Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GPkwF-CB9T2sCSv2JENxn39C4mY.roa
File:                     GPkwF-CB9T2sCSv2JENxn39C4mY.roa (raw, json)
Hash identifier:          MewXS6THx2zH7txBiukJOe6PZZzsZ9UyglTAxIW6abs=
Subject key identifier:   18:F9:30:17:E0:81:F5:3D:AC:09:2B:F6:24:43:71:9F:7F:42:E2:66
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       018A418A69305C1337E57084223CCE47C504
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GPkwF-CB9T2sCSv2JENxn39C4mY.roa
Signing time:             Tue 29 Aug 2023 13:45:04 +0000
ROA not before:           Tue 29 Aug 2023 13:45:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43991
IP address blocks:        77.243.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:41:8a:69:30:5c:13:37:e5:70:84:22:3c:ce:47:c5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Aug 29 13:45:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18f93017e081f53dac092bf62443719f7f42e266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:8f:0f:01:98:f1:98:29:d0:db:57:e7:c3:
                    80:7b:36:a5:a7:8b:66:5b:a2:8d:be:f5:f3:59:59:
                    47:21:53:a7:f0:0d:17:b4:2a:30:ce:a3:47:fd:45:
                    ef:a1:c0:ec:27:c2:37:be:fe:5b:22:07:10:a4:18:
                    f0:f5:cf:c6:a3:91:be:6f:73:42:4e:d5:94:20:4c:
                    94:79:5b:b3:08:52:af:84:8f:8b:d6:0f:de:eb:25:
                    79:a4:af:50:5b:aa:45:ed:df:b2:e5:e6:a8:62:56:
                    3a:78:ef:95:dd:b8:80:9d:b9:f1:f4:2e:57:32:61:
                    03:26:5c:54:b7:d6:3c:71:b3:58:6a:6f:fb:cd:82:
                    08:7a:30:dc:a4:ef:c2:56:cf:0e:95:39:ff:e0:72:
                    ce:e3:45:ae:39:68:a6:57:38:68:f3:17:ad:ed:d0:
                    11:d9:14:62:ac:21:2b:de:f5:f4:18:f2:9b:75:d0:
                    90:81:e5:eb:d2:36:47:82:52:60:d9:fd:6b:a7:fd:
                    45:ed:7f:75:be:e6:00:c9:be:11:7b:2a:20:b8:10:
                    98:f9:49:83:ab:0e:25:cf:f7:5a:40:49:7d:f3:00:
                    f3:98:e5:7b:59:68:a0:5e:b0:c0:74:f2:e1:bc:b0:
                    a9:2b:c4:17:50:52:75:31:0d:64:ea:48:f5:00:41:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F9:30:17:E0:81:F5:3D:AC:09:2B:F6:24:43:71:9F:7F:42:E2:66
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/GPkwF-CB9T2sCSv2JENxn39C4mY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.243.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:9a:cb:7a:bd:12:3c:48:7d:28:06:9c:eb:e4:60:87:61:
         b2:dc:4f:54:53:1e:4e:8b:37:4c:90:14:41:e5:a5:ea:a5:60:
         11:07:72:44:99:fe:af:d2:39:d0:f7:14:a8:10:c7:ba:45:1d:
         83:e9:96:2f:09:95:da:b4:47:41:d9:01:12:93:53:0a:d2:3d:
         24:c1:6e:c9:2e:c9:b2:b0:f3:28:1d:f2:73:ac:91:82:3f:bc:
         15:9a:7c:0f:18:f3:ca:3d:f4:d4:63:bd:f7:3e:13:41:74:e2:
         d4:ac:3d:05:9f:1a:59:3b:f8:dc:a3:cf:d4:85:e7:46:0a:f0:
         2d:43:d9:ef:e0:5d:28:47:2c:f1:b3:80:7d:4b:7f:78:69:1d:
         c6:33:3c:d2:e4:ce:84:cd:88:29:55:99:e0:1c:d9:f2:93:95:
         77:86:70:eb:6b:a2:37:17:26:97:a4:ef:e0:af:41:2b:3d:d1:
         32:04:dc:3a:85:89:e9:75:26:15:d9:ca:ff:f7:24:d6:91:4a:
         c5:20:7d:86:a7:22:d1:a6:c8:23:b4:c1:89:9a:f5:17:38:15:
         d7:34:1d:a8:4b:66:d8:d0:9e:68:05:0e:7b:0c:8b:a6:d9:e7:
         32:5f:2c:ad:dc:9b:8d:57:cc:2b:95:d3:b4:0c:62:e3:0c:4a:
         2f:2d:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org