Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/dAUGqGLH2J8OsZUjoULYSgD46kM.roa
File:                     dAUGqGLH2J8OsZUjoULYSgD46kM.roa (raw, json)
Hash identifier:          bvTpXoTMt5wmm6e1Nf2dYGlSjPzhu6vogCt3/Vzs/JI=
Subject key identifier:   74:05:06:A8:62:C7:D8:9F:0E:B1:95:23:A1:42:D8:4A:00:F8:EA:43
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       018864B10C7F6FF5CA88C3416ED72CEB66C0
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/dAUGqGLH2J8OsZUjoULYSgD46kM.roa
Signing time:             Sun 28 May 2023 23:28:24 +0000
ROA not before:           Sun 28 May 2023 23:28:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.81.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 May 2023 17:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:64:b1:0c:7f:6f:f5:ca:88:c3:41:6e:d7:2c:eb:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: May 28 23:28:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=740506a862c7d89f0eb19523a142d84a00f8ea43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:e5:03:2f:06:9b:aa:d0:dc:e0:27:21:19:
                    ed:5e:46:04:09:45:8d:ab:91:fe:70:e5:f5:9c:73:
                    6a:7e:a0:cb:cb:65:21:b3:25:57:4c:53:85:ab:dc:
                    a8:86:8a:85:34:34:fe:f8:5f:93:fa:71:44:40:d7:
                    e3:d3:c6:40:4d:bc:d7:c8:14:76:c3:b9:36:67:00:
                    5d:24:8e:9b:bc:40:5e:2b:66:e5:4b:ce:7f:78:44:
                    bb:0f:17:de:e1:44:aa:bf:4e:ba:5a:b7:1e:45:89:
                    e7:94:81:8f:bf:57:9e:b5:df:86:6c:93:c9:cd:3f:
                    44:6b:11:de:00:22:25:88:b0:de:d2:1e:3a:c0:8b:
                    f0:6d:e5:00:d2:5e:3e:18:2a:ac:e7:09:bc:f2:2c:
                    4f:c7:a0:1c:86:27:32:7b:db:e2:9c:85:28:2e:11:
                    5d:96:1b:ff:7a:9d:92:86:a8:b3:f5:b4:7b:77:47:
                    5a:0e:16:91:68:54:3d:27:94:79:a4:7f:4c:61:ac:
                    ca:e8:88:fc:42:b2:9a:49:7e:cb:6e:fc:d4:f5:dc:
                    6b:8b:cb:45:f6:44:10:29:41:b8:2f:52:b6:5b:22:
                    c8:69:be:b5:77:09:03:b9:f4:eb:d2:e0:bf:7e:37:
                    c0:a9:00:44:83:c1:4d:71:9a:40:be:88:63:cb:e0:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:06:A8:62:C7:D8:9F:0E:B1:95:23:A1:42:D8:4A:00:F8:EA:43
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/dAUGqGLH2J8OsZUjoULYSgD46kM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:6d:88:8b:35:3f:15:fa:97:a1:47:f9:fe:5e:2d:f3:41:
         43:80:80:f3:c3:ff:aa:36:01:e5:75:8e:48:3b:48:43:c6:4e:
         21:d9:f2:a5:fc:6e:0c:22:6c:cc:ef:95:c4:e9:ac:e5:f4:b9:
         8f:54:cd:9f:50:45:57:4d:de:65:09:7c:90:d1:de:81:03:21:
         63:ac:f1:04:0f:87:3a:2a:48:1e:ba:6d:0e:c6:9a:ba:4c:6d:
         8b:c7:06:fe:36:94:a5:6b:ad:13:ce:5e:f2:38:99:b2:9f:28:
         34:e7:c1:d2:79:2f:02:f3:4f:db:33:b3:0b:70:cf:cf:e1:37:
         3f:ea:d7:cd:72:be:4e:7f:0d:8e:45:9f:c4:4f:90:4e:12:93:
         76:0e:40:58:d0:89:ee:fd:6c:6a:6d:20:50:f2:0e:58:ec:37:
         8c:3b:78:ee:c0:9f:60:c8:4b:42:66:29:43:7b:85:c1:b0:49:
         70:e0:af:fd:e7:72:a0:cb:32:b9:e9:d3:33:71:49:cb:5c:73:
         fe:14:4c:88:e7:f6:5e:44:c8:19:6c:3f:a9:d9:0a:00:c2:41:
         ff:3d:05:3c:87:5a:46:0d:c8:db:17:e8:cb:f2:72:8a:4a:03:
         62:f1:06:ae:2d:6a:3e:c1:02:c7:14:14:99:cd:b9:b8:22:a5:
         26:c3:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org