Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dTEj764p9JZgbptBHPNAzt24voE.roa
File:                     dTEj764p9JZgbptBHPNAzt24voE.roa (raw, json)
Hash identifier:          JKG+9Ml5U6lLaQbClB5Hai8cmo+2KrRKkk+0P1f8oxU=
Subject key identifier:   75:31:23:EF:AE:29:F4:96:60:6E:9B:41:1C:F3:40:CE:DD:B8:BE:81
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018E5D9F9EB71CA6CF2819FC1556F737D384
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dTEj764p9JZgbptBHPNAzt24voE.roa
Signing time:             Wed 20 Mar 2024 20:48:45 +0000
ROA not before:           Wed 20 Mar 2024 20:48:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48314
IP address blocks:        77.90.0.0/24 maxlen: 24
                          77.90.8.0/24 maxlen: 24
                          77.90.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 04:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5d:9f:9e:b7:1c:a6:cf:28:19:fc:15:56:f7:37:d3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Mar 20 20:48:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=753123efae29f496606e9b411cf340ceddb8be81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:de:80:df:85:2a:45:b5:f0:61:9d:f5:6c:
                    0e:99:66:d0:0e:1f:e4:e1:4b:43:05:d0:ec:6c:bb:
                    de:79:67:45:ca:68:b5:34:c2:8b:67:a9:89:4a:5a:
                    bf:31:f8:ee:cb:13:55:11:99:52:2e:70:99:fe:20:
                    fe:60:9b:de:e4:31:2b:bf:63:f9:ba:8c:b1:1a:e4:
                    81:ff:d2:33:97:e9:00:19:60:e6:fd:70:a1:f6:26:
                    6f:0b:b8:60:7a:3c:3a:9c:15:0f:de:9b:b9:e3:41:
                    46:17:78:6f:d2:23:77:15:f7:c2:96:17:ae:4d:54:
                    31:e7:c0:80:9c:74:ce:e5:a9:66:09:6e:6f:99:41:
                    89:21:77:65:62:2e:30:85:19:b3:3b:a6:76:4e:5f:
                    11:93:94:f6:05:05:e2:f7:b4:e3:ef:ec:1d:36:4c:
                    9d:56:51:0a:a9:99:b1:0e:68:3f:55:23:34:cb:f0:
                    54:bc:df:8f:41:cd:1f:f3:51:ab:ab:cb:55:a5:96:
                    72:07:cb:a6:47:12:4d:3c:05:cb:46:21:1b:31:19:
                    1a:32:83:2e:f7:b9:36:40:55:95:e2:c2:fa:37:50:
                    a5:9f:e1:2f:b6:5e:06:f6:d1:5c:a4:98:e5:a0:63:
                    ce:d2:84:89:7f:52:ab:15:f4:22:ad:d3:e1:5e:56:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:23:EF:AE:29:F4:96:60:6E:9B:41:1C:F3:40:CE:DD:B8:BE:81
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dTEj764p9JZgbptBHPNAzt24voE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.0.0/24
                  77.90.8.0/24
                  77.90.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:e8:af:c6:ac:98:f3:5f:15:e0:ed:20:0a:15:19:13:3d:
         f9:ed:d5:13:7b:6a:0b:8f:8c:ff:07:1d:51:c1:67:20:f9:0d:
         ee:79:82:84:7e:97:9a:37:be:86:b4:74:21:3d:e2:e1:65:37:
         c5:df:3f:97:3d:07:0a:21:0b:42:95:32:af:ba:4a:40:d9:e1:
         27:ce:e6:d1:82:cf:97:c5:af:81:4f:78:03:89:3a:42:81:22:
         05:a1:4e:32:82:3e:96:cf:cd:7b:98:b0:3f:3c:38:ed:78:8d:
         98:b7:bb:c0:b7:d7:a8:26:a1:b3:ca:63:a0:ce:3f:30:28:50:
         86:9c:fc:c0:24:f8:28:0b:52:93:34:f0:4f:d4:ed:5f:8e:4d:
         0e:16:27:ae:df:72:11:dc:80:b9:e3:b3:63:fe:f9:e1:8f:ed:
         79:ae:3a:d3:a8:5d:b3:96:fb:4a:8d:c9:06:d6:ab:bf:5f:10:
         24:88:fe:3f:08:7d:86:dd:8a:d4:56:93:64:5a:f8:dc:6d:1c:
         23:a3:15:26:71:8f:7b:aa:58:34:94:19:67:cf:dd:eb:e5:bf:
         b2:84:d1:c5:9d:d0:2c:bf:df:5a:ef:cf:d1:49:e1:7e:06:cd:
         3d:34:5f:71:e7:f3:51:cf:a2:2e:da:85:32:16:f7:23:6c:93:
         dc:ea:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org