Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bp-9Xv-AKjjgW4vuiTg4sA-uKO4.roa
File:                     Bp-9Xv-AKjjgW4vuiTg4sA-uKO4.roa (raw, json)
Hash identifier:          WKuvQbkCawdpbsWWhl63ZAOdV+ftNP2ehoAHT+BtCW0=
Subject key identifier:   06:9F:BD:5E:FF:80:2A:38:E0:5B:8B:EE:89:38:38:B0:0F:AE:28:EE
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0191D4F6FFF20B916ADB2E697D9F4AEBECC5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bp-9Xv-AKjjgW4vuiTg4sA-uKO4.roa
Signing time:             Mon 09 Sep 2024 04:07:22 +0000
ROA not before:           Mon 09 Sep 2024 04:07:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197477
IP address blocks:        77.90.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 07:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d4:f6:ff:f2:0b:91:6a:db:2e:69:7d:9f:4a:eb:ec:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Sep  9 04:07:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=069fbd5eff802a38e05b8bee893838b00fae28ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:6b:59:29:ee:fc:85:5b:4f:42:94:7b:70:
                    39:39:8d:e1:f8:24:ee:be:2f:8a:da:35:aa:fd:97:
                    42:b1:83:da:cb:29:a4:2e:5b:2d:87:5c:3e:fd:92:
                    14:d8:c7:af:5a:81:4d:00:69:f0:9f:e6:b3:1e:f7:
                    d5:e3:fb:b5:cb:74:82:9c:57:66:f3:d2:b7:e8:0e:
                    b4:eb:86:46:9c:be:d3:9e:77:7e:30:44:90:ac:df:
                    93:c0:db:bb:8a:47:2d:2c:6e:24:8d:9c:6f:c9:87:
                    e7:bf:b9:e7:9b:c9:cb:00:02:6d:5a:a1:67:e2:d2:
                    12:b4:6a:40:57:98:7a:08:60:cb:28:51:b8:39:9f:
                    61:69:28:5d:b0:1d:d7:20:3a:f9:04:ac:94:b7:90:
                    6f:4b:b7:e2:50:6f:63:d9:98:93:0d:45:ba:c9:be:
                    dd:69:25:9c:fc:62:37:0b:07:a9:9c:21:96:0e:3a:
                    e2:c6:7c:4b:e4:47:c9:42:11:b0:9c:2e:db:9d:0a:
                    6a:bd:9c:86:5f:17:d4:54:27:ad:50:e2:88:60:68:
                    f6:4e:c2:f8:1b:bc:03:ec:78:66:2d:1e:36:ac:c2:
                    a3:fd:7e:48:22:8c:1b:6e:82:76:45:25:70:df:cd:
                    b2:69:5e:9e:f3:7a:54:f4:5b:f2:c7:ed:91:97:67:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:BD:5E:FF:80:2A:38:E0:5B:8B:EE:89:38:38:B0:0F:AE:28:EE
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bp-9Xv-AKjjgW4vuiTg4sA-uKO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:6b:f8:0d:83:69:8a:18:2d:25:a7:8c:6d:83:fc:54:f2:
         3d:fd:a3:36:e3:a3:0e:24:e2:ab:91:9e:6f:e9:b2:86:09:97:
         f4:97:a3:2e:90:13:af:7a:43:53:55:7f:e5:22:29:f7:9e:f8:
         3c:8f:7a:c6:42:dc:d8:ac:85:19:03:92:ed:47:9e:78:96:40:
         32:cc:9d:5a:9a:a0:9c:f8:2c:f5:aa:d9:28:1e:85:bc:1c:55:
         9a:85:56:66:f6:6e:3e:04:7e:ed:4a:2c:1b:61:39:c3:7a:d1:
         a7:fa:cc:62:7e:6e:35:68:7c:3a:5f:49:7b:14:58:6d:f3:69:
         14:8f:7f:c4:79:10:90:99:8e:c0:a8:14:3b:aa:cc:aa:4d:08:
         75:16:3a:68:c2:ed:e8:39:37:40:a0:30:68:db:8a:a8:ec:a5:
         59:8a:07:55:48:4e:11:40:04:62:51:94:6d:91:e0:6f:4a:6c:
         b2:85:f7:a5:f9:47:5f:1c:67:67:75:19:a4:49:d3:8e:fd:5f:
         1a:6f:d5:c9:b1:02:6c:10:0b:09:3b:80:ab:b7:05:28:1e:93:
         73:7e:4f:3d:41:54:84:fd:b4:8f:6c:d5:de:02:0c:bf:bd:ac:
         08:6b:0b:45:1e:3d:a1:4f:25:db:44:56:f5:d6:b3:32:68:a2:
         9d:19:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 10:15:51 2024 by rpki-client on console-ams.rpki-client.org