Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xRqGbnKChrvhZqhZKI6EtXwfrfs.roa
File:                     xRqGbnKChrvhZqhZKI6EtXwfrfs.roa (raw, json)
Hash identifier:          I0vQLY4HhJq0POU6goJA/RaSDn2YesmfBj9Xd//xCCs=
Subject key identifier:   C5:1A:86:6E:72:82:86:BB:E1:66:A8:59:28:8E:84:B5:7C:1F:AD:FB
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0186A852C04A0725A6909A361CD668601E67
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xRqGbnKChrvhZqhZKI6EtXwfrfs.roa
Signing time:             Fri 03 Mar 2023 16:34:00 +0000
ROA not before:           Fri 03 Mar 2023 16:34:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35119
IP address blocks:        77.83.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a8:52:c0:4a:07:25:a6:90:9a:36:1c:d6:68:60:1e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar  3 16:34:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c51a866e728286bbe166a859288e84b57c1fadfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c4:84:08:9a:9c:c9:77:d1:19:ea:7d:26:db:
                    c7:f1:77:ce:8b:18:23:07:f7:5a:2b:4a:4c:ab:83:
                    b0:ad:59:e9:97:d7:31:d7:69:43:a8:12:f7:27:cc:
                    71:3f:b0:01:81:59:ac:cb:a4:57:c7:15:90:63:ef:
                    a1:dd:fc:91:da:82:f4:68:5f:ad:12:5d:32:4e:01:
                    f3:2b:66:fc:5e:32:a9:42:0d:75:aa:60:6f:d5:8e:
                    0e:a7:6e:c8:49:3b:d0:54:26:4a:52:7a:ed:12:2a:
                    26:d5:4f:15:05:99:9f:d9:b6:3d:4c:d1:08:f7:44:
                    79:37:c2:37:da:00:9f:34:2a:cc:37:69:9a:1c:62:
                    66:5a:4d:ea:98:6d:c4:96:65:c7:bb:eb:fb:2b:bb:
                    8d:33:5c:4c:cf:5f:96:40:c8:3b:5e:ad:aa:76:1a:
                    4f:81:72:b9:96:b4:dc:27:a8:27:23:e5:93:87:cc:
                    1c:9e:81:06:91:d3:9c:27:3d:63:17:69:56:05:6b:
                    4f:df:9f:10:66:b5:ce:cd:2c:22:b4:14:ec:31:40:
                    d9:30:cf:df:4a:a8:52:ed:25:40:1d:13:e9:35:54:
                    c0:da:ff:f0:cd:0a:b1:5f:09:55:20:f3:d8:8a:6e:
                    1c:2e:b7:3b:5f:03:8c:80:bd:33:9e:29:61:09:59:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1A:86:6E:72:82:86:BB:E1:66:A8:59:28:8E:84:B5:7C:1F:AD:FB
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xRqGbnKChrvhZqhZKI6EtXwfrfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:66:e1:31:16:e9:ee:8a:46:5d:9b:ea:de:34:b3:5d:13:98:
         f4:14:10:9b:71:69:a0:94:a2:11:29:28:d6:a3:25:92:6f:6e:
         bb:42:50:89:ac:f5:bf:15:e0:f6:13:c9:1e:78:c1:3b:0a:52:
         bf:07:f9:9a:3c:2c:88:2f:48:bc:9e:f2:7b:f2:1f:35:f6:1b:
         2e:7e:b0:8b:d7:65:91:09:23:16:47:98:36:95:88:bf:75:ca:
         6c:34:81:2c:c0:96:d9:cd:a0:74:f6:2d:17:24:c9:b3:c3:5a:
         fe:68:e6:35:54:6f:53:44:61:fc:3e:e0:5d:97:2f:52:b3:08:
         9b:df:9e:af:3c:25:94:0e:52:95:ce:18:62:2e:d7:5a:57:29:
         80:a8:4f:35:22:24:36:08:0f:0a:d3:1c:3b:36:8f:b9:bf:f3:
         89:3b:f1:43:7a:ef:a3:09:9a:e6:df:11:a0:2a:cf:1a:08:9a:
         bd:88:6b:e0:f2:2d:43:db:72:57:72:47:64:f8:d9:23:01:c9:
         e1:99:23:7b:12:ee:b3:87:58:61:2b:69:13:27:37:83:2c:97:
         b9:78:64:6e:0e:4d:62:06:2a:b5:b2:a1:a3:4e:51:72:0a:b5:
         99:e0:b4:d5:01:06:b5:39:a3:c3:80:ce:bf:70:53:aa:d7:be:
         ed:40:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org