Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/DxiImWMuHpNJSUhx_ZrvbTwVboo.roa
File:                     DxiImWMuHpNJSUhx_ZrvbTwVboo.roa (raw, json)
Hash identifier:          YnW/BtZ3gnH2P0bo3WP7YHVV4URg6q8ryIquLL0nTu8=
Subject key identifier:   0F:18:88:99:63:2E:1E:93:49:49:48:71:FD:9A:EF:6D:3C:15:6E:8A
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       018C4B8B29733A1F8E7CA77C180DDF354929
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/DxiImWMuHpNJSUhx_ZrvbTwVboo.roa
Signing time:             Fri 08 Dec 2023 22:27:40 +0000
ROA not before:           Fri 08 Dec 2023 22:27:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209242
IP address blocks:        77.37.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:4b:8b:29:73:3a:1f:8e:7c:a7:7c:18:0d:df:35:49:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Dec  8 22:27:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f188899632e1e9349494871fd9aef6d3c156e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:f7:e3:7c:e1:ad:00:91:6e:9b:c9:b6:68:
                    6b:e5:16:15:42:68:b7:70:c7:64:bd:b5:43:8f:54:
                    43:2f:82:70:9d:de:3c:58:71:3a:9f:d3:fc:21:93:
                    a7:59:f4:6a:15:ee:cb:58:1c:c9:45:d3:56:51:71:
                    c1:15:fe:15:62:9e:90:6b:ee:6e:ff:b8:b8:38:ce:
                    a6:b5:7c:cf:3f:b9:25:0c:4e:a4:98:28:6c:85:19:
                    c8:b5:9b:18:1f:68:c6:7f:ec:b7:28:57:9c:18:ac:
                    fb:15:da:b3:f4:3d:a3:5f:e4:6f:f7:91:b3:ad:cf:
                    65:37:66:84:e9:11:1b:a6:fb:43:a1:d3:82:97:67:
                    fc:ec:64:d0:c0:82:d5:e3:ab:2f:09:3d:cd:67:30:
                    cb:7b:aa:f1:98:8f:a3:b6:f1:c5:87:5f:15:f9:fe:
                    7b:00:d3:91:0e:89:78:48:c0:14:be:ca:b6:fd:cd:
                    61:51:2e:d6:43:62:ca:c2:b7:83:53:1f:6a:63:34:
                    c7:af:e0:aa:b4:73:31:9e:34:c0:89:af:56:69:e1:
                    9c:db:cc:e3:58:3f:3e:6f:fb:23:b4:21:32:29:7d:
                    78:bf:e5:62:56:b0:b0:1b:eb:b2:53:be:9b:8f:ba:
                    87:8f:87:81:b0:80:e1:21:a7:55:e6:a9:63:96:c2:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:18:88:99:63:2E:1E:93:49:49:48:71:FD:9A:EF:6D:3C:15:6E:8A
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/DxiImWMuHpNJSUhx_ZrvbTwVboo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a8:6d:e0:43:1c:b3:60:2c:f8:61:ae:fd:d7:c0:3f:ea:e8:
         6c:81:3c:0e:24:83:d4:0a:c0:6f:0c:07:39:fb:23:0a:78:4a:
         fc:dd:d3:9a:50:45:29:92:65:b3:1f:e2:e1:03:d0:4b:c5:53:
         8d:a1:34:21:66:23:20:c6:d1:93:b5:33:58:71:56:bc:41:fa:
         4f:0f:af:0c:b5:9a:d3:a1:70:bb:b0:23:30:c7:68:d5:79:9f:
         35:25:84:42:1f:5d:59:eb:76:c9:a7:a5:00:40:59:6a:eb:c3:
         dd:b5:c5:39:58:7b:53:7e:21:a9:c7:b9:21:be:13:99:b7:d8:
         85:e4:f1:51:94:cc:4c:26:6b:43:57:49:40:f1:25:ba:21:57:
         ac:85:61:4c:9b:40:04:5b:0b:48:72:e4:84:ff:ef:97:cd:43:
         33:97:e3:cb:69:d4:a5:10:9b:9a:3f:b5:23:de:7d:48:62:49:
         3e:8c:72:20:82:ee:ce:25:90:9f:fa:53:34:2f:29:70:b9:ef:
         ef:e1:78:89:33:ca:ac:1d:21:cb:d1:e7:ed:fd:ad:1e:e1:18:
         17:19:01:31:2e:0c:8b:e2:10:49:cc:58:1d:66:d4:1f:38:04:
         30:e4:b8:4f:54:17:d3:3a:b7:8c:eb:31:7d:a6:ca:9f:4e:6e:
         d2:f0:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org