Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/OdPZ09zyq1yO4fIdOYYTvZJYcPg.roa
File:                     OdPZ09zyq1yO4fIdOYYTvZJYcPg.roa (raw, json)
Hash identifier:          0SXtITKg2MT3MMMbdT2CqcL3iqIkrzQcHaftu5wGL70=
Subject key identifier:   39:D3:D9:D3:DC:F2:AB:5C:8E:E1:F2:1D:39:86:13:BD:92:58:70:F8
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       018864B10CF322A1C4B0354236A295055C8E
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/OdPZ09zyq1yO4fIdOYYTvZJYcPg.roa
Signing time:             Sun 28 May 2023 23:28:24 +0000
ROA not before:           Sun 28 May 2023 23:28:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        77.81.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 May 2023 17:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:64:b1:0c:f3:22:a1:c4:b0:35:42:36:a2:95:05:5c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: May 28 23:28:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39d3d9d3dcf2ab5c8ee1f21d398613bd925870f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:7e:5a:46:62:4d:3b:01:88:dc:18:ee:27:
                    a0:e8:0f:da:87:81:2f:e2:c6:b1:1b:cb:c3:03:44:
                    61:5b:cc:b5:16:05:41:28:48:bb:07:46:3f:6b:47:
                    a3:e6:3b:37:49:68:50:3e:cf:0e:12:77:d3:b3:54:
                    cf:07:8b:05:59:4a:9c:78:bf:86:04:83:42:35:12:
                    b4:ee:b4:8a:b2:c5:75:8e:59:bc:38:ee:d0:99:de:
                    a8:5f:87:e9:9b:c6:6b:53:ae:a1:8b:16:28:b4:90:
                    9b:24:ff:bf:da:92:e9:b9:f1:d7:2e:73:7c:b5:e5:
                    42:b4:30:25:1f:fb:fe:ff:23:50:61:76:9e:64:45:
                    55:6e:59:ce:f4:38:0c:94:c0:10:25:8d:de:8e:9b:
                    87:8e:d3:c0:f9:3c:dc:8d:69:93:33:71:bf:9d:f5:
                    01:da:39:df:70:8d:2c:5c:9c:3e:5d:8f:52:26:0b:
                    71:c0:10:e6:00:d6:8f:c2:11:2a:d7:a7:1f:e5:5e:
                    a7:30:a4:b7:71:1c:93:e0:b6:ab:bf:45:84:fc:1a:
                    e0:73:16:11:e2:16:8a:0a:40:55:23:8b:0f:15:79:
                    71:a7:07:6e:e7:87:d6:25:1a:98:53:83:cc:90:20:
                    0f:9c:63:24:25:56:58:f5:fe:6c:fc:30:94:e9:c4:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D3:D9:D3:DC:F2:AB:5C:8E:E1:F2:1D:39:86:13:BD:92:58:70:F8
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/OdPZ09zyq1yO4fIdOYYTvZJYcPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:de:51:30:66:7a:e4:8f:f0:97:ef:78:5f:ea:0d:71:27:
         96:c9:e2:d6:cb:c3:4f:e5:9b:b2:26:98:94:38:76:18:c3:5e:
         d9:34:68:37:e8:d4:2d:57:b4:3a:8e:43:da:97:fb:b4:64:3f:
         b3:fe:d2:91:f5:b8:f2:aa:a1:e4:5e:78:2c:1c:1b:ba:c2:54:
         13:b3:20:6b:f4:4e:51:1e:9d:83:5c:30:88:91:e9:4e:60:cb:
         10:a4:bf:3e:a3:5a:66:7b:1f:35:bc:74:fc:0d:c8:34:96:82:
         27:20:83:27:0a:93:4c:6e:8b:01:bd:2f:7d:40:22:21:4e:28:
         38:77:45:26:5f:e6:43:8e:b1:b7:c3:55:7b:e2:2a:5d:ff:23:
         01:ec:50:87:9e:89:61:a9:de:46:36:97:a2:10:9f:2e:b3:8b:
         fb:f9:af:79:05:01:75:e8:e7:10:2b:84:49:cb:5a:cc:76:89:
         6a:a3:f9:98:41:67:01:7f:12:c7:e8:76:7f:c7:85:07:79:76:
         e0:ef:4f:b1:c8:10:80:d2:9d:7f:dd:ff:09:d4:4a:23:ad:86:
         a6:92:f6:5b:a9:97:5a:48:30:90:bc:04:9d:77:c6:3c:3e:ad:
         da:3d:82:be:8c:cf:e1:87:c8:32:fb:f5:ae:a1:18:d2:28:c9:
         75:ec:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org