Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/E06JKpLLT54-XlVl_0KAoOEnR_s.roa
File:                     E06JKpLLT54-XlVl_0KAoOEnR_s.roa (raw, json)
Hash identifier:          oF5z0tKr2v09d0rhJVs+NLyxr37+1OgWadQEaSPLLH4=
Subject key identifier:   13:4E:89:2A:92:CB:4F:9E:3E:5E:55:65:FF:42:80:A0:E1:27:47:FB
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       01878025E7E22C8083198F83F7C4BCFB32BA
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/E06JKpLLT54-XlVl_0KAoOEnR_s.roa
Signing time:             Fri 14 Apr 2023 14:23:00 +0000
ROA not before:           Fri 14 Apr 2023 14:23:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44112
IP address blocks:        77.222.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:25:e7:e2:2c:80:83:19:8f:83:f7:c4:bc:fb:32:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Apr 14 14:23:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=134e892a92cb4f9e3e5e5565ff4280a0e12747fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:32:ef:36:09:ba:a8:46:03:99:0e:c9:ad:
                    ee:63:82:88:a6:ce:e4:09:af:cf:57:88:cd:65:c2:
                    5f:b1:31:eb:df:31:b1:b4:36:1a:b2:10:00:62:b5:
                    ac:6d:2c:f9:67:e1:04:da:01:85:26:71:c5:03:eb:
                    7d:cb:c1:b4:91:c8:76:c8:5b:1e:15:3c:1e:34:e9:
                    73:f9:79:79:fc:b2:98:9a:3c:f1:a6:ed:98:bd:18:
                    b6:05:37:9f:42:5b:43:56:80:87:e8:f5:7b:f5:22:
                    e1:67:b8:95:64:28:c9:2f:d5:91:25:6c:64:a3:2d:
                    54:2f:68:b1:f4:4c:f7:c1:bb:98:6c:9d:db:e1:4d:
                    a9:c1:cc:26:ab:e7:48:95:39:60:f4:31:15:40:85:
                    27:50:2e:57:54:f7:ff:29:b8:f1:ad:2a:d4:43:40:
                    9f:ec:1d:64:54:02:5c:f2:3a:83:e8:e4:8a:94:71:
                    dc:a6:cc:f3:b5:f6:6f:f5:66:c7:27:0d:5d:05:af:
                    f2:a4:a5:16:f1:d4:d0:47:0e:53:c3:72:09:ec:40:
                    44:de:7d:f2:67:ce:95:23:7f:34:05:51:7f:77:b7:
                    f7:ea:f8:dd:02:36:eb:16:f9:63:1d:e1:47:a1:f1:
                    5d:2e:e3:28:48:a1:a1:e5:bf:8c:22:8a:09:83:7f:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:89:2A:92:CB:4F:9E:3E:5E:55:65:FF:42:80:A0:E1:27:47:FB
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/E06JKpLLT54-XlVl_0KAoOEnR_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.222.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:58:20:b5:6e:f8:64:85:43:e2:c1:30:6c:fc:8a:b8:5a:
         a2:38:32:23:ce:74:80:88:41:f6:64:2b:7f:18:56:da:13:f7:
         32:6a:30:9f:b5:2b:95:00:33:87:0e:fa:13:93:b2:ea:15:3e:
         a2:5f:af:fc:3f:63:8f:8a:fa:7f:fc:5e:a2:f2:df:3a:24:75:
         fa:8c:8e:96:f7:16:13:88:ed:ed:1e:b2:e0:ea:58:44:93:3c:
         d7:d8:bc:23:05:45:5c:26:38:3c:a1:0a:d4:0c:59:c8:99:42:
         b3:f3:e7:66:fe:95:f6:b9:96:e8:53:70:66:07:20:a6:7a:fd:
         6d:c5:f3:14:b6:02:f4:f0:75:62:03:dc:30:ef:70:7d:89:2d:
         0f:c0:5d:1f:37:59:d6:0d:9c:53:b1:fe:ba:cd:38:59:a7:a6:
         13:b9:f3:cb:1f:8c:a7:38:c1:dd:64:0d:ea:8b:4e:ae:60:b1:
         30:94:24:dd:66:dd:c3:5d:b8:9e:b6:30:eb:7c:dc:13:66:44:
         9e:0e:51:14:95:45:81:c1:e8:cd:02:39:ff:77:1f:8c:5b:ee:
         33:eb:18:d8:47:53:98:5e:94:ac:93:32:b1:a6:b6:e8:d7:19:
         f2:7b:3a:ec:32:96:fc:a8:2f:26:d0:4f:4e:ac:89:f8:8a:ab:
         0f:6f:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:04 2024 by rpki-client on console-ams.rpki-client.org