Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fd5wekrRbAbFvW_LrfkqGxyQOUo.roa
File:                     fd5wekrRbAbFvW_LrfkqGxyQOUo.roa (raw, json)
Hash identifier:          4cSUGiEjfszkDJsXraG/9t4C1pqEATVIE4IB5LRKzh0=
Subject key identifier:   7D:DE:70:7A:4A:D1:6C:06:C5:BD:6F:CB:AD:F9:2A:1B:1C:90:39:4A
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0189C5C5C04A189C30ED86EE6CBE8D2D6E7B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fd5wekrRbAbFvW_LrfkqGxyQOUo.roa
Signing time:             Sat 05 Aug 2023 12:56:58 +0000
ROA not before:           Sat 05 Aug 2023 12:56:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203394
IP address blocks:        77.81.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Aug 2023 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c5:c5:c0:4a:18:9c:30:ed:86:ee:6c:be:8d:2d:6e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Aug  5 12:56:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7dde707a4ad16c06c5bd6fcbadf92a1b1c90394a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:7c:bf:7b:6e:b9:2d:a1:df:53:2a:1b:3f:
                    03:b5:ed:e0:b0:cf:23:f8:f0:8c:84:13:f8:e1:52:
                    71:3d:e8:a9:19:5f:56:8a:12:5e:05:db:3d:c5:bc:
                    fe:c0:cf:39:15:d1:f3:48:cc:7a:95:8d:b0:ce:63:
                    e5:d2:ef:d9:20:cf:5a:eb:cf:f1:3f:f2:86:21:95:
                    a3:e1:85:7b:13:eb:1b:db:d6:08:54:1d:4f:95:d0:
                    fc:46:39:d2:96:ab:9e:a5:85:ff:33:ce:c8:ce:11:
                    5f:32:9b:37:ea:d3:4b:12:ec:86:82:a4:c5:32:a7:
                    05:db:40:6c:d3:d8:0d:8e:ed:70:10:50:15:97:60:
                    7c:02:01:08:b3:df:13:fd:4f:be:c2:3d:8e:82:fe:
                    2c:dd:35:f6:0f:dc:9d:97:a4:b6:67:03:77:43:98:
                    1e:3a:74:7b:bc:b8:9a:48:cf:a4:42:96:c7:84:06:
                    68:c8:59:9f:7e:b8:cc:08:59:88:1b:8b:62:4e:1f:
                    27:11:40:6b:d9:27:68:64:5b:df:e2:82:03:30:64:
                    40:8a:77:e1:ab:87:65:18:a4:10:44:bb:35:38:e9:
                    77:28:27:6c:c6:28:ad:62:80:10:d9:f1:a6:21:77:
                    a3:cc:69:2c:df:ae:31:cc:96:47:e3:d1:25:b4:a1:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:70:7A:4A:D1:6C:06:C5:BD:6F:CB:AD:F9:2A:1B:1C:90:39:4A
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/fd5wekrRbAbFvW_LrfkqGxyQOUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:01:0f:6a:51:f8:2d:f0:fc:fc:19:2e:74:e8:18:fc:44:
         0b:a2:67:54:1b:a7:43:bb:a4:a1:17:15:3a:be:2f:96:55:c8:
         fe:96:de:ba:c7:fd:d8:2f:d5:8f:5e:08:f9:91:05:67:9a:a0:
         de:98:56:3f:24:d2:37:b0:e1:86:1b:ae:50:9c:f9:7b:fe:11:
         bf:b3:6d:a5:8c:c4:3f:92:30:15:e1:50:9f:a9:d6:a0:ad:03:
         99:7c:b9:a0:4c:ac:bc:af:30:83:9f:e8:e4:69:03:7c:86:eb:
         21:b4:04:15:a8:67:d1:9b:54:93:62:85:f3:30:0e:da:ab:c3:
         74:30:11:39:15:70:d3:9c:e4:c4:b0:1e:56:ae:25:ad:7a:d8:
         df:f1:0f:9d:4d:05:79:ef:61:39:6b:32:b9:57:dd:07:0b:8d:
         94:8d:c5:14:36:f7:e4:6e:c7:94:59:74:e3:50:9b:3b:a9:47:
         f5:16:d0:64:5e:48:ae:08:43:aa:dd:d6:7b:a7:f1:32:73:c3:
         79:0d:ea:db:b4:32:71:8d:b9:6d:47:df:86:37:0e:c1:33:e5:
         97:0b:c9:d8:90:85:6d:e6:2c:5d:e9:f0:5b:e7:e3:70:03:a3:
         80:44:4d:2f:14:ff:68:55:bf:db:45:73:5f:0b:00:b4:72:6a:
         b1:13:12:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnFxcBKGJww7YbubL6NLW57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwODA1MTI1NjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGRlNzA3YTRhZDE2YzA2YzViZDZmY2JhZGY5MmExYjFjOTAzOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlx8v3tuuS2h31MqGz8Dte3gsM8j
+PCMhBP44VJxPeipGV9WihJeBds9xbz+wM85FdHzSMx6lY2wzmPl0u/ZIM9a68/x
P/KGIZWj4YV7E+sb29YIVB1PldD8RjnSlquepYX/M87IzhFfMps36tNLEuyGgqTF
MqcF20Bs09gNju1wEFAVl2B8AgEIs98T/U++wj2Ogv4s3TX2D9ydl6S2ZwN3Q5ge
OnR7vLiaSM+kQpbHhAZoyFmffrjMCFmIG4tiTh8nEUBr2SdoZFvf4oIDMGRAinfh
q4dlGKQQRLs1OOl3KCdsxiitYoAQ2fGmIXejzGks364xzJZH49EltKGo6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3ecHpK0WwGxb1vy635KhsckDlKMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZmQ1d2VrclJiQWJGdldfTHJma3FHeHlRT1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVFYMA0G
CSqGSIb3DQEBCwUAA4IBAQCLxwEPalH4LfD8/BkudOgY/EQLomdUG6dDu6ShFxU6
vi+WVcj+lt66x/3YL9WPXgj5kQVnmqDemFY/JNI3sOGGG65QnPl7/hG/s22ljMQ/
kjAV4VCfqdagrQOZfLmgTKy8rzCDn+jkaQN8hushtAQVqGfRm1STYoXzMA7aq8N0
MBE5FXDTnOTEsB5WriWtetjf8Q+dTQV572E5azK5V90HC42UjcUUNvfkbseUWXTj
UJs7qUf1FtBkXkiuCEOq3dZ7p/Eyc8N5DerbtDJxjbltR9+GNw7BM+WXC8nYkIVt
5ixd6fBb5+NwA6OARE0vFP9oVb/bRXNfCwC0cmqxExJm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org