Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/ifLPfFmut20gEi04rD43WI6ELxA.roa
File:                     ifLPfFmut20gEi04rD43WI6ELxA.roa (raw, json)
Hash identifier:          m06G/nt2bAaIWhZ5nDGl/r3Svpdn7weFqtaWHdsex54=
Subject key identifier:   89:F2:CF:7C:59:AE:B7:6D:20:12:2D:38:AC:3E:37:58:8E:84:2F:10
Certificate issuer:       /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial:       01894BBFD96174CFB6D5CD1C6ECCD084F360
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/ifLPfFmut20gEi04rD43WI6ELxA.roa
Signing time:             Wed 12 Jul 2023 20:16:51 +0000
ROA not before:           Wed 12 Jul 2023 20:16:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51961
IP address blocks:        77.105.166.0/24 maxlen: 24
                          77.105.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4b:bf:d9:61:74:cf:b6:d5:cd:1c:6e:cc:d0:84:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
        Validity
            Not Before: Jul 12 20:16:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89f2cf7c59aeb76d20122d38ac3e37588e842f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:84:29:97:dc:ec:1d:29:18:17:01:2a:7f:
                    eb:99:9e:c5:06:4b:df:c7:a7:b9:80:17:a1:b9:96:
                    f1:0b:6b:13:6c:5f:f1:b2:33:21:ea:a7:2c:af:ee:
                    a4:6c:60:be:53:7a:21:ec:8b:29:71:e6:32:b6:84:
                    38:af:84:50:2e:12:99:4d:9f:eb:ac:75:e4:80:8e:
                    6c:64:92:01:4b:f0:50:ad:34:31:6f:5a:9d:f9:a7:
                    d8:bf:88:25:1b:57:42:bb:d4:d8:58:99:33:30:1b:
                    77:99:89:ae:9a:52:c6:31:8d:92:28:37:c7:99:3d:
                    68:fb:83:cd:54:bd:80:48:ee:ce:68:1f:46:7d:fd:
                    28:a7:40:aa:e3:f6:b7:e5:8c:6f:db:b3:0f:f8:09:
                    1f:78:b1:84:ca:8c:af:7b:d1:28:37:40:de:c1:c0:
                    ad:2d:be:6d:86:18:fc:62:c7:69:c1:53:d7:6e:7b:
                    3d:21:c1:18:95:4a:18:c1:07:21:0a:72:f6:73:af:
                    9a:04:db:b9:5b:6f:54:75:05:78:e3:a4:39:aa:eb:
                    20:ae:38:35:13:5c:90:e5:65:99:65:f8:1d:44:ea:
                    e6:36:71:5b:86:c9:91:f1:5b:c0:47:a4:f9:b5:9f:
                    ca:9a:fe:e6:a4:d3:4e:48:b2:32:b2:0c:5b:5f:41:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:CF:7C:59:AE:B7:6D:20:12:2D:38:AC:3E:37:58:8E:84:2F:10
            X509v3 Authority Key Identifier:
                keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/ifLPfFmut20gEi04rD43WI6ELxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:ad:4f:51:54:60:e7:4f:db:06:9a:25:3d:bc:3d:58:a7:
         ff:17:c5:ea:1a:b1:eb:42:be:33:7c:f1:3b:49:00:8e:69:9b:
         de:0f:31:91:07:5a:fc:e0:e7:6e:5a:7f:b7:c4:16:80:8a:8b:
         44:ff:5e:84:56:de:13:09:a3:49:8d:a6:eb:35:e1:a2:cb:e5:
         bf:6d:52:1c:16:b5:fc:36:9e:87:b9:64:26:66:16:bd:aa:26:
         4f:51:37:a2:b7:b8:a7:93:73:4f:e6:c2:50:aa:28:da:a9:65:
         6c:1d:12:af:74:91:ed:72:42:21:1d:37:21:23:25:7a:cc:1f:
         03:eb:bd:dd:8e:e0:59:b5:4f:c2:90:a3:76:67:f7:10:f1:d4:
         a4:90:32:44:9c:f8:f5:db:d2:a0:54:50:50:66:5f:cd:02:21:
         1f:4e:18:0d:9d:21:0a:48:4d:a5:ee:23:88:fc:39:77:e6:24:
         5b:eb:f2:7f:12:06:2d:9e:65:f6:c9:8d:8a:fc:31:fc:db:09:
         8e:49:64:84:8f:1c:d4:71:13:21:e5:31:1c:ee:a6:48:e9:88:
         46:fa:95:a9:b0:12:fe:f8:81:e4:1e:c4:9b:88:90:ec:27:60:
         61:71:83:4c:7b:be:ff:d7:c5:0c:15:99:2e:e0:6d:a1:02:09:
         77:1c:38:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlLv9lhdM+21c0cbszQhPNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjMwNzEyMjAxNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWYyY2Y3YzU5YWViNzZkMjAxMjJkMzhhYzNlMzc1ODhlODQyZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXaEKZfc7B0pGBcBKn/rmZ7FBkvf
x6e5gBehuZbxC2sTbF/xsjMh6qcsr+6kbGC+U3oh7IspceYytoQ4r4RQLhKZTZ/r
rHXkgI5sZJIBS/BQrTQxb1qd+afYv4glG1dCu9TYWJkzMBt3mYmumlLGMY2SKDfH
mT1o+4PNVL2ASO7OaB9Gff0op0Cq4/a35Yxv27MP+AkfeLGEyoyve9EoN0DewcCt
Lb5thhj8YsdpwVPXbns9IcEYlUoYwQchCnL2c6+aBNu5W29UdQV446Q5qusgrjg1
E1yQ5WWZZfgdROrmNnFbhsmR8VvAR6T5tZ/Kmv7mpNNOSLIysgxbX0FU5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFInyz3xZrrdtIBItOKw+N1iOhC8QMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvaWZMUGZGbXV0MjBnRWkwNHJENDNXSTZFTHhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTWmmMA0G
CSqGSIb3DQEBCwUAA4IBAQChnK1PUVRg50/bBpolPbw9WKf/F8XqGrHrQr4zfPE7
SQCOaZveDzGRB1r84OduWn+3xBaAiotE/16EVt4TCaNJjabrNeGiy+W/bVIcFrX8
Np6HuWQmZha9qiZPUTeit7ink3NP5sJQqijaqWVsHRKvdJHtckIhHTchIyV6zB8D
673djuBZtU/CkKN2Z/cQ8dSkkDJEnPj129KgVFBQZl/NAiEfThgNnSEKSE2l7iOI
/Dl35iRb6/J/EgYtnmX2yY2K/DH82wmOSWSEjxzUcRMh5TEc7qZI6YhG+pWpsBL+
+IHkHsSbiJDsJ2BhcYNMe77/18UMFZku4G2hAgl3HDhl
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net