Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9C8Uy15XdrKb-8KyNq5OOimOr8Q.roa
File:                     9C8Uy15XdrKb-8KyNq5OOimOr8Q.roa (raw, json)
Hash identifier:          ZTLYykEEOGCEW2gdlWM06lu72EvbwheFPmB8qSsp2c8=
Subject key identifier:   F4:2F:14:CB:5E:57:76:B2:9B:FB:C2:B2:36:AE:4E:3A:29:8E:AF:C4
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0190F4AAAEEA15022841D17181D41B0F9367
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9C8Uy15XdrKb-8KyNq5OOimOr8Q.roa
Signing time:             Sat 27 Jul 2024 14:49:04 +0000
ROA not before:           Sat 27 Jul 2024 14:49:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215240
IP address blocks:        77.90.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 15:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:f4:aa:ae:ea:15:02:28:41:d1:71:81:d4:1b:0f:93:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jul 27 14:49:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f42f14cb5e5776b29bfbc2b236ae4e3a298eafc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:41:8b:0f:fa:70:ed:30:0b:e2:70:01:26:30:
                    fd:ae:36:02:a0:93:35:83:ad:c3:a6:09:49:fb:5a:
                    a2:d2:b7:49:86:af:04:ff:54:c7:63:d2:26:ae:c1:
                    bf:c9:5e:11:be:d4:b8:a4:14:48:a2:9a:5b:ac:3c:
                    7f:b3:37:a4:86:16:d0:d9:cc:8c:8f:6d:47:77:cb:
                    bb:77:72:a3:85:1f:bb:29:c8:fb:e9:6c:51:7f:70:
                    81:19:f9:63:34:02:68:b4:94:fd:e4:5a:e1:c3:6f:
                    c2:48:5d:b7:d2:b9:b7:ce:c0:59:e4:7b:a8:16:24:
                    ea:c1:81:0d:23:e5:6d:88:c1:d6:36:08:a0:27:1d:
                    50:7a:18:74:54:31:12:c3:48:f8:0c:4c:0d:20:f0:
                    98:39:12:af:d9:ae:59:2b:0c:01:a8:a0:62:d4:bd:
                    ad:74:99:60:ce:94:5d:f6:1e:30:c0:79:d3:b6:49:
                    0d:9b:b4:f8:c2:27:63:02:a7:72:03:d9:1e:bb:6a:
                    d6:56:7e:5a:51:be:68:e1:33:6b:d7:4a:b5:ac:92:
                    24:56:af:a2:95:5c:c1:38:c4:61:ef:fe:a1:5a:8f:
                    ec:bc:d1:32:2f:e9:d8:b9:c5:cc:e2:80:af:ef:80:
                    85:09:ce:50:00:ac:6b:c7:a5:8b:1d:03:50:2a:27:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2F:14:CB:5E:57:76:B2:9B:FB:C2:B2:36:AE:4E:3A:29:8E:AF:C4
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9C8Uy15XdrKb-8KyNq5OOimOr8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:fe:36:21:a7:95:68:35:6c:6b:11:d5:e6:ec:14:53:f9:
         e0:97:58:6f:a1:79:fe:0d:15:f2:ff:cf:fc:a4:55:cd:d2:51:
         e7:a9:a7:2a:f7:20:a8:17:05:27:79:d9:19:3f:6d:e1:44:80:
         40:9f:6c:32:0a:2f:4d:65:21:9a:9c:be:f1:20:8e:5a:80:84:
         1e:97:9f:fd:90:18:48:86:69:5e:3e:2b:33:9e:45:44:6c:54:
         f2:8c:cb:30:af:ce:35:2e:cf:ed:0b:f3:7e:2e:09:5a:ff:12:
         50:6b:b1:12:a2:a0:13:5c:00:df:60:fb:ec:df:f6:78:93:e7:
         35:0e:b1:e0:3a:9f:8e:ad:62:d3:56:3e:d0:89:95:7a:45:4e:
         2f:03:40:4d:67:77:30:b4:7f:f3:0e:a0:0b:17:5c:47:d8:bd:
         60:39:4f:af:dc:94:a4:ea:43:71:51:82:a9:b6:9a:ce:da:4c:
         ca:cf:a7:73:16:ab:28:62:81:3c:75:5d:2d:ce:07:b0:5e:e4:
         bb:43:51:dc:f4:25:b5:1a:04:e0:0f:9c:ee:9e:ac:53:e3:cf:
         b1:ab:ef:46:0f:d6:2b:69:2d:8d:b3:3f:07:3e:53:13:75:eb:
         6e:81:6c:bf:48:83:33:46:08:cf:ce:e5:60:6c:48:0f:7d:6c:
         dc:68:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 18:10:21 2024 by rpki-client on console-fra.rpki-client.org