Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/pUlrNl9th-fXZtWml4PPpKi3ang.roa
File:                     pUlrNl9th-fXZtWml4PPpKi3ang.roa (raw, json)
Hash identifier:          hci+8BBLBNGBzcbEY7lOhf1QVdRsZansYRoni6IImt4=
Subject key identifier:   A5:49:6B:36:5F:6D:87:E7:D7:66:D5:A6:97:83:CF:A4:A8:B7:6A:78
Certificate issuer:       /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial:       018A78D09D8DE8690404EDF4096E24E2A906
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/pUlrNl9th-fXZtWml4PPpKi3ang.roa
Signing time:             Sat 09 Sep 2023 07:20:52 +0000
ROA not before:           Sat 09 Sep 2023 07:20:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216376
IP address blocks:        185.77.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Sep 2023 10:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:78:d0:9d:8d:e8:69:04:04:ed:f4:09:6e:24:e2:a9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
        Validity
            Not Before: Sep  9 07:20:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a5496b365f6d87e7d766d5a69783cfa4a8b76a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:e1:5c:f9:bc:f4:da:f6:24:62:bf:3e:ce:
                    9e:3f:0e:c0:91:b8:66:6f:46:77:5f:30:c0:cd:ee:
                    0e:02:8d:8a:59:48:ce:04:f2:b4:ed:43:2e:0b:a6:
                    b4:c9:ca:36:eb:d8:23:ac:d4:3c:00:e9:59:0a:57:
                    ac:01:9d:15:9b:58:30:6b:cc:3f:59:ab:96:94:51:
                    a6:b5:cf:0c:65:5f:a0:40:64:4b:b2:10:b8:c8:b9:
                    d5:c0:62:b6:eb:ff:f6:bb:99:84:32:92:92:83:68:
                    f3:2d:9c:a1:81:f5:5d:7e:d4:98:7e:c3:66:ac:45:
                    33:be:58:9c:16:69:84:77:d0:e7:2c:46:84:2d:c6:
                    8c:99:2f:a9:59:c0:95:2c:80:ca:cf:d5:6a:c0:ce:
                    49:d3:1a:03:12:39:04:f6:52:8a:24:1c:4f:29:76:
                    2b:e6:0c:dd:81:04:9d:fc:98:31:1f:b5:5d:37:4c:
                    c6:b0:7f:af:b3:ef:47:26:99:b4:ee:e0:49:76:af:
                    dc:80:7f:f9:71:73:19:77:e8:2a:cb:b7:ad:77:0a:
                    dd:56:df:7d:f1:16:22:51:c1:e0:68:51:15:91:c2:
                    4a:27:30:f1:de:e8:32:d7:25:1f:88:63:c3:9a:1c:
                    a8:75:19:33:b5:da:b9:51:98:d9:ac:85:57:dd:d9:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:49:6B:36:5F:6D:87:E7:D7:66:D5:A6:97:83:CF:A4:A8:B7:6A:78
            X509v3 Authority Key Identifier:
                keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/pUlrNl9th-fXZtWml4PPpKi3ang.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:e2:2a:ee:1b:80:ca:3b:2a:7f:20:68:cf:6a:c1:74:53:
         76:36:cd:5a:b2:95:11:45:9c:4a:f0:e1:76:d9:99:fd:39:17:
         25:d8:50:78:fd:c2:b5:69:5b:9c:f0:db:ef:8b:69:f2:a4:f5:
         33:f9:e8:25:be:2f:cd:f4:68:91:7d:01:91:9e:a7:45:2e:3c:
         98:e6:97:c5:bd:fb:14:41:41:71:8e:5f:2e:c9:4d:68:49:62:
         b4:26:d6:fc:2a:bc:5f:e2:04:34:d4:73:eb:7b:4f:b1:ea:ab:
         df:97:e0:5b:9c:42:be:5a:76:6e:43:85:36:e4:b8:a2:f4:77:
         31:e2:f6:14:67:d5:11:5c:7b:42:58:56:95:4b:36:16:74:85:
         37:2d:65:11:b2:cf:33:2c:6e:14:7c:8c:53:2c:32:9f:59:b9:
         a8:7b:0b:cb:15:38:85:d3:45:59:dd:b5:42:21:c7:9a:61:ad:
         9e:b5:83:27:23:3f:7f:fb:08:a0:06:79:43:62:ed:a8:c8:12:
         c1:ee:b4:33:fe:89:16:3b:67:00:9e:57:ab:43:1d:ef:78:42:
         a7:27:f3:7f:26:b0:a8:0a:b8:51:cc:b4:ea:d6:e9:19:0c:bc:
         8c:41:70:2f:23:da:66:e8:f3:77:89:90:03:98:6a:88:b7:17:
         99:32:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:09 2024 by rpki-client on console-fra.rpki-client.org