Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6jeQuhIUmiOs10JxdmHHPmME9Es.roa
File:                     6jeQuhIUmiOs10JxdmHHPmME9Es.roa (raw, json)
Hash identifier:          D/KbvMDREyKjXb/PrtzljxhZiSHXkTy8s+OG18x1ifA=
Subject key identifier:   EA:37:90:BA:12:14:9A:23:AC:D7:42:71:76:61:C7:3E:63:04:F4:4B
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019248B92F5BD8A38D4078011D0300A891E5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6jeQuhIUmiOs10JxdmHHPmME9Es.roa
Signing time:             Tue 01 Oct 2024 15:35:48 +0000
ROA not before:           Tue 01 Oct 2024 15:35:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        77.90.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 04:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:48:b9:2f:5b:d8:a3:8d:40:78:01:1d:03:00:a8:91:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Oct  1 15:35:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea3790ba12149a23acd742717661c73e6304f44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:68:83:0a:da:e2:a2:32:90:00:cf:45:63:
                    fa:4a:1b:64:86:bf:52:d2:8d:06:c0:bf:0e:6f:ba:
                    29:c1:c9:66:33:4a:99:20:f0:18:96:57:ea:46:8d:
                    d3:62:89:05:20:6c:f0:18:ee:af:0e:a5:84:0b:2d:
                    9b:9e:fe:4a:28:b2:95:5c:b5:ca:d5:ac:9f:3c:8e:
                    80:0c:40:44:1c:17:b8:ad:d0:85:a5:56:ae:16:41:
                    e4:0e:b2:75:cd:a5:46:1f:53:cf:93:ac:54:05:4c:
                    36:3a:d1:be:c0:cc:a6:1b:17:93:36:e3:31:6d:68:
                    c1:92:cf:5b:22:b5:f9:e4:63:81:2c:3b:cb:4a:a3:
                    41:6b:be:41:62:60:49:ae:35:29:65:cd:3d:3f:8d:
                    c6:77:48:7d:a3:36:3d:07:1c:46:b9:20:28:5e:5b:
                    f0:25:eb:ce:ce:fd:d8:55:2a:74:fa:2b:63:c5:7c:
                    20:d4:42:e9:87:5a:76:ae:da:d0:15:c8:23:37:07:
                    d5:39:f9:63:46:79:5c:77:15:d7:5b:25:59:c7:46:
                    6b:f8:0f:9a:de:e4:aa:d9:73:10:12:30:7c:44:88:
                    a1:d2:64:ad:e5:b9:62:15:0f:b3:60:b3:e6:f1:31:
                    a9:71:51:64:48:94:e1:7c:96:2b:97:bf:38:53:7a:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:90:BA:12:14:9A:23:AC:D7:42:71:76:61:C7:3E:63:04:F4:4B
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6jeQuhIUmiOs10JxdmHHPmME9Es.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:59:a2:00:2b:91:62:0e:f8:cd:b0:d2:9e:88:5d:18:c4:e4:
         e1:7c:c4:fe:4d:bb:a5:af:75:97:14:a6:21:06:56:72:4e:e0:
         f7:71:7c:3a:69:17:41:4b:f3:c9:cb:3a:e3:6f:29:a8:cd:bf:
         cd:82:30:15:cb:37:37:09:d6:6f:94:50:b5:4d:fd:22:3d:26:
         cf:fb:c1:12:a0:9e:aa:75:4a:ed:25:1a:42:88:96:d6:12:e9:
         65:87:f0:30:95:8c:83:00:0d:99:2f:f8:1e:ee:46:bb:fd:a8:
         b5:73:50:4d:f3:ee:95:1b:0a:fc:15:b1:6f:28:ba:42:3d:17:
         e8:37:1e:9c:04:1a:04:bf:c2:25:5e:da:9a:ed:38:12:ea:c2:
         2c:15:51:41:f0:9d:57:e1:ef:13:fd:ed:e8:c5:96:63:3f:4b:
         65:db:9a:e7:43:d4:c6:79:5b:31:ae:e8:e4:00:d9:f1:9e:30:
         2f:34:e3:bb:ef:d7:55:53:df:a6:2d:30:69:ff:ee:41:94:f8:
         9f:d6:f4:68:72:27:33:59:9f:86:fe:44:cf:04:05:07:4e:7d:
         41:bc:97:64:29:66:79:d5:1b:ec:73:7e:26:c1:fd:14:a8:2f:
         95:1a:d8:46:03:98:cc:fb:88:f1:bd:c3:13:c4:4c:aa:87:7e:
         b6:6e:92:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJIuS9b2KONQHgBHQMAqJHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDAxMTUzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTM3OTBiYTEyMTQ5YTIzYWNkNzQyNzE3NjYxYzczZTYzMDRmNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oZogwra4qIykADPRWP6Shtkhr9S
0o0GwL8Ob7opwclmM0qZIPAYllfqRo3TYokFIGzwGO6vDqWECy2bnv5KKLKVXLXK
1ayfPI6ADEBEHBe4rdCFpVauFkHkDrJ1zaVGH1PPk6xUBUw2OtG+wMymGxeTNuMx
bWjBks9bIrX55GOBLDvLSqNBa75BYmBJrjUpZc09P43Gd0h9ozY9BxxGuSAoXlvw
JevOzv3YVSp0+itjxXwg1ELph1p2rtrQFcgjNwfVOfljRnlcdxXXWyVZx0Zr+A+a
3uSq2XMQEjB8RIih0mSt5bliFQ+zYLPm8TGpcVFkSJThfJYrl784U3ryHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOo3kLoSFJojrNdCcXZhxz5jBPRLMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNmplUXVoSVVtaU9zMTBKeGRtSEhQbU1FOUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVo0MA0G
CSqGSIb3DQEBCwUAA4IBAQDGWaIAK5FiDvjNsNKeiF0YxOThfMT+Tbulr3WXFKYh
BlZyTuD3cXw6aRdBS/PJyzrjbymozb/NgjAVyzc3CdZvlFC1Tf0iPSbP+8ESoJ6q
dUrtJRpCiJbWEullh/AwlYyDAA2ZL/ge7ka7/ai1c1BN8+6VGwr8FbFvKLpCPRfo
Nx6cBBoEv8IlXtqa7TgS6sIsFVFB8J1X4e8T/e3oxZZjP0tl25rnQ9TGeVsxrujk
ANnxnjAvNOO779dVU9+mLTBp/+5BlPif1vRociczWZ+G/kTPBAUHTn1BvJdkKWZ5
1Rvsc34mwf0UqC+VGthGA5jM+4jxvcMTxEyqh362bpJA
-----END CERTIFICATE-----
Generated at Fri Oct 11 07:28:40 2024 by rpki-client on console-fra.rpki-client.org