Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NUE96pzZNEYOo5GlWv5aZjqIYPw.roa
File:                     NUE96pzZNEYOo5GlWv5aZjqIYPw.roa (raw, json)
Hash identifier:          DHMl89T8Fxlj57D4dMJ/7JIUw480mBMVHMhv4jllKOY=
Subject key identifier:   35:41:3D:EA:9C:D9:34:46:0E:A3:91:A5:5A:FE:5A:66:3A:88:60:FC
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0190A73DF77CA2B51BC1094429CA41A2D778
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NUE96pzZNEYOo5GlWv5aZjqIYPw.roa
Signing time:             Fri 12 Jul 2024 13:59:34 +0000
ROA not before:           Fri 12 Jul 2024 13:59:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197071
IP address blocks:        77.90.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a7:3d:f7:7c:a2:b5:1b:c1:09:44:29:ca:41:a2:d7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jul 12 13:59:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=35413dea9cd934460ea391a55afe5a663a8860fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:6f:8d:22:81:23:75:2a:f1:75:a7:c2:47:
                    c7:9a:19:3b:e0:95:86:38:0b:27:cb:43:74:c4:a0:
                    f5:c1:0a:50:ef:33:3a:e4:ba:88:bc:31:8e:ff:b6:
                    94:b6:32:e1:91:43:57:e6:17:26:48:9a:ca:5d:08:
                    36:3e:72:6d:63:a0:2b:8c:39:62:79:d7:4d:9a:c7:
                    56:a5:a3:61:57:2c:e0:ba:46:1b:10:5a:4a:50:7b:
                    77:e6:8c:dd:f1:25:c7:7b:dc:3e:67:e5:68:4d:06:
                    31:39:26:b2:af:c3:50:1a:1c:70:69:f3:89:c9:6b:
                    de:23:e8:53:9c:b1:f6:49:99:cd:46:b4:dd:65:3a:
                    ee:df:d2:4a:7c:5e:93:e0:e2:f4:50:d1:ed:04:db:
                    9c:ed:01:4b:b3:7c:19:27:05:a6:1c:d6:21:1e:0e:
                    f3:4e:1a:de:a2:a8:8b:12:d4:2d:17:e8:89:9e:ab:
                    90:fd:8f:fc:f5:7d:8b:57:0c:7e:65:af:dd:b6:f2:
                    91:5f:70:96:e3:24:7b:95:5e:04:d9:23:e0:82:9e:
                    ab:14:1c:ab:4b:d7:02:65:f3:75:05:63:41:6f:3d:
                    7a:25:96:d4:dc:48:fa:5f:2b:96:8e:9c:e5:3d:a5:
                    94:5e:7b:18:75:61:14:ef:10:7b:90:77:ea:37:b5:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:3D:EA:9C:D9:34:46:0E:A3:91:A5:5A:FE:5A:66:3A:88:60:FC
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NUE96pzZNEYOo5GlWv5aZjqIYPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:a4:59:1a:b9:89:be:62:7d:81:f5:36:3e:6a:b8:7a:4c:
         fb:6c:61:a2:eb:64:6b:8b:30:19:75:dc:a0:24:38:da:e0:9f:
         83:3a:e5:a7:82:5e:58:47:11:64:b6:ba:90:ba:bb:f2:a0:67:
         16:5c:30:42:13:26:6e:4c:e7:56:ee:47:d4:66:30:32:a7:96:
         04:82:22:0c:d2:6a:4c:d4:35:31:d4:04:40:c2:76:a1:61:f9:
         3d:71:41:c0:77:13:3e:2b:3c:28:dd:4e:d0:d9:53:c6:9d:b1:
         bb:4a:36:c8:15:67:81:59:a5:45:d7:ea:f9:92:1f:dd:6e:f2:
         f7:84:b2:f3:b7:9a:8e:28:70:6a:62:89:c0:77:b6:23:c7:fd:
         dd:87:c7:fd:67:0b:9f:e3:31:e9:8c:38:3d:22:46:9e:41:1b:
         3f:5f:4c:aa:79:e0:c6:9d:63:b2:48:f9:ea:4d:64:04:a0:ff:
         6f:5c:61:e8:58:3f:0e:87:aa:3d:4b:fd:a9:64:87:62:b4:be:
         39:82:65:34:ee:70:23:f6:29:62:29:89:6e:38:eb:f4:27:69:
         7d:16:7c:3c:c1:de:d1:2f:d5:01:aa:d1:95:ab:09:24:80:4d:
         32:35:7a:cf:8d:75:15:91:7c:a6:76:30:25:5a:0a:08:b5:8f:
         36:94:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 21:50:58 2024 by rpki-client on console-fra.rpki-client.org