Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4tuuBnQVUdDlBDxDzdciF9tA4VA.roa
File:                     4tuuBnQVUdDlBDxDzdciF9tA4VA.roa (raw, json)
Hash identifier:          WxkubYGqCCJ1FTSIVNuKJFAy1g+TB7veV5mBHkxGA74=
Subject key identifier:   E2:DB:AE:06:74:15:51:D0:E5:04:3C:43:CD:D7:22:17:DB:40:E1:50
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0192E325DAC10EEDCB22D29BFADBB33091F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4tuuBnQVUdDlBDxDzdciF9tA4VA.roa
Signing time:             Thu 31 Oct 2024 15:16:01 +0000
ROA not before:           Thu 31 Oct 2024 15:16:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31025
IP address blocks:        77.90.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 05:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e3:25:da:c1:0e:ed:cb:22:d2:9b:fa:db:b3:30:91:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Oct 31 15:16:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e2dbae06741551d0e5043c43cdd72217db40e150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:d6:da:49:98:7a:71:5e:1a:dd:ae:72:93:
                    c4:47:86:f4:bf:0b:36:d9:84:6a:f6:d0:9a:7c:59:
                    95:52:1e:7c:7d:97:be:24:0f:73:9e:6d:a9:d7:cb:
                    54:6a:60:1a:27:19:25:b3:71:17:eb:36:69:56:38:
                    26:cf:92:2d:5f:26:8c:fe:f5:61:58:fd:e0:3f:c9:
                    78:10:d7:d4:06:98:d9:73:3f:80:c3:15:a6:7c:35:
                    5f:48:2d:89:41:0f:91:7c:3e:b9:aa:98:b4:35:17:
                    48:27:f4:04:d9:49:c9:84:f6:97:15:d8:fc:16:0e:
                    e3:7f:dd:8b:40:80:16:b1:4c:7e:b3:0f:68:fd:b1:
                    1a:78:b1:d9:03:09:94:c1:71:c5:80:09:7b:63:ad:
                    e6:05:f1:63:10:4d:b8:bb:ac:44:38:60:9c:6a:26:
                    89:bb:c7:d4:37:ff:40:79:a9:8d:3d:4f:f5:e1:8b:
                    39:a1:59:12:34:20:bb:bb:73:79:4c:61:70:31:4f:
                    06:83:3a:de:c6:d5:ff:3b:d9:7f:3e:3d:58:1a:4c:
                    79:95:bd:f9:2e:8d:77:1e:49:e9:64:7e:d0:26:d2:
                    4f:2f:39:ce:5f:52:26:7d:23:26:81:19:e7:11:78:
                    3f:53:d5:5b:dc:a9:b4:22:80:c9:5b:42:40:92:9e:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DB:AE:06:74:15:51:D0:E5:04:3C:43:CD:D7:22:17:DB:40:E1:50
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4tuuBnQVUdDlBDxDzdciF9tA4VA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:26:90:24:7f:45:13:4d:75:a2:3d:f6:02:95:34:a8:80:48:
         9e:77:68:00:a8:44:ac:f5:7f:de:17:47:e2:64:7e:da:35:9e:
         7e:fe:5e:e0:27:5e:f5:0c:31:68:84:f7:8a:1d:39:cf:90:c3:
         11:48:38:db:a6:4f:6d:40:92:2d:27:09:4f:f7:f3:19:e6:40:
         ee:41:ae:38:01:11:f3:2e:99:c7:78:e8:06:6f:32:5b:23:00:
         f0:c1:5a:96:c8:f0:6f:c6:a6:5c:5c:87:f9:7a:eb:8b:8c:72:
         a2:de:16:30:cd:39:bd:d8:68:fc:7c:2a:f6:38:dc:b0:14:8b:
         96:61:26:a9:5b:c8:48:dc:73:c4:2a:69:1b:0e:c6:c6:0b:3d:
         cf:69:f9:6f:b9:a2:89:8a:ba:33:71:ad:82:c3:e3:d0:77:66:
         c2:fa:83:83:7e:d5:30:e0:3d:4c:eb:68:3f:39:d5:4c:5c:11:
         0a:e7:2f:71:71:1c:a4:04:71:b6:0e:96:d1:fd:d1:37:ea:7c:
         bf:ac:6b:99:53:c4:0c:a5:d0:d9:18:e0:9c:a1:6d:a1:ed:35:
         dc:55:a5:54:ff:90:02:7b:0b:d4:88:12:b2:67:4b:e4:58:ca:
         48:6a:15:82:70:94:d8:4d:e2:c6:1f:0f:d5:7c:c3:4f:8a:89:
         87:be:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 08:23:40 2024 by rpki-client on console-ams.rpki-client.org