Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Hlu6yTPCsnnJKPjjBgXo5lQOpIs.roa
File:                     Hlu6yTPCsnnJKPjjBgXo5lQOpIs.roa (raw, json)
Hash identifier:          fvZxo2Jaqwcs2Iwi800uFCWe6V0RVZc0Gc1MiOhJrXw=
Subject key identifier:   1E:5B:BA:C9:33:C2:B2:79:C9:28:F8:E3:06:05:E8:E6:54:0E:A4:8B
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       018D473DB86245024DAE4E9762473F874CD7
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Hlu6yTPCsnnJKPjjBgXo5lQOpIs.roa
Signing time:             Fri 26 Jan 2024 19:27:23 +0000
ROA not before:           Fri 26 Jan 2024 19:27:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56862
IP address blocks:        77.105.160.0/24 maxlen: 24
                          77.105.161.0/24 maxlen: 24
                          77.105.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 21:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:47:3d:b8:62:45:02:4d:ae:4e:97:62:47:3f:87:4c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Jan 26 19:27:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1e5bbac933c2b279c928f8e30605e8e6540ea48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:2f:79:da:50:20:5e:09:f9:ef:0b:e3:ff:
                    35:4f:78:b8:cd:8c:4e:ea:32:d4:42:31:18:76:24:
                    70:35:e6:21:b2:b0:7d:c4:6b:4c:68:4f:a4:b9:e8:
                    71:29:57:96:63:51:a7:47:15:f0:25:9d:7b:20:2f:
                    29:29:e3:f7:d0:d0:e9:93:88:02:95:1d:e4:2f:07:
                    00:40:27:82:33:31:9f:5b:ba:17:ca:95:ca:99:47:
                    9c:ea:ef:94:d1:f9:da:fb:f5:35:ab:d0:7d:07:85:
                    a7:31:c5:87:33:62:95:53:2b:04:cc:4e:e0:e2:ab:
                    6a:87:95:72:65:53:72:13:69:7d:e8:12:48:84:92:
                    25:6d:40:a8:36:1a:39:ba:d0:bd:36:ab:c1:22:93:
                    d1:7a:8e:7f:b1:42:8c:02:bd:ab:f3:c1:e3:19:9d:
                    e1:e2:bb:28:17:6a:25:69:6e:1f:71:b5:d5:b7:4a:
                    d8:db:ad:1c:8b:c8:00:71:a6:5b:86:63:8c:37:db:
                    c2:c7:6c:df:42:50:d6:1b:15:66:43:02:ff:17:9d:
                    fc:6d:4a:85:69:5a:ea:65:2d:be:f2:d3:74:5f:e8:
                    2b:0e:9b:ce:32:91:ae:2b:d9:d5:fc:5e:cb:94:d3:
                    85:56:4a:b2:aa:64:ed:21:d0:8c:56:21:98:10:99:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5B:BA:C9:33:C2:B2:79:C9:28:F8:E3:06:05:E8:E6:54:0E:A4:8B
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Hlu6yTPCsnnJKPjjBgXo5lQOpIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.160.0/23
                  77.105.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:ac:28:c0:e9:45:bf:49:41:a9:ea:38:72:dd:fd:c6:33:
         9d:bc:56:c2:d7:05:cf:06:34:56:8b:a9:9c:46:58:e1:15:9d:
         c7:72:c2:44:24:67:15:97:8f:39:d4:dc:b6:05:1f:9c:84:69:
         6a:6e:1f:af:8e:a3:2f:b6:f2:75:7a:6a:f4:6b:ae:62:92:b9:
         4d:19:68:8c:f5:25:e8:e2:8d:7b:fa:8c:63:23:97:0e:0a:e3:
         8d:23:75:c4:51:f2:ef:51:41:ba:29:8a:77:88:9f:8a:69:fa:
         3e:07:21:f9:73:d1:6a:d4:e2:94:48:30:b4:62:f7:ed:87:aa:
         02:a1:22:7a:4d:df:9a:66:93:65:45:5e:b3:eb:6e:63:42:a6:
         5c:9a:9f:84:9b:33:f4:34:58:c8:7e:74:1e:a7:b3:95:88:88:
         8e:b4:13:0b:e8:71:56:07:33:43:02:1f:42:b5:87:56:b0:ea:
         bd:76:9e:5e:30:76:4f:cf:5f:f6:c4:78:0f:c9:3a:db:92:a9:
         d1:cf:72:7e:39:3e:8c:dd:59:95:59:26:92:79:e9:b0:bd:18:
         de:b1:f8:6a:06:3a:a7:c4:c0:a2:4c:f5:99:4a:79:1c:ed:9e:
         d2:3b:fa:cd:d4:41:7c:5b:9c:45:f0:3b:31:1a:6a:ce:fd:75:
         33:90:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:34 2024 by rpki-client on console-fra.rpki-client.org