Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Hws6WbqhF43iy7lVOIghjqUJC2Y.roa
File:                     Hws6WbqhF43iy7lVOIghjqUJC2Y.roa (raw, json)
Hash identifier:          1tiyPuwB0JdPavkXWkjh8HG0EQ/HDaz93MJoSA6BtGM=
Subject key identifier:   1F:0B:3A:59:BA:A1:17:8D:E2:CB:B9:55:38:88:21:8E:A5:09:0B:66
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       018E6F8054C938CBF952414E9B47AA63526B
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Hws6WbqhF43iy7lVOIghjqUJC2Y.roa
Signing time:             Sun 24 Mar 2024 08:07:45 +0000
ROA not before:           Sun 24 Mar 2024 08:07:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215939
IP address blocks:        77.105.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 10:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:6f:80:54:c9:38:cb:f9:52:41:4e:9b:47:aa:63:52:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Mar 24 08:07:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f0b3a59baa1178de2cbb9553888218ea5090b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c0:aa:74:20:99:9e:49:86:58:c6:ef:c6:b4:
                    90:d6:6d:df:d5:12:f8:10:98:47:79:ee:e3:4b:99:
                    29:9e:5b:a4:81:4e:3d:36:19:3e:e4:29:a1:b7:60:
                    82:95:81:4e:88:2f:ee:fe:7a:0b:02:1a:a8:71:9b:
                    99:83:21:65:fe:4c:72:bb:bf:24:d1:40:ff:5a:ec:
                    5e:3b:a1:12:56:05:4e:12:f8:04:ee:ec:dc:8e:8a:
                    c9:c2:bc:ab:af:f3:c5:07:e2:7f:a1:29:f9:4e:95:
                    fb:14:85:70:45:37:20:3f:77:77:5c:d8:1a:3e:35:
                    22:58:89:12:04:e4:b7:4d:79:04:93:3c:90:ee:2e:
                    49:d1:e2:b2:68:b8:ba:26:a7:51:56:1e:b5:a6:56:
                    f1:a2:5d:4e:09:18:ad:e2:00:15:fe:85:e7:6b:b0:
                    f0:ca:0c:cb:c2:44:a7:40:54:82:57:f3:b0:7f:01:
                    f6:8a:c2:fb:f8:4e:bc:64:65:a7:bb:73:4c:5d:0b:
                    64:6f:2b:c1:09:01:87:bf:19:a2:7c:e5:1d:b1:9c:
                    a3:a0:95:8f:9e:64:84:60:3e:61:ff:b2:6b:13:ae:
                    6d:d5:43:80:71:74:b1:8c:ea:fb:b1:63:38:ba:fe:
                    16:e1:15:b2:5d:b9:af:2b:58:57:27:68:a5:28:cf:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:3A:59:BA:A1:17:8D:E2:CB:B9:55:38:88:21:8E:A5:09:0B:66
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Hws6WbqhF43iy7lVOIghjqUJC2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:04:1d:c9:0b:78:1b:48:bd:93:ed:ab:0e:03:7f:d1:ca:bc:
         8d:51:28:79:fb:a7:b1:a7:77:71:05:80:d9:cf:60:b2:63:33:
         c6:6d:b8:2e:10:d7:ae:19:85:cd:2f:fb:d4:cc:55:e7:61:eb:
         b3:d5:cb:ab:a7:73:6a:81:db:c2:cf:a0:88:e2:20:15:92:ae:
         a2:95:df:5c:8e:f8:80:2d:46:9f:9a:d7:42:ff:89:73:72:9d:
         45:e2:0f:c5:10:ef:56:48:d8:92:7b:0c:a4:c5:ce:a8:18:cc:
         f3:c8:4a:9c:8d:25:21:1f:66:29:8b:83:17:b1:ae:44:74:7d:
         06:12:19:6c:22:83:a4:e5:cc:f1:88:a0:c9:89:2c:f8:33:e4:
         46:31:ab:0c:f4:06:ca:bb:c3:09:01:fe:6f:2e:fd:5d:8b:bd:
         bf:e5:46:4c:8b:ed:c5:79:b9:e5:72:4a:df:63:51:db:4c:d8:
         6d:46:46:7c:3f:f6:8d:dc:00:46:cb:43:3f:5f:e3:61:bb:35:
         50:b2:7f:f3:e9:c9:db:36:27:34:7b:43:39:b9:0d:5a:1c:18:
         10:d7:cc:c2:10:3e:8d:6a:b7:b5:60:23:51:2d:eb:34:61:2b:
         eb:5b:20:50:ce:10:d2:49:ff:73:54:3a:07:3d:c6:38:81:c8:
         c4:d5:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:44 2024 by rpki-client on console-ams.rpki-client.org