Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_KGhU4z4Iiea69B1QMLCir7Jw1E.roa
File:                     _KGhU4z4Iiea69B1QMLCir7Jw1E.roa (raw, json)
Hash identifier:          llhTYNUh8RTBDkFyV6LRCnkBkJkAdqJE6YYXYZBCW6M=
Subject key identifier:   FC:A1:A1:53:8C:F8:22:27:9A:EB:D0:75:40:C2:C2:8A:BE:C9:C3:51
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       018983CF8733BF73E8DF7E588BE4D4A91BEE
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_KGhU4z4Iiea69B1QMLCir7Jw1E.roa
Signing time:             Sun 23 Jul 2023 17:32:43 +0000
ROA not before:           Sun 23 Jul 2023 17:32:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201671
IP address blocks:        185.78.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:83:cf:87:33:bf:73:e8:df:7e:58:8b:e4:d4:a9:1b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Jul 23 17:32:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fca1a1538cf822279aebd07540c2c28abec9c351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:1f:32:09:af:8e:a6:9a:0c:19:52:bc:da:
                    4e:a0:1f:c9:6d:06:1e:27:71:f6:28:92:b0:e4:d5:
                    7d:80:3c:88:85:0d:50:79:6a:04:e2:98:89:52:51:
                    26:5b:7f:c2:9d:ff:b4:9e:e8:d5:26:56:b5:a0:c1:
                    58:02:62:43:49:8b:e8:8f:c6:7a:d6:15:a6:04:ba:
                    0d:ab:2a:2d:2b:a7:f1:69:36:19:e6:16:57:54:2b:
                    17:3c:19:95:d9:fb:5e:b3:f6:9b:81:51:87:5f:f5:
                    1d:b0:12:37:ae:91:0f:7e:26:14:ac:31:f6:66:b9:
                    ef:1b:58:f2:cd:5d:88:4d:8b:94:f0:7c:eb:33:e9:
                    3d:f6:d4:44:27:f1:47:9c:64:d1:54:9a:76:ba:3e:
                    7b:5e:41:3e:e1:71:b3:a5:76:db:b6:1f:fd:ec:f3:
                    02:bb:89:35:f9:da:ea:aa:1f:97:03:a9:a2:ca:63:
                    c3:31:39:e8:a6:d0:61:bf:29:68:84:4a:b1:7b:0e:
                    7c:e8:b7:20:89:94:dc:65:1c:77:c9:00:e1:7f:71:
                    67:01:e4:7e:94:32:d4:3d:8d:5b:77:b6:17:42:2e:
                    c3:bb:00:b2:15:47:96:eb:e9:54:b6:69:60:da:42:
                    83:25:7d:e3:d5:30:a4:c2:ea:bd:da:a5:f0:42:4e:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:A1:53:8C:F8:22:27:9A:EB:D0:75:40:C2:C2:8A:BE:C9:C3:51
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_KGhU4z4Iiea69B1QMLCir7Jw1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:80:1b:ee:67:0b:e5:09:93:f1:3f:05:18:bf:af:23:a1:70:
         3b:01:7a:50:ec:e9:7f:e8:3d:fd:79:68:71:05:19:a8:55:58:
         5b:4b:4b:b1:ba:46:20:1c:6d:dc:6b:ef:7a:0e:b0:1b:35:8d:
         9f:44:c8:47:77:44:f1:60:b3:b9:de:66:cf:5b:d9:01:c6:e6:
         e8:e4:d8:9c:b1:af:60:8e:ac:b6:e1:b6:ec:6e:2e:e7:8e:59:
         80:84:94:30:b6:1b:7f:4b:65:04:6b:ce:fa:68:f9:e8:33:2d:
         45:fc:7f:ee:b4:26:55:bf:55:35:8f:dd:97:cb:05:e0:db:08:
         79:11:46:ff:e7:5e:2b:22:40:f4:95:a5:78:3b:49:52:24:35:
         0f:52:65:a7:50:7b:60:50:14:01:d2:ac:ca:e0:d4:71:cd:76:
         a4:91:7c:59:83:2f:af:e4:44:78:72:1b:1f:82:f9:3f:a7:e5:
         c2:37:c9:00:ef:d4:31:ff:2e:83:8e:89:9c:cc:67:cd:70:fd:
         56:68:69:1a:48:4b:c7:18:a5:7b:6f:87:02:47:23:f4:48:82:
         c2:50:79:01:c9:ed:80:fa:aa:e8:bd:a5:b0:65:aa:2e:3e:d9:
         8b:df:5d:a0:21:dd:37:cd:30:99:e5:d3:82:60:fa:89:ca:87:
         62:64:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org