Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Yp77AJj5vwCfOYxYVIeEt7FRV1I.roa
File:                     Yp77AJj5vwCfOYxYVIeEt7FRV1I.roa (raw, json)
Hash identifier:          Qb8gYtJkDQbIGTJuFwuyuu3DhdGP4Ia4AKmNPNVodVU=
Subject key identifier:   62:9E:FB:00:98:F9:BF:00:9F:39:8C:58:54:87:84:B7:B1:51:57:52
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       018867D4E1A9C0E1E69596A15E82E0BFA6D6
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Yp77AJj5vwCfOYxYVIeEt7FRV1I.roa
Signing time:             Mon 29 May 2023 14:06:24 +0000
ROA not before:           Mon 29 May 2023 14:06:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209043
IP address blocks:        77.81.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:67:d4:e1:a9:c0:e1:e6:95:96:a1:5e:82:e0:bf:a6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: May 29 14:06:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=629efb0098f9bf009f398c58548784b7b1515752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:e0:ae:08:7b:5d:51:19:e6:e1:3b:72:85:
                    86:4b:a9:09:5b:7d:e0:19:f1:d0:20:cf:0e:45:ef:
                    8a:11:aa:5b:66:02:7a:00:b8:4b:9f:d8:5a:bb:40:
                    37:14:3f:20:b0:b0:28:64:63:38:37:d1:c4:4c:7a:
                    f9:16:76:dc:d6:9b:28:b7:b4:74:13:a0:e1:6b:61:
                    eb:39:92:c4:ec:23:b1:a6:ec:09:77:9b:99:fc:bc:
                    eb:0b:7a:f5:5a:68:46:c7:f3:10:3d:a2:1c:2c:6f:
                    a6:8f:e3:f3:b5:2b:02:92:60:71:d6:5d:a7:1e:54:
                    cc:62:d5:75:28:d1:f6:42:a3:47:fd:07:97:a9:e3:
                    7f:16:28:51:dd:79:d2:63:9b:0a:e8:0f:33:0c:92:
                    05:d6:e6:b7:71:1f:ce:0a:21:54:c2:ae:c3:ec:34:
                    f9:aa:68:d2:0e:bc:54:bb:68:db:72:ea:a9:d4:c6:
                    b0:03:e0:25:26:dc:1e:1a:7c:40:1a:9f:25:ef:5b:
                    0e:1e:a6:f9:f6:ac:5a:dd:d5:5c:ce:43:5e:a2:2b:
                    39:ff:f6:d1:f7:82:df:ea:fe:b7:a0:e4:06:21:8e:
                    be:6a:f0:bb:c4:72:98:41:f7:cc:bf:26:7f:88:3a:
                    35:eb:bf:91:76:28:2e:f1:fc:7b:8b:82:19:75:6e:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:FB:00:98:F9:BF:00:9F:39:8C:58:54:87:84:B7:B1:51:57:52
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/Yp77AJj5vwCfOYxYVIeEt7FRV1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:30:98:b6:d1:51:d1:c8:ea:a2:c2:e7:7f:01:7a:4a:9f:9c:
         34:3a:9a:42:96:63:3b:11:5b:8b:17:1b:25:5a:ad:1f:1a:05:
         97:0a:f6:51:39:72:15:3c:56:43:c8:c3:57:01:a7:da:5b:98:
         30:b4:88:3e:7f:ed:29:f9:e3:c3:11:39:66:63:b8:00:ae:d1:
         19:cc:e0:f5:c6:98:a2:5c:74:c1:d2:d7:21:7f:4d:3d:ab:30:
         84:56:1c:e7:ed:30:7f:ef:4e:93:10:92:9d:42:27:0e:50:76:
         7f:76:41:50:6d:b8:6a:63:94:1c:f8:90:29:1b:48:2f:d8:09:
         df:06:0e:ac:31:c7:10:48:cf:1a:8a:27:54:87:ff:2d:64:94:
         c4:72:2c:f5:4e:78:73:9d:d4:82:56:3b:3e:43:bd:5a:0b:0d:
         d8:35:6e:b8:d0:8f:87:00:d6:d7:e6:1e:e7:c9:b5:16:1a:63:
         39:74:89:44:0b:6f:25:22:5e:38:79:a8:cb:d1:62:f9:31:c1:
         38:6a:36:03:a3:e8:8a:54:c7:57:39:13:11:ba:66:f5:41:c0:
         70:07:ab:4d:1b:7d:3f:d6:e4:df:de:14:40:2d:55:69:a3:93:
         43:91:4d:43:ce:84:6e:db:e0:ab:e0:98:0b:98:05:25:a9:3d:
         6d:56:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org