Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zP5bRA4cdP5qsk20OZstiGMqRJo.roa
File:                     zP5bRA4cdP5qsk20OZstiGMqRJo.roa (raw, json)
Hash identifier:          UNRBqUIayq0Ato23F0jW9AWOxiQg8aZ+sos2pBibHtE=
Subject key identifier:   CC:FE:5B:44:0E:1C:74:FE:6A:B2:4D:B4:39:9B:2D:88:63:2A:44:9A
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0186A852C126D18914A9010B5C74D9D9EBD7
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zP5bRA4cdP5qsk20OZstiGMqRJo.roa
Signing time:             Fri 03 Mar 2023 16:34:00 +0000
ROA not before:           Fri 03 Mar 2023 16:34:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44345
IP address blocks:        77.83.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a8:52:c1:26:d1:89:14:a9:01:0b:5c:74:d9:d9:eb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar  3 16:34:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ccfe5b440e1c74fe6ab24db4399b2d88632a449a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:ae:1d:ea:a6:e6:7c:30:ea:56:2b:43:29:
                    35:f5:cd:e9:a5:5f:b4:fb:c2:d6:bc:91:72:24:55:
                    26:5d:a3:84:81:61:4e:6e:00:88:a3:a4:2d:7f:19:
                    74:87:2c:f1:92:50:45:d6:dd:f3:1f:bf:d7:5d:2b:
                    fa:2c:00:a2:4a:18:c8:37:27:ff:17:3f:f8:1d:e6:
                    10:86:04:65:ba:b9:9a:f4:b7:d4:b6:8e:ec:93:14:
                    65:f4:4c:e9:6d:b6:0e:5b:dc:11:21:2a:1c:67:e0:
                    b0:5b:7f:9e:dc:4e:e7:16:1b:6d:4e:40:93:28:dd:
                    c5:de:6e:d0:a5:7c:a6:b5:d9:7d:42:38:1f:68:17:
                    83:b8:c2:1a:af:80:4d:dd:0e:7e:79:2f:fe:27:ed:
                    27:b1:2f:93:b3:80:17:cb:e0:82:ab:7e:d8:24:7e:
                    2f:86:0a:e0:99:cc:7a:8c:c0:b4:ee:b9:ab:ea:04:
                    7d:90:2c:d8:39:9a:05:a9:f6:e3:d9:3e:b0:30:1e:
                    78:c4:d9:d3:e2:06:ac:ca:e1:d3:33:a7:75:a1:80:
                    1a:b7:0f:02:54:3b:13:5f:96:b3:64:b9:e2:62:30:
                    0f:82:18:aa:49:27:96:91:22:dd:87:4b:6c:ce:34:
                    66:9b:eb:d5:6c:78:e7:eb:2e:e7:bc:c9:60:45:2f:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FE:5B:44:0E:1C:74:FE:6A:B2:4D:B4:39:9B:2D:88:63:2A:44:9A
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zP5bRA4cdP5qsk20OZstiGMqRJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:05:64:33:21:dc:4c:61:97:af:f2:74:b2:04:96:59:c3:55:
         48:0a:5d:5d:3d:79:a7:1e:0d:d9:3d:86:31:26:1e:f5:7f:9c:
         1f:1c:c5:21:6b:9f:ab:00:2a:75:2b:ae:47:76:2d:8a:71:1b:
         cc:9a:44:3d:66:bf:91:bb:38:a3:d2:5a:bd:f0:00:fe:c1:95:
         0c:39:62:01:4b:37:a0:d7:fe:29:8c:64:59:c8:1e:ee:55:06:
         80:5a:6c:f2:33:da:42:e9:9a:dd:27:fa:5a:ee:da:eb:c0:52:
         ca:dd:f6:ca:e0:2b:f9:c8:c2:b3:6b:20:db:09:9b:f7:f7:2c:
         d7:2c:bc:81:94:0d:0a:7f:e1:bf:f7:18:e8:7c:58:81:c4:83:
         1b:18:dd:d0:10:e3:85:09:8e:db:47:84:ec:ae:b5:4b:c8:14:
         2b:09:01:18:c1:b7:ae:82:57:29:c3:04:ed:c8:09:3f:ae:7c:
         e5:70:4b:e0:e6:e6:4e:fc:62:6b:46:84:8f:32:67:37:14:f4:
         da:17:f6:77:a4:f8:d2:d6:31:4a:b2:07:35:8b:f7:19:67:9f:
         e7:62:18:e5:e2:65:f6:99:ca:40:4e:7e:eb:9d:20:4d:95:42:
         3c:0d:f3:08:1d:34:43:f1:42:a1:c1:c0:ec:66:d4:99:73:43:
         7c:30:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org