Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BOhN1_Fnnmver4dcoWlBGcvqpv8.roa
File:                     BOhN1_Fnnmver4dcoWlBGcvqpv8.roa (raw, json)
Hash identifier:          lDv1MjxpeWLOMJHYJV4uBd15SAxluxy0+JdsKfASLQQ=
Subject key identifier:   04:E8:4D:D7:F1:67:9E:6B:DE:AF:87:5C:A1:69:41:19:CB:EA:A6:FF
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       018DD2168A333DE8DEDBEB01E7BEAB33DDBD
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BOhN1_Fnnmver4dcoWlBGcvqpv8.roa
Signing time:             Thu 22 Feb 2024 18:31:48 +0000
ROA not before:           Thu 22 Feb 2024 18:31:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57844
IP address blocks:        77.83.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 08:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d2:16:8a:33:3d:e8:de:db:eb:01:e7:be:ab:33:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Feb 22 18:31:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=04e84dd7f1679e6bdeaf875ca1694119cbeaa6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:e7:35:19:2d:92:2e:e6:06:c0:2f:4c:4e:
                    08:b7:00:c5:37:eb:3a:4d:19:6d:bd:73:b3:79:3e:
                    bf:8e:51:81:29:29:3f:a3:e6:b8:e8:b4:15:19:c5:
                    56:aa:4d:8a:dc:9d:55:a3:3a:e4:b4:09:4a:9b:ca:
                    fa:43:63:55:99:ac:ed:b8:c9:a6:d4:c6:35:c9:91:
                    09:20:06:8f:a3:43:a2:03:a2:58:78:4c:52:95:b5:
                    c1:41:c6:a6:18:ec:b2:07:79:c9:a4:ec:01:ae:d2:
                    61:e8:9f:d7:d5:89:b9:02:64:e8:07:27:92:9d:08:
                    43:72:b6:38:e3:bc:19:45:60:0d:f5:73:22:ef:b3:
                    70:54:26:85:55:82:1f:a4:39:ca:c6:02:46:c5:d5:
                    00:9d:76:1d:4b:ee:8a:58:14:60:a5:b4:4b:09:f2:
                    96:9e:fe:dc:72:ce:d9:74:52:91:45:c1:0e:98:ff:
                    8f:6a:13:cb:76:78:cb:c4:eb:ac:14:b7:80:fa:27:
                    01:db:17:57:25:2a:3d:66:ab:ab:5e:03:bd:d5:7f:
                    c9:c2:7c:e3:0f:2e:22:27:5d:73:00:c4:98:f7:9c:
                    35:cb:94:21:66:1c:3b:2e:22:fe:dc:31:cf:c2:6c:
                    c2:ba:81:c4:0b:17:55:0f:13:7c:43:9d:c2:2f:a0:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:4D:D7:F1:67:9E:6B:DE:AF:87:5C:A1:69:41:19:CB:EA:A6:FF
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BOhN1_Fnnmver4dcoWlBGcvqpv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:2d:a9:44:7d:4a:b5:6e:73:5c:8d:61:e6:72:30:a3:27:
         64:8a:83:b9:5f:c5:84:99:9d:57:6d:18:73:f7:40:49:24:1d:
         47:78:9e:74:43:a8:f9:d1:fb:9c:53:73:44:cd:9c:90:8d:60:
         85:b5:5b:df:1f:36:57:10:6b:ff:a6:40:4b:60:24:a6:95:20:
         8c:7c:13:08:79:0d:7d:81:d8:7a:0e:83:35:24:6a:7a:f3:41:
         95:55:3c:1b:2c:57:30:9f:31:12:b2:41:0f:8c:d3:62:8f:08:
         9f:bb:cc:47:20:24:08:d6:58:13:69:4e:4d:33:ff:6c:42:db:
         27:c8:05:df:4a:86:dd:9d:42:4d:93:f5:f5:d1:3b:14:86:ef:
         cc:15:da:1e:e3:30:03:f6:96:17:62:d5:c2:32:09:84:7f:5f:
         a9:c1:ac:84:a1:93:fd:f7:c0:b9:e2:09:c1:98:45:17:b9:06:
         e5:7c:d8:64:43:86:53:e3:cd:8d:5a:4e:e9:fb:b6:b0:50:9d:
         2c:7b:95:fc:77:6b:eb:95:74:db:c0:63:b4:31:ad:83:f4:29:
         e6:f5:fd:a5:61:23:ca:d0:e3:24:44:ca:a5:67:6a:3d:fd:e2:
         25:05:53:8a:36:35:70:a5:83:80:3e:02:e5:2e:58:16:fa:a5:
         6c:24:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org