Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/djrzM4Ug3SadpYRTtqSWBes7Bwo.roa
File:                     djrzM4Ug3SadpYRTtqSWBes7Bwo.roa (raw, json)
Hash identifier:          xaApR1Inc2evPjlGS8PmYsFiOLhZjhSmBVvkCBIMmd8=
Subject key identifier:   76:3A:F3:33:85:20:DD:26:9D:A5:84:53:B6:A4:96:05:EB:3B:07:0A
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018F2E615AEE193AF3662E292E503E98C6FF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/djrzM4Ug3SadpYRTtqSWBes7Bwo.roa
Signing time:             Tue 30 Apr 2024 09:41:23 +0000
ROA not before:           Tue 30 Apr 2024 09:41:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215039
IP address blocks:        77.90.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 20:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:61:5a:ee:19:3a:f3:66:2e:29:2e:50:3e:98:c6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Apr 30 09:41:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=763af3338520dd269da58453b6a49605eb3b070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:27:db:d1:d8:17:95:21:d6:cd:ae:11:46:
                    b7:eb:63:d6:35:61:6e:fc:51:b2:66:e8:df:91:92:
                    bd:88:13:24:68:63:c2:ab:3b:8d:52:2f:41:2c:30:
                    2a:4c:e9:18:34:c6:b9:4f:75:ca:4d:18:56:31:fc:
                    0c:91:3d:8c:71:d6:f0:ec:c9:03:ec:22:9f:91:2c:
                    41:ea:64:c3:b7:0a:46:00:3c:dc:53:a6:ad:d5:20:
                    e0:b6:52:26:cc:f1:74:e7:24:11:ff:a8:af:75:83:
                    2f:c3:81:07:8e:74:15:a0:66:5c:e8:4f:d9:a2:9a:
                    73:8c:f3:8c:b2:3a:fe:6a:ca:b6:47:fa:2a:18:38:
                    0b:dd:7a:8f:27:28:4b:e9:8d:7f:93:c8:3a:f2:73:
                    4f:92:7d:88:9b:44:b7:ef:02:57:a7:50:c4:6d:86:
                    4d:4b:96:b4:2c:20:9f:67:e5:bc:39:24:5a:f9:f3:
                    12:e5:a2:96:17:1d:d9:8c:8f:5d:4b:3b:c7:9b:e3:
                    8c:63:05:25:ab:aa:46:78:c2:05:89:9b:42:fb:d9:
                    41:ee:4a:d4:dd:e0:01:02:24:60:8c:d8:1a:22:ea:
                    eb:85:38:0b:dd:9b:5a:d2:85:0b:a9:79:6b:23:c8:
                    dd:c8:ba:11:aa:73:0a:2c:d4:c7:6a:02:e3:aa:42:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:F3:33:85:20:DD:26:9D:A5:84:53:B6:A4:96:05:EB:3B:07:0A
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/djrzM4Ug3SadpYRTtqSWBes7Bwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:bb:19:d7:6c:3c:f5:39:de:ff:d1:f2:98:c2:73:0c:8d:
         99:73:e1:49:6d:ed:95:49:73:a7:1d:f6:0a:c1:d0:56:26:47:
         78:de:6e:27:22:29:98:c5:e8:8c:3b:0d:ed:7b:7b:3b:cc:d2:
         8d:0d:61:38:ed:72:56:4e:fd:69:8e:aa:a5:8b:85:ed:22:bd:
         b9:c4:92:26:7e:42:b4:1b:cb:22:a4:f1:b9:d4:d1:1c:d7:fa:
         bd:3a:3b:01:5c:55:ed:51:2c:4e:3f:5b:41:e3:2e:4c:33:88:
         6f:29:34:31:a9:cd:61:dd:04:e2:8c:45:0e:cf:b9:19:cd:c6:
         7e:2f:3c:e9:3a:ed:d5:d4:6f:f5:1b:68:18:e1:f3:d1:ca:51:
         d1:b4:b8:08:96:59:44:57:f0:28:78:3e:9b:29:db:60:39:61:
         fc:b7:b0:2a:92:1e:d2:4b:81:d5:2f:5c:d1:16:e0:9e:21:66:
         7f:8f:b4:a4:0e:5b:36:27:17:81:93:69:4e:7b:ec:22:f2:17:
         5c:d9:f5:bf:af:3c:8f:35:44:43:de:f9:f5:45:19:9f:23:a7:
         ba:24:e9:0a:f1:77:28:b9:3c:70:cf:b4:df:bf:e7:13:68:69:
         23:a8:28:79:90:fa:10:b0:55:a4:33:5a:03:68:b5:06:30:8c:
         ea:55:fc:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8uYVruGTrzZi4pLlA+mMb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNDMwMDk0MTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjNhZjMzMzg1MjBkZDI2OWRhNTg0NTNiNmE0OTYwNWViM2IwNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu8n29HYF5Uh1s2uEUa362PWNWFu
/FGyZujfkZK9iBMkaGPCqzuNUi9BLDAqTOkYNMa5T3XKTRhWMfwMkT2Mcdbw7MkD
7CKfkSxB6mTDtwpGADzcU6at1SDgtlImzPF05yQR/6ivdYMvw4EHjnQVoGZc6E/Z
oppzjPOMsjr+asq2R/oqGDgL3XqPJyhL6Y1/k8g68nNPkn2Im0S37wJXp1DEbYZN
S5a0LCCfZ+W8OSRa+fMS5aKWFx3ZjI9dSzvHm+OMYwUlq6pGeMIFiZtC+9lB7krU
3eABAiRgjNgaIurrhTgL3Zta0oULqXlrI8jdyLoRqnMKLNTHagLjqkLgOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHY68zOFIN0mnaWEU7aklgXrOwcKMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZGpyek00VWczU2FkcFlSVHRxU1dCZXM3QndvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoOMA0G
CSqGSIb3DQEBCwUAA4IBAQCNW7sZ12w89Tne/9HymMJzDI2Zc+FJbe2VSXOnHfYK
wdBWJkd43m4nIimYxeiMOw3te3s7zNKNDWE47XJWTv1pjqqli4XtIr25xJImfkK0
G8sipPG51NEc1/q9OjsBXFXtUSxOP1tB4y5MM4hvKTQxqc1h3QTijEUOz7kZzcZ+
LzzpOu3V1G/1G2gY4fPRylHRtLgIlllEV/AoeD6bKdtgOWH8t7Aqkh7SS4HVL1zR
FuCeIWZ/j7SkDls2JxeBk2lOe+wi8hdc2fW/rzyPNURD3vn1RRmfI6e6JOkK8Xco
uTxwz7Tfv+cTaGkjqCh5kPoQsFWkM1oDaLUGMIzqVfzg
-----END CERTIFICATE-----
Generated at Thu May 9 22:05:21 2024 by rpki-client on console-ams.rpki-client.org