Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ptje3-LLzTwySeFFXz0g0iEzDCU.roa
File:                     ptje3-LLzTwySeFFXz0g0iEzDCU.roa (raw, json)
Hash identifier:          Dp4MEy3J7sLgOrcA6lukTUCdKFp7VK099e0csFLK9ww=
Subject key identifier:   A6:D8:DE:DF:E2:CB:CD:3C:32:49:E1:45:5F:3D:20:D2:21:33:0C:25
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018E795433BF0FA7951729607999525EE2BB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ptje3-LLzTwySeFFXz0g0iEzDCU.roa
Signing time:             Tue 26 Mar 2024 05:55:45 +0000
ROA not before:           Tue 26 Mar 2024 05:55:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57043
IP address blocks:        77.81.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 15:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:79:54:33:bf:0f:a7:95:17:29:60:79:99:52:5e:e2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Mar 26 05:55:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a6d8dedfe2cbcd3c3249e1455f3d20d221330c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:1b:a5:6a:cb:ca:5a:d0:2c:25:89:1b:cd:
                    f3:31:2a:d3:6a:39:5e:e0:2d:a8:9a:96:1f:c6:6d:
                    4d:59:32:1d:37:21:da:82:57:94:a3:85:0a:c6:68:
                    29:50:7e:2f:cc:2b:89:c4:0d:49:81:0c:6a:a1:70:
                    b0:6f:69:3f:bd:1b:20:71:d3:90:cc:47:7d:15:a8:
                    7b:c5:9c:ac:6f:83:e7:61:ed:ab:d6:ea:d2:d9:b8:
                    ca:1c:cc:0d:76:97:83:67:7e:b7:ea:06:4f:f2:43:
                    5e:57:6c:0b:d0:80:70:ea:96:4f:6b:c0:9a:3b:9d:
                    b8:dc:10:83:f1:62:2b:cb:d9:1f:16:95:d3:cb:fc:
                    3c:fe:17:49:62:47:21:6d:5b:a8:3c:f6:e3:14:49:
                    7f:13:eb:51:6a:1b:d1:2c:5a:23:e4:4a:73:97:b4:
                    67:c2:54:9c:79:64:97:26:0e:c6:80:9f:7b:22:97:
                    86:06:8a:74:78:fa:7e:64:13:4b:25:4a:22:0e:76:
                    28:24:c9:c6:82:b5:2e:64:53:aa:5e:42:48:aa:bb:
                    8c:15:f7:35:4f:b8:0c:2d:a4:3f:0f:b4:a4:0d:c6:
                    3d:40:73:53:a7:b8:5b:e2:15:8d:42:0e:d1:6b:fa:
                    d2:bb:4c:a1:5d:7c:4a:6a:92:a4:b7:ea:5d:56:86:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D8:DE:DF:E2:CB:CD:3C:32:49:E1:45:5F:3D:20:D2:21:33:0C:25
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ptje3-LLzTwySeFFXz0g0iEzDCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d8:04:88:c2:70:43:36:6f:5d:da:f1:71:cd:96:94:d7:61:
         2e:bf:c7:fc:80:d4:65:e1:d8:1d:3b:d5:19:05:30:25:e8:a3:
         67:85:d5:b6:57:c2:b4:3b:a7:c7:be:53:be:63:07:d2:18:42:
         79:d4:23:8f:01:3d:1c:53:92:75:69:89:1f:a3:3b:74:f4:6e:
         d2:d6:7b:25:cb:fe:87:61:4e:3e:6d:f0:49:24:6d:ba:6c:65:
         1a:24:47:e2:61:7c:9f:26:d0:bd:04:41:ca:1f:9d:a9:f2:0f:
         0b:6e:3b:79:07:ab:22:bc:7d:3d:c6:b6:7f:9a:9b:e5:39:2c:
         de:d8:8b:ee:0c:75:6a:ec:45:fe:fc:8f:e1:c6:45:97:33:bc:
         bf:48:9d:ca:a5:c5:b4:59:13:6c:b6:4f:74:86:e3:f6:ca:ec:
         14:e2:24:7a:95:8a:79:35:f6:0c:09:2a:05:75:86:ed:5b:67:
         28:41:4c:1b:a1:6b:23:5d:ac:44:ce:97:85:95:2b:4c:6d:0d:
         e4:06:07:c3:3f:f5:d1:d5:44:3d:25:75:ab:b1:10:8e:e0:c0:
         ce:0b:8e:d8:fe:1a:e0:df:c3:2c:25:31:49:58:70:7d:17:ac:
         4b:1d:e7:86:3b:f3:e5:80:c7:c5:cd:47:22:07:f5:ab:90:32:
         e5:14:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org