Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa
File:                     pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa (raw, json)
Hash identifier:          KFZVraD+kBY9SpCug3DmOJa7rWzxs2jtXDexdcBJn04=
Subject key identifier:   A6:DE:22:93:F3:CE:BB:97:3E:41:83:0A:7B:41:DE:1F:34:8A:67:47
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       018F4CD76915B831080C3969EA282D711410
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa
Signing time:             Mon 06 May 2024 07:38:56 +0000
ROA not before:           Mon 06 May 2024 07:38:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12334
IP address blocks:        77.26.0.0/18 maxlen: 18
                          77.26.64.0/18 maxlen: 18
                          77.26.128.0/18 maxlen: 18
                          77.26.192.0/18 maxlen: 18
                          77.27.0.0/18 maxlen: 18
                          77.27.64.0/18 maxlen: 18
                          77.27.128.0/18 maxlen: 18
                          77.27.192.0/18 maxlen: 18
                          83.165.0.0/18 maxlen: 18
                          83.165.64.0/18 maxlen: 18
                          83.165.128.0/18 maxlen: 18
                          83.165.192.0/18 maxlen: 18
                          91.116.64.0/18 maxlen: 18
                          91.116.128.0/18 maxlen: 18
                          91.116.192.0/18 maxlen: 18
                          91.117.0.0/18 maxlen: 18
                          91.117.64.0/18 maxlen: 18
                          91.117.128.0/18 maxlen: 18
                          91.117.192.0/18 maxlen: 18
                          92.53.192.0/19 maxlen: 19
                          178.60.0.0/18 maxlen: 18
                          178.60.128.0/18 maxlen: 18
                          212.51.32.0/19 maxlen: 19
                          213.60.0.0/18 maxlen: 18
                          213.60.64.0/18 maxlen: 18
                          213.60.128.0/18 maxlen: 18
                          213.60.192.0/18 maxlen: 18
                          2a00:bec0::/40 maxlen: 40
                          2a00:bec0:c800::/40 maxlen: 40
                          2a00:bec0:d000::/40 maxlen: 40
                          2a00:bec0:d800::/40 maxlen: 40
                          2a00:bec0:e000::/40 maxlen: 40
                          2a00:bec0:e800::/40 maxlen: 40
                          2a00:bec0:f000::/40 maxlen: 40
                          2a00:bec0:f800::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 13 May 2024 07:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:d7:69:15:b8:31:08:0c:39:69:ea:28:2d:71:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: May  6 07:38:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a6de2293f3cebb973e41830a7b41de1f348a6747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:8d:3e:3b:f6:c5:ea:c4:25:9f:f7:43:f0:
                    41:e1:c8:c9:94:60:38:f0:31:4e:a4:21:46:d5:98:
                    91:17:cc:fc:4b:14:90:8d:83:81:ae:f4:57:13:97:
                    b7:f1:bf:88:26:37:6f:df:b4:df:04:3b:d6:49:dc:
                    74:e6:7a:af:c5:fd:45:97:15:07:bc:c8:99:cf:7d:
                    32:96:38:40:52:07:81:5d:1e:2b:34:d7:c9:32:b3:
                    a9:51:12:1e:a5:ae:91:9a:1d:d5:1a:ff:d9:5a:d6:
                    37:d9:e1:95:63:a4:ef:30:21:b0:a8:34:f4:16:67:
                    29:b9:43:33:78:e6:51:36:7b:1a:5e:4c:a9:b0:6c:
                    78:fb:d4:19:73:71:39:60:65:4b:3f:14:19:ef:78:
                    c3:da:16:f5:12:11:2b:21:f2:59:b4:e7:d3:cf:96:
                    55:1f:c5:ec:da:cf:53:e7:16:d5:2c:96:fe:4f:cd:
                    18:2f:35:05:2a:d1:d6:84:17:71:d0:33:35:5c:28:
                    77:4c:ef:e0:64:ff:59:12:b6:b7:cf:47:16:44:d2:
                    a7:38:3d:1c:dc:e0:de:43:5b:57:df:ce:a5:7b:d7:
                    17:d6:01:57:b9:fb:f4:95:16:78:5c:42:a5:25:34:
                    fc:90:52:6f:f4:46:99:a7:f7:36:82:13:a3:a3:46:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DE:22:93:F3:CE:BB:97:3E:41:83:0A:7B:41:DE:1F:34:8A:67:47
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.26.0.0/15
                  83.165.0.0/16
                  91.116.64.0-91.117.255.255
                  92.53.192.0/19
                  178.60.0.0/18
                  178.60.128.0/18
                  212.51.32.0/19
                  213.60.0.0/16
                IPv6:
                  2a00:bec0::/40
                  2a00:bec0:c800::/40
                  2a00:bec0:d000::/40
                  2a00:bec0:d800::/40
                  2a00:bec0:e000::/40
                  2a00:bec0:e800::/40
                  2a00:bec0:f000::/40
                  2a00:bec0:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:48:05:6a:98:cb:d6:78:f1:54:1d:42:d6:26:bd:d2:60:7f:
         14:b3:2f:de:47:de:aa:cb:2b:fb:8c:dc:e3:52:45:72:04:85:
         ac:04:aa:4a:67:c3:74:1a:93:31:17:70:b0:3e:25:10:a4:c9:
         28:ab:83:96:60:04:57:39:77:e7:8e:62:cf:26:6f:71:70:01:
         12:9a:b3:d7:7f:c3:6e:f5:09:7f:f3:03:13:3e:4d:36:6c:0f:
         ba:1e:68:9f:40:60:ec:3f:2d:05:06:b2:53:5e:49:a3:c4:8c:
         06:02:4c:8e:ea:cd:1b:59:01:06:c6:d9:6a:f5:11:78:0a:4b:
         c0:b9:8a:86:a3:c2:9f:eb:5c:48:90:d7:94:c3:61:ca:48:54:
         c7:9d:62:51:e3:ee:0b:75:64:37:c8:c3:e6:61:f9:42:3e:7d:
         73:9c:d8:5e:2c:b6:11:26:8f:23:a1:43:ae:ce:6d:2d:19:55:
         2d:a4:fe:88:4e:3e:8d:22:99:a0:ea:9c:a1:4a:17:aa:03:e5:
         c9:48:ad:27:ed:a8:05:2e:f5:60:d2:61:9a:92:32:19:14:95:
         a5:5f:75:4e:ab:78:f3:7e:bb:c3:22:a2:3f:cc:47:83:3c:1b:
         0a:a0:8f:3a:09:98:ff:18:ff:23:e2:8b:ba:b6:55:4c:2b:e4:
         e0:79:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:59 2024 by rpki-client on console-ams.rpki-client.org