Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/_gPhPStY0dpV4sg5wEqR-E55Tls.roa
File:                     _gPhPStY0dpV4sg5wEqR-E55Tls.roa (raw, json)
Hash identifier:          WeYCZVdxDGMBw7Lt1/zN/8AMaC8b65tsT4cfF9smJvY=
Subject key identifier:   FE:03:E1:3D:2B:58:D1:DA:55:E2:C8:39:C0:4A:91:F8:4E:79:4E:5B
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       01856D5D1C91DD7A91C21A55A3122D01A1DF
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/_gPhPStY0dpV4sg5wEqR-E55Tls.roa
Signing time:             Sun 01 Jan 2023 12:44:56 +0000
ROA not before:           Sun 01 Jan 2023 12:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        77.81.80.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:5d:1c:91:dd:7a:91:c2:1a:55:a3:12:2d:01:a1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Jan  1 12:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe03e13d2b58d1da55e2c839c04a91f84e794e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:5e:18:c3:0e:5e:24:89:e7:15:a5:0f:06:
                    85:fe:31:72:16:73:e5:90:1b:38:23:e9:12:23:80:
                    c8:02:4e:32:ed:8c:ee:8b:94:05:24:07:37:15:5f:
                    68:87:ad:c3:3e:43:95:d0:ae:1c:c2:c9:94:15:e7:
                    91:e6:72:67:67:d4:ba:84:a4:9e:6f:d1:84:e3:da:
                    5e:12:56:29:c1:45:4c:06:3e:6c:43:de:04:df:cd:
                    21:80:31:3e:8d:77:e5:4b:6c:10:61:fb:51:78:cc:
                    46:17:dd:21:66:27:fa:69:95:24:ea:f8:7b:b9:91:
                    56:09:a0:cd:f8:08:1b:6d:02:18:e9:4b:9a:71:bd:
                    19:2a:31:1b:b7:fb:a8:e2:fa:aa:86:b8:13:7c:1d:
                    f1:d8:64:76:d0:5e:71:70:f7:d3:b4:32:2b:1a:40:
                    ee:a4:55:be:af:49:48:a7:a4:12:c3:f5:49:a4:15:
                    0a:df:14:97:af:9c:2c:b0:e3:4e:95:67:e8:fe:87:
                    e6:0b:34:07:ad:7c:6a:9b:56:8a:f8:db:f7:4d:ca:
                    29:a4:7d:f1:58:51:57:20:51:be:a5:67:6f:d7:e5:
                    18:60:51:e6:88:93:0a:2c:d1:b5:68:a4:db:0b:ea:
                    03:8f:fa:19:f2:0a:b0:8e:1a:e3:12:bb:93:47:fd:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:E1:3D:2B:58:D1:DA:55:E2:C8:39:C0:4A:91:F8:4E:79:4E:5B
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/_gPhPStY0dpV4sg5wEqR-E55Tls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:b7:7a:32:2d:5b:99:cc:92:1a:0d:ed:83:d9:ed:aa:01:
         d6:f6:8d:a8:2a:b1:ec:68:14:4d:34:95:a7:a0:37:30:a2:6c:
         fc:5f:8d:d4:f2:f3:09:ca:31:30:c8:3c:26:72:49:ad:e0:93:
         1d:2a:5b:06:11:d0:ac:83:0c:35:1f:f1:39:cb:a8:ff:da:5f:
         1d:a2:90:f4:8b:2d:5e:f8:b0:5e:1f:fd:25:c6:42:7a:da:1c:
         66:3d:84:ab:e7:02:52:88:2b:cd:27:e8:f3:83:0d:fd:43:5b:
         e0:1f:99:ee:54:e9:68:51:45:35:0f:8a:4c:4e:e7:02:d5:89:
         90:98:fe:2e:8d:1d:4e:a3:09:9b:b0:c1:e4:c0:f5:b1:f7:5c:
         72:f5:c4:c4:a0:9b:30:03:f2:d7:32:81:e8:d2:7f:16:90:47:
         d7:d9:a7:d2:b0:2e:0d:ea:bf:bd:a1:c6:85:b5:e2:67:da:12:
         a8:85:4e:a8:6a:c1:49:16:37:72:17:00:80:5b:3d:da:f2:a2:
         5f:a3:cc:fa:20:e7:c8:30:32:82:1b:44:fc:96:ee:2c:43:92:
         3d:d1:be:47:d0:df:35:2e:6e:ee:f4:dd:0a:67:88:9e:b9:ca:
         47:81:05:ed:18:ff:a4:4d:b8:42:96:b3:53:c7:0b:a4:0e:20:
         46:33:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org