Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DN59jlXGlwYIT9JD-uYXKO76-p4.roa
File:                     DN59jlXGlwYIT9JD-uYXKO76-p4.roa (raw, json)
Hash identifier:          JViHcd2ICTqS0m0FABUrKN6U5plde64AXNdlnYIXY6c=
Subject key identifier:   0C:DE:7D:8E:55:C6:97:06:08:4F:D2:43:FA:E6:17:28:EE:FA:FA:9E
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01914167744EA95CE164547F47459640545A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DN59jlXGlwYIT9JD-uYXKO76-p4.roa
Signing time:             Sun 11 Aug 2024 12:26:24 +0000
ROA not before:           Sun 11 Aug 2024 12:26:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        77.90.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 21:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:41:67:74:4e:a9:5c:e1:64:54:7f:47:45:96:40:54:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Aug 11 12:26:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0cde7d8e55c69706084fd243fae61728eefafa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:df:c9:e1:77:af:af:a2:74:92:0d:85:4d:
                    f9:0f:94:6e:39:2c:3a:2b:cc:00:dc:82:58:06:74:
                    ec:07:9c:35:7d:a0:05:74:33:f0:31:1f:91:e8:a5:
                    81:49:b4:f8:af:75:ce:69:e5:53:f9:47:17:1a:f7:
                    14:99:58:be:ec:5f:de:b3:ce:9d:e8:35:a9:8c:2f:
                    ee:c0:b5:1e:86:e1:fb:46:f7:48:03:07:89:b9:fe:
                    42:da:f5:5e:b1:08:83:d4:a8:50:e4:dc:d4:a7:79:
                    89:ff:31:60:8b:dd:78:86:23:d2:ff:ed:b0:b6:7e:
                    15:82:ee:c8:1f:d1:54:d9:2d:0e:89:82:b5:0c:69:
                    ca:6e:b5:ad:8a:b5:77:25:75:14:55:d1:5f:58:67:
                    b6:67:c0:7a:c8:bc:82:eb:f7:c3:14:ec:d6:56:cf:
                    65:06:e3:5e:a9:d5:65:20:2a:89:dd:c0:99:ec:5c:
                    14:54:60:39:75:bf:82:cb:5b:a8:27:35:c8:08:f1:
                    fd:37:56:14:ca:21:79:f2:bd:b4:d5:34:51:f2:af:
                    8e:6e:5f:30:d6:98:af:ef:b7:8f:f1:30:14:c1:1d:
                    f2:78:63:8a:d0:4a:08:24:14:5c:5e:f5:5d:ab:4f:
                    bb:6c:04:c5:d4:2f:b5:95:3c:00:66:7f:7b:df:25:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DE:7D:8E:55:C6:97:06:08:4F:D2:43:FA:E6:17:28:EE:FA:FA:9E
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DN59jlXGlwYIT9JD-uYXKO76-p4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:e0:e4:9f:33:d9:06:30:ab:05:9b:42:4d:a4:48:7f:fd:
         8c:dd:a5:9b:b2:a2:ce:8f:92:31:09:2a:4a:43:3b:40:9d:57:
         f1:3c:6f:f7:7e:07:54:42:74:35:dd:ec:0b:78:17:a0:b5:fe:
         27:e1:9b:e3:c7:db:69:e2:10:67:8c:ac:ef:04:01:d4:ed:4e:
         e2:f0:02:fc:9f:a5:c7:06:47:49:fc:e4:00:a0:a1:14:33:d9:
         d7:1b:8c:4f:22:b9:e2:de:8e:2c:eb:2f:d6:c4:b1:8f:6d:a0:
         f1:01:b5:2e:d2:b3:c9:7d:be:eb:96:8d:a2:3b:0a:ee:f1:f1:
         8b:65:c6:d8:cf:a6:66:0e:5c:d9:a7:66:43:95:13:1c:7b:01:
         39:af:93:16:8b:09:31:3a:8e:e0:c0:46:01:c0:dc:02:02:24:
         76:d4:b4:62:73:aa:71:ac:0c:8f:a0:7a:65:d2:88:f6:10:a8:
         68:c7:9a:d4:eb:7a:75:09:45:b8:40:56:18:35:42:d1:b5:8a:
         39:0b:54:f6:43:d1:42:a9:0d:c4:59:83:15:ad:89:1c:cf:70:
         d9:68:69:0f:4c:94:ad:63:a1:bd:24:1c:d0:06:75:20:87:64:
         04:98:28:60:f6:0a:7f:77:e7:62:3a:b8:fd:c0:f6:24:92:39:
         7b:ec:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 03:05:10 2024 by rpki-client on console-fra.rpki-client.org