Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/5cAPNyC0TEz4kgNVUL_09h907Co.roa
File:                     5cAPNyC0TEz4kgNVUL_09h907Co.roa (raw, json)
Hash identifier:          Ie+/MCCuMto1EGIgK8JzUgjpmDbsDWn4dJg/NxRbpS8=
Subject key identifier:   E5:C0:0F:37:20:B4:4C:4C:F8:92:03:55:50:BF:F4:F6:1F:74:EC:2A
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       0190F98D4A2B918BF0839145FEEC678EF73A
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/5cAPNyC0TEz4kgNVUL_09h907Co.roa
Signing time:             Sun 28 Jul 2024 13:35:04 +0000
ROA not before:           Sun 28 Jul 2024 13:35:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        77.81.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:f9:8d:4a:2b:91:8b:f0:83:91:45:fe:ec:67:8e:f7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Jul 28 13:35:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e5c00f3720b44c4cf892035550bff4f61f74ec2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:d9:65:e9:1b:25:77:11:e4:b4:c6:ac:8a:
                    36:79:be:62:e7:7e:35:e2:46:93:2e:ca:33:c9:8e:
                    ac:04:71:e1:7a:cb:5c:14:cd:29:90:c2:ba:b5:a7:
                    31:10:b3:b4:0a:a0:34:06:62:5c:df:8b:f2:f9:07:
                    ab:e9:ba:20:dc:d1:f2:49:e7:85:84:1d:23:35:e9:
                    14:3f:02:4d:97:6a:9d:33:19:0f:22:ba:43:65:54:
                    e9:ca:aa:9e:35:e2:66:d5:17:7f:08:4f:93:97:77:
                    74:38:b4:f1:4a:fb:40:2c:02:89:4e:38:c5:b5:cf:
                    33:ca:84:d4:5c:00:7a:03:72:d5:05:fc:8e:d1:a3:
                    a5:71:4f:07:20:4c:d4:4f:af:fb:6c:a0:07:63:dd:
                    46:4e:83:97:85:c7:35:cc:3c:df:63:57:b9:98:bb:
                    56:a7:48:11:f6:36:c3:97:33:00:28:91:2c:e1:ba:
                    4a:67:b3:71:7f:c4:99:d6:97:26:d1:7d:a1:03:81:
                    e8:08:2c:9a:b7:30:a8:d6:d0:2d:e7:f3:e1:77:5d:
                    64:2d:d7:82:79:e0:f6:04:36:55:8a:b7:46:dd:ce:
                    2e:95:42:cb:27:c7:71:e2:af:3c:57:f4:d7:eb:f8:
                    a6:38:a4:fb:b7:de:57:82:ef:79:e4:24:0d:2b:38:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C0:0F:37:20:B4:4C:4C:F8:92:03:55:50:BF:F4:F6:1F:74:EC:2A
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/5cAPNyC0TEz4kgNVUL_09h907Co.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:28:7e:c0:69:78:72:a1:c5:68:02:a9:8b:ec:d3:c1:fa:
         71:2d:11:5b:46:fb:bf:61:3c:b8:b9:96:ec:e8:70:50:7c:e1:
         c6:53:dc:42:b7:1d:f5:03:9b:23:d7:d3:88:68:36:0e:bb:2d:
         da:59:f2:36:4e:05:7b:10:f8:7d:ef:58:57:cc:74:6f:f7:90:
         25:d8:73:8b:88:bc:73:b5:22:48:8f:26:f2:e6:18:50:67:df:
         64:86:eb:c4:47:83:af:12:d0:d5:97:06:b3:43:01:23:8d:53:
         ec:95:ca:0d:80:05:1c:d4:1d:0c:53:24:24:a9:29:cb:00:f2:
         97:ef:3a:8d:0e:71:c3:e8:52:73:ef:18:24:1f:26:21:77:90:
         c3:03:0b:8a:3e:10:83:cb:6c:79:24:75:ed:e1:ee:4e:cb:3c:
         60:07:b3:39:2d:de:df:eb:25:cd:80:a2:51:ec:6a:c5:c1:74:
         1a:94:a3:29:7b:01:e0:f5:63:9e:f0:e9:1e:e6:50:cd:ae:95:
         d1:a2:bc:53:b1:99:88:b4:f1:d2:53:22:f8:06:88:0b:ac:48:
         35:1e:f8:66:0d:02:ba:1c:37:19:a5:09:69:d0:cf:50:36:a1:
         68:d1:0c:46:c0:09:31:aa:d6:7b:18:39:72:6e:8e:6d:e4:3b:
         21:02:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 18:23:57 2024 by rpki-client on console-ams.rpki-client.org