Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/zzcGhp8iMi8dSSuxOngh_cSGFI4.roa
File:                     zzcGhp8iMi8dSSuxOngh_cSGFI4.roa (raw, json)
Hash identifier:          oDCkl00JC8aeqHyDGQqYZMkZWAYFviCxdwjMFZ/s5ZQ=
Subject key identifier:   CF:37:06:86:9F:22:32:2F:1D:49:2B:B1:3A:78:21:FD:C4:86:14:8E
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       01885FDCDE14444D62C4590D376CF59E1871
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/zzcGhp8iMi8dSSuxOngh_cSGFI4.roa
Signing time:             Sun 28 May 2023 00:58:10 +0000
ROA not before:           Sun 28 May 2023 00:58:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.81.77.0/24 maxlen: 24
                          77.81.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 May 2023 23:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5f:dc:de:14:44:4d:62:c4:59:0d:37:6c:f5:9e:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: May 28 00:58:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf3706869f22322f1d492bb13a7821fdc486148e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:ea:55:1b:75:21:1a:38:a6:83:f7:f6:a5:
                    f8:41:70:1a:00:4a:70:9b:ff:33:7b:b9:0d:db:3f:
                    e2:8e:80:15:10:a7:e0:d0:28:0f:b1:36:29:38:07:
                    6f:81:2c:88:ea:75:c6:81:ee:58:1d:1e:44:d9:61:
                    28:b1:6e:06:df:28:cf:ed:54:1c:98:da:d3:f1:ae:
                    15:3b:cd:97:3d:d4:66:5b:83:d3:4a:f7:62:c7:ff:
                    ca:9d:8a:a9:23:3d:0d:45:be:a9:1e:39:6f:b6:55:
                    d2:fd:94:ac:b7:7d:cd:b0:6a:b5:0d:63:f9:b1:93:
                    f3:91:be:8e:a3:8d:cf:29:3c:4c:f7:50:a2:ad:e1:
                    46:99:d8:04:20:08:df:be:77:db:d9:75:e5:0f:ed:
                    18:91:b0:5a:9d:93:55:e8:96:d6:f2:b8:fa:78:11:
                    83:53:f5:a9:49:38:96:d3:38:24:10:1f:b5:cd:3e:
                    bc:25:23:c9:4f:cc:3a:26:93:df:d0:53:6d:1b:e4:
                    f9:e6:b4:1c:ab:7d:d0:a4:1d:b5:91:24:2b:06:b5:
                    6d:23:94:62:25:05:dd:ba:b3:23:45:9b:f5:27:3c:
                    f3:20:b6:82:2d:24:6e:32:c2:a9:5f:5f:af:dd:78:
                    e8:74:0f:84:08:2a:1d:c7:eb:97:83:d3:b1:bd:07:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:06:86:9F:22:32:2F:1D:49:2B:B1:3A:78:21:FD:C4:86:14:8E
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/zzcGhp8iMi8dSSuxOngh_cSGFI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.77.0/24
                  77.81.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:fe:df:eb:8e:ec:57:56:9d:a4:22:76:33:dd:ab:92:26:
         d6:61:b5:e6:74:e2:bd:d7:de:a8:da:88:a7:1a:5f:48:f8:9a:
         f6:5e:4b:45:f9:0c:d7:98:4a:06:82:9d:3e:26:cd:c6:7e:21:
         81:2b:af:e1:6b:54:7d:89:e1:97:71:64:f3:c2:26:b3:f3:05:
         0c:af:96:99:19:29:37:4a:6e:b5:60:28:a2:18:84:d2:7b:ea:
         97:77:2d:ff:d6:34:17:b8:04:e4:3c:8a:f9:45:7f:40:99:c4:
         34:2d:a3:46:59:10:35:e7:41:e8:c6:ee:2a:fc:db:03:10:92:
         26:69:ec:1e:60:bc:6b:e3:66:55:4c:fb:0a:fc:84:39:f2:55:
         3d:81:49:75:e1:39:ce:de:ea:f2:a1:b1:30:f9:b6:e8:d4:48:
         12:69:ca:be:09:2e:10:15:73:b0:40:2f:29:83:07:73:dd:55:
         7e:d5:51:8b:1b:fd:76:ab:b7:e9:e4:b9:1a:9d:6b:1c:26:b7:
         ee:7e:ec:0f:c1:e9:d0:e9:ac:68:6d:db:d5:40:5a:f4:6c:11:
         a8:80:7c:4a:28:2d:5b:96:d7:a5:e4:a0:e9:24:b8:a0:ab:1a:
         3e:f6:c9:e4:c1:ae:f5:2e:09:b8:64:28:35:be:86:c2:71:9e:
         53:85:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org