Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/u7ojNDGBdVPwXfBsMaGbMjTr2bI.roa
File:                     u7ojNDGBdVPwXfBsMaGbMjTr2bI.roa (raw, json)
Hash identifier:          ly8I8W7D5ar0MO6vM4UNFkbGTVaFVi8JzLuoLUDxxqA=
Subject key identifier:   BB:BA:23:34:31:81:75:53:F0:5D:F0:6C:31:A1:9B:32:34:EB:D9:B2
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       0190F983385F8D17209C7F8EE36B7C9AFC7D
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/u7ojNDGBdVPwXfBsMaGbMjTr2bI.roa
Signing time:             Sun 28 Jul 2024 13:24:04 +0000
ROA not before:           Sun 28 Jul 2024 13:24:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     30823
IP address blocks:        77.105.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 11:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:f9:83:38:5f:8d:17:20:9c:7f:8e:e3:6b:7c:9a:fc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Jul 28 13:24:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bbba233431817553f05df06c31a19b3234ebd9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:f3:70:ac:ea:00:4e:28:7b:39:38:5d:9b:
                    6c:79:77:47:d6:6a:a3:86:7a:bd:bb:39:86:4d:57:
                    f9:42:55:1b:4f:58:dc:d0:31:69:cc:08:e8:6e:89:
                    90:41:ef:93:37:d7:cd:79:f8:9a:aa:97:2c:f3:06:
                    47:5d:7d:7d:20:85:09:27:47:3e:e7:5c:c3:3a:6c:
                    fc:b9:31:df:d9:1c:12:64:48:bf:fd:f2:30:94:a4:
                    91:6c:22:75:76:c1:58:de:ab:cd:a4:67:f8:ab:87:
                    2d:0c:31:04:01:1c:09:30:74:81:1c:81:80:f4:36:
                    22:d2:03:d0:11:ca:6e:e0:73:28:62:a8:e0:8a:0e:
                    dc:e4:5e:59:72:d7:86:9c:d2:5b:cb:97:df:e9:0c:
                    ab:05:d5:46:9c:e7:a7:de:38:d8:d9:fa:9b:2b:6f:
                    59:14:72:8e:6a:e5:ee:c2:76:0b:9c:1e:d2:4b:ee:
                    28:98:ad:fb:66:43:1c:14:ce:c9:e9:20:2d:c5:bf:
                    8d:b3:cd:a3:96:fd:8e:59:7f:3d:bd:d9:21:20:ac:
                    f3:21:1c:dd:b7:33:13:b5:b4:01:e9:2e:2e:b4:6a:
                    c2:05:9c:56:72:df:f3:f9:7c:75:62:d5:c4:62:5e:
                    ff:0e:57:f8:50:0e:5f:7e:50:2e:b6:cb:ea:cb:37:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BA:23:34:31:81:75:53:F0:5D:F0:6C:31:A1:9B:32:34:EB:D9:B2
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/u7ojNDGBdVPwXfBsMaGbMjTr2bI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:70:49:b5:59:06:0d:42:f2:41:2e:1c:f2:cf:98:d5:a1:88:
         29:ed:af:61:26:73:45:74:83:43:01:3f:14:da:5d:3b:3b:2c:
         52:4b:1d:57:97:7c:f3:37:ca:9e:47:44:a6:22:15:af:58:d6:
         b5:a0:1f:ad:95:70:98:fa:63:8b:ee:15:a1:9d:13:0a:be:f2:
         b5:a2:53:16:77:9c:69:76:0c:20:18:25:c0:ad:ac:94:70:22:
         25:9e:c5:3d:97:53:73:bf:01:7f:80:48:8a:71:86:ac:65:b7:
         26:63:29:5f:01:22:16:ba:7f:93:9d:f4:5f:08:4e:98:68:0f:
         40:db:80:0d:07:72:68:af:62:52:99:d2:73:d8:bb:00:95:03:
         ff:eb:38:af:c8:fd:c8:d4:c3:fb:c6:80:92:1b:68:51:fb:64:
         5e:54:ba:40:87:4b:48:59:17:da:95:14:1b:22:ff:81:91:9d:
         fe:3e:f7:86:26:2e:70:0c:e9:7a:cb:30:3a:86:1a:ff:93:2b:
         d0:f0:e2:42:29:a0:a2:04:62:4b:dc:63:56:af:af:1d:4f:44:
         cf:e5:a9:86:24:d1:bd:61:5a:ff:d1:61:41:ff:b7:6f:20:53:
         6b:31:b8:fb:43:df:12:b5:00:ad:2b:dd:7b:d0:cc:61:62:1d:
         33:0e:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 15:00:16 2024 by rpki-client on console-ams.rpki-client.org