Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Mdtv-LSib7QCXXVt069hSdb9UYw.roa
File:                     Mdtv-LSib7QCXXVt069hSdb9UYw.roa (raw, json)
Hash identifier:          Np+mSTcWiH+wqUI+JhM9M5KkdoTYH8mODF7OqPaC5AY=
Subject key identifier:   31:DB:6F:F8:B4:A2:6F:B4:02:5D:75:6D:D3:AF:61:49:D6:FD:51:8C
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       018C4B91923C6CAAFD02363E6BF5E1DD1C88
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Mdtv-LSib7QCXXVt069hSdb9UYw.roa
Signing time:             Fri 08 Dec 2023 22:34:40 +0000
ROA not before:           Fri 08 Dec 2023 22:34:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31736
IP address blocks:        77.37.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:4b:91:92:3c:6c:aa:fd:02:36:3e:6b:f5:e1:dd:1c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Dec  8 22:34:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31db6ff8b4a26fb4025d756dd3af6149d6fd518c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:f4:9e:f4:8f:b8:e3:c2:57:3b:fa:6a:60:
                    f2:de:0a:9f:d3:07:f6:ce:78:0d:0b:2a:40:0f:61:
                    c2:3e:61:9b:ea:9c:29:89:45:39:63:94:89:5c:f7:
                    b9:14:49:78:c7:e1:9d:00:37:af:83:53:92:01:80:
                    d1:fa:43:86:2f:71:c9:d8:92:69:62:b1:18:66:1f:
                    77:5f:3d:aa:64:7b:9c:e2:54:7d:af:83:c7:e0:cd:
                    c2:ce:a3:71:e4:4f:09:dd:12:66:a9:4b:52:60:8a:
                    41:1f:fe:f5:50:79:63:81:ab:bb:b7:1b:56:06:51:
                    e8:dd:7e:21:6b:55:f4:62:08:61:7c:24:2f:cd:df:
                    51:76:12:dd:4e:36:55:a2:c2:e3:60:4d:45:11:f8:
                    e8:43:82:c8:6e:b4:35:a6:b2:23:22:96:d5:11:02:
                    c4:0e:6f:38:de:c5:21:80:3f:91:b7:19:5c:24:05:
                    a2:37:09:c7:a7:81:81:5d:1c:60:11:5d:1b:c2:6b:
                    e4:40:99:63:a4:c7:a3:ef:be:f0:46:77:0d:db:be:
                    dc:af:22:0c:fd:8e:49:27:5b:e0:02:20:24:ca:2c:
                    5b:4e:18:21:51:6f:04:4b:1a:78:ff:57:3b:2e:74:
                    c0:b3:e8:56:2f:32:07:bf:2b:ac:8b:4e:d0:9a:95:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DB:6F:F8:B4:A2:6F:B4:02:5D:75:6D:D3:AF:61:49:D6:FD:51:8C
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/Mdtv-LSib7QCXXVt069hSdb9UYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:71:c8:3e:5d:6a:06:fe:cc:a2:60:dd:06:5f:ea:0f:63:0c:
         8b:41:cd:e7:23:5a:9e:9d:ba:24:a8:14:24:ce:02:68:e2:00:
         e9:18:dc:23:97:0d:18:fe:36:cb:2e:3a:49:20:5d:bb:5d:75:
         1e:93:ce:67:4c:e1:ff:8c:f0:2f:ae:c6:55:2b:89:a4:a8:79:
         79:ce:48:45:18:22:0c:ba:51:79:66:17:f5:5e:80:03:3d:5c:
         73:d3:a5:01:a0:42:f5:22:66:8b:48:cc:80:3a:c6:58:df:d3:
         79:96:09:72:11:54:87:f5:55:05:0e:8b:4f:17:43:96:20:2d:
         f8:b2:2e:b9:a9:37:2c:3b:09:11:05:55:56:81:ee:04:fa:00:
         19:af:5f:73:f3:1e:f2:52:79:68:f5:32:cc:6e:72:37:1d:ab:
         27:7f:d9:32:92:96:2d:38:f2:6d:06:b1:4d:e2:6e:ec:3e:c5:
         b9:2f:f3:22:a7:8f:1a:e9:c6:85:55:6a:dd:80:b1:62:53:ab:
         7d:64:b8:20:a6:ad:6e:78:db:ee:51:33:41:e0:3c:3a:1f:96:
         70:62:81:b1:db:f9:ae:c8:bd:5a:34:53:a6:3d:45:d8:6a:2a:
         59:1b:89:59:78:3b:50:c5:86:c6:73:df:06:36:54:aa:72:e8:
         2e:63:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org