
         dc:f3:17:9b:7c:6e:81:b6:70:4c:47:3e:e0:cd:3c:e0:fb:eb:
         8e:6c:75:9a:e8:b4:d0:4f:3d:99:99:d7:62:22:07:e6:81:d3:
         52:ac:79:5b:07:b4:77:30:d1:95:c5:99:09:69:d7:7b:30:f9:
         37:30:82:e1:0c:09:ce:c7:39:09:38:4b:6e:94:9e:44:8d:18:
         a2:bf:6c:d3:e5:1c:31:15:af:f1:53:75:c7:84:3a:db:2b:90:
         c6:01:7c:7c:ba:9e:4d:82:20:d2:cc:de:d2:fb:2a:c4:4e:e7:
         e9:88:b3:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhX+0Om0lsfsNm4+ar3hy5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNTI2MTIxNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjdhMDQzZWEyODA5MjlmNjI2Zjc3MmEwMzZmYWM5MzllNDdmODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsLTjDjMgycGhjCJjI8bheDLVpEJ
mGssry4Nu+gnzqHkzz2Yk9Q8FMcxrrTQuadV1qSmYJZmtzCvWSabgxepzVyivZys
OzC9o06MSs5fT37uzPsN3UlEjLdExb5SMRrNzN/L6Bc9j4NW3epFuX+1ZSWzV9KB
85PZYk1LWsXU39fxK40M8kFrrp50KdAp25rUpS8OdKMJAFXKdYRpmPtLFeqQ8tzS
EeNEFeixtakjHe5acTrsYRxqpaDwLoNJFq+1dXXHC+gxj1Z9HCbgS5RFuBvAJL1z
AwPg9eJxqh6p8EnqaNq1bV/2gXYwsd97BFdSQKBuhnA7rXf26qwMFY+saQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZ6BD6igJKfYm93KgNvrJOeR/hcMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZG5vRVBxS0FrcDlpYjNjcUEyLXNrNTVILUZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVFkMA0G
CSqGSIb3DQEBCwUAA4IBAQCY6/HqEs2hMPvQ9SABCxdF4yifPeOuudsciKnPiQ5s
W4HQaFtBaI1ZMiodWfoZTTOyTi5Ou8S/a42QyZhJXH/0iTdBTjpIJZTAcV/NmuOv
KYYQA9/Hh5B3HwKPrXro7FQlsLpGkXYbgNH1oeZo5ygTFg7Xp6rWo1iBueHgm+IY
7Vttm01nDKybUBDabBRaM93c8xebfG6BtnBMRz7gzTzg++uObHWa6LTQTz2Zmddi
IgfmgdNSrHlbB7R3MNGVxZkJadd7MPk3MILhDAnOxzkJOEtulJ5EjRiiv2zT5Rwx
Fa/xU3XHhDrbK5DGAXx8up5NgiDSzN7S+yrETufpiLOY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org