Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1vysGar5BNC9vhK9Gn4ZFojBxho.roa
File:                     1vysGar5BNC9vhK9Gn4ZFojBxho.roa (raw, json)
Hash identifier:          y0rSwoKTgQ5tkPH3YDuOkfsvGedZFlCHsd7QEu/LV48=
Subject key identifier:   D6:FC:AC:19:AA:F9:04:D0:BD:BE:12:BD:1A:7E:19:16:88:C1:C6:1A
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0188E24648C2C63342123ABE59CF02A83A54
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1vysGar5BNC9vhK9Gn4ZFojBxho.roa
Signing time:             Thu 22 Jun 2023 08:43:56 +0000
ROA not before:           Thu 22 Jun 2023 08:43:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206814
IP address blocks:        77.111.125.0/24 maxlen: 24
                          77.111.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:46:48:c2:c6:33:42:12:3a:be:59:cf:02:a8:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jun 22 08:43:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6fcac19aaf904d0bdbe12bd1a7e191688c1c61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:17:cf:28:08:77:9c:51:16:bf:a6:3f:d8:
                    9f:3f:dc:5a:4e:de:d4:98:e8:59:98:85:24:41:61:
                    b5:f7:95:18:32:6d:34:b4:9b:74:b4:82:5a:57:43:
                    07:4d:ab:56:92:40:91:0b:51:4d:80:b8:4e:f0:4d:
                    24:e8:50:d6:2f:70:be:69:4a:c1:a3:df:69:24:27:
                    dd:a8:ee:9a:a5:99:45:82:ca:5e:35:36:fa:07:8f:
                    06:37:35:34:ac:1c:46:11:9c:7d:99:e2:78:a5:86:
                    1c:97:5d:1d:cf:22:5f:e3:f2:5d:38:8e:84:4d:33:
                    6c:80:10:36:de:da:59:14:31:14:12:bb:91:c7:86:
                    39:80:13:84:49:7f:08:01:d6:5a:32:95:f0:68:6b:
                    e2:f3:e1:7b:f6:b9:e8:b0:0f:f2:19:e5:00:31:38:
                    1b:fa:95:d9:17:2b:ae:26:8f:3b:73:c7:ea:61:fc:
                    63:08:61:cc:61:7b:51:c3:33:27:dc:20:00:b6:6d:
                    7d:de:23:c6:08:f0:c2:eb:3f:f2:6d:14:27:f4:aa:
                    a9:22:b1:93:a7:de:ab:53:f4:48:f8:f4:3f:09:20:
                    ae:26:9b:6f:69:4a:b5:ed:74:46:41:2a:f9:d8:fd:
                    84:9d:f4:b7:e6:45:bb:96:77:62:bd:80:81:98:f7:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FC:AC:19:AA:F9:04:D0:BD:BE:12:BD:1A:7E:19:16:88:C1:C6:1A
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/1vysGar5BNC9vhK9Gn4ZFojBxho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:93:b0:03:85:56:aa:95:b8:94:29:0a:f1:a2:04:c8:a7:29:
         c8:09:75:f0:eb:89:f5:ff:af:3a:79:ed:51:b7:90:d5:aa:be:
         2e:72:cf:7d:f1:a9:7c:a0:48:79:30:8a:77:a2:34:37:20:e1:
         1b:cd:6f:e0:d1:07:81:f7:9c:58:5f:c9:72:58:75:13:ce:06:
         d5:3a:0e:5c:66:61:45:51:79:d6:66:4a:7d:1e:99:33:87:e4:
         24:92:89:76:11:98:08:a7:ba:89:77:87:cc:1b:36:1c:17:6b:
         20:0e:6e:5e:78:ca:07:a5:ab:76:e8:36:16:38:4e:ba:44:c3:
         1d:2a:c6:ed:44:97:27:a4:fe:5c:ff:ca:57:cb:72:a0:43:c0:
         1f:3f:f9:bf:48:f3:7a:3f:1b:75:d6:4f:dd:98:8e:d7:18:6a:
         ed:33:e9:46:42:a1:8a:af:41:0f:ac:6c:4e:f4:57:a1:58:c6:
         54:35:1c:79:68:20:30:71:1f:13:84:4f:76:30:2b:2a:ba:6f:
         68:94:e3:93:0e:8b:3f:62:70:31:6f:95:c3:26:20:c7:66:2c:
         b8:a5:5c:36:ef:78:8f:53:c1:bf:ea:94:65:ed:df:e7:94:99:
         b7:b4:61:2c:2b:5e:75:54:ea:c8:98:cd:f2:28:83:d4:9a:02:
         b0:a6:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org