Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/78IO-S4t4LkLRff46XkT1OghLZ8.roa
File:                     78IO-S4t4LkLRff46XkT1OghLZ8.roa (raw, json)
Hash identifier:          LUZ1JXSjV+WdHTjGPWth7QILjtWFCkbc80nfwFv4yoA=
Subject key identifier:   EF:C2:0E:F9:2E:2D:E0:B9:0B:45:F7:F8:E9:79:13:D4:E8:21:2D:9F
Certificate issuer:       /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial:       018A4038CF1FCB9D0C26A7F7096A2BCA4796
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/78IO-S4t4LkLRff46XkT1OghLZ8.roa
Signing time:             Tue 29 Aug 2023 07:36:19 +0000
ROA not before:           Tue 29 Aug 2023 07:36:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42595
IP address blocks:        62.181.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:38:cf:1f:cb:9d:0c:26:a7:f7:09:6a:2b:ca:47:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
        Validity
            Not Before: Aug 29 07:36:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efc20ef92e2de0b90b45f7f8e97913d4e8212d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:ec:56:2c:45:78:96:4d:d7:0e:da:f8:97:
                    eb:85:5d:7c:88:3f:11:74:ff:b8:04:d9:e3:40:23:
                    82:94:87:15:f9:fa:34:af:72:62:7f:ee:e3:62:9a:
                    08:ef:25:c9:02:2f:e2:04:cf:4e:48:64:d7:fc:6d:
                    9c:bf:cd:fb:ae:2f:96:2a:9d:92:05:1e:85:0b:e1:
                    a7:b1:47:9e:7c:4c:4c:d4:17:6c:1f:5f:27:0c:f3:
                    1d:20:dd:e1:04:c5:dc:05:ad:b3:8d:2f:23:38:29:
                    5d:f6:15:a5:f5:e3:3c:f0:6d:63:49:d1:1a:a1:39:
                    0a:17:fb:6f:93:64:d3:b1:a1:af:94:e0:4b:d3:f7:
                    28:f8:a3:67:c4:c5:23:e6:b4:25:52:b4:b2:70:e9:
                    4a:d8:5d:6b:d2:20:aa:b1:fc:14:e3:70:33:ac:df:
                    6c:c7:ca:3c:7b:41:3d:c0:76:b2:ec:bd:00:75:dc:
                    e6:6d:03:66:ea:65:18:98:3c:58:70:fb:ee:e4:4f:
                    b5:db:f0:d0:04:99:52:60:b7:43:e5:ea:7d:58:b5:
                    91:e4:1b:ce:a3:34:f3:b5:3d:55:55:82:aa:2a:23:
                    f7:93:2c:7e:bf:98:63:9c:2b:5c:f6:24:28:e2:ba:
                    53:56:2b:aa:1c:30:2d:55:ce:c8:29:05:2f:ad:1d:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C2:0E:F9:2E:2D:E0:B9:0B:45:F7:F8:E9:79:13:D4:E8:21:2D:9F
            X509v3 Authority Key Identifier:
                keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/78IO-S4t4LkLRff46XkT1OghLZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.181.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:94:86:0d:07:e6:98:c1:32:8b:db:7e:05:0b:ff:b2:26:86:
         5d:16:8a:75:00:0a:5c:84:b6:4a:74:58:93:80:2d:e6:96:ff:
         ab:1e:3a:ff:ab:f0:97:cf:6e:04:90:4a:07:3c:d8:3f:3b:45:
         0a:65:eb:89:c5:07:84:16:17:61:e3:ce:57:24:0e:36:76:0a:
         92:89:16:e1:b7:22:9f:7b:93:55:43:b7:b6:24:db:f6:93:4e:
         ee:79:67:f2:0b:7e:9a:70:b5:a0:b7:14:8f:10:f7:0b:d6:71:
         3d:56:8f:ec:ba:4f:6c:b0:e4:91:61:2f:83:3a:7a:6b:61:29:
         3b:b4:10:9f:d2:45:11:0c:24:09:26:67:c6:aa:a0:21:d4:30:
         9c:8a:47:80:0b:49:92:d0:98:de:7e:27:10:62:65:27:8b:60:
         cb:3f:f0:b4:a4:e9:00:f2:b5:6e:c1:82:e5:ba:74:41:79:2a:
         cf:5d:fb:d4:b5:0d:f6:3e:31:dd:db:23:25:18:74:7a:ec:74:
         a7:50:95:8a:ab:93:05:99:01:02:45:0d:73:3f:4f:4b:5e:49:
         66:3f:aa:cb:51:c4:28:c9:da:f0:16:52:2d:f2:0d:c0:9a:02:
         a2:a8:5b:f8:66:01:d2:62:2c:94:19:f4:d8:d3:09:01:6b:da:
         6c:0c:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:38 2024 by rpki-client on console-ams.rpki-client.org