Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eStc2D-oxhClmv1qbYq7fV0qt6A.roa
File:                     eStc2D-oxhClmv1qbYq7fV0qt6A.roa (raw, json)
Hash identifier:          unXGFBKDFamui7aDNVpAbOPdebUHJjuYpyt6bxbA+MY=
Subject key identifier:   79:2B:5C:D8:3F:A8:C6:10:A5:9A:FD:6A:6D:8A:BB:7D:5D:2A:B7:A0
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0192686C6C46A88FB2BD9E9FF1DB5E41C703
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eStc2D-oxhClmv1qbYq7fV0qt6A.roa
Signing time:             Mon 07 Oct 2024 19:19:48 +0000
ROA not before:           Mon 07 Oct 2024 19:19:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58212
IP address blocks:        5.83.150.0/24 maxlen: 24
                          77.90.7.0/24 maxlen: 24
                          77.90.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 02:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:68:6c:6c:46:a8:8f:b2:bd:9e:9f:f1:db:5e:41:c7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Oct  7 19:19:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=792b5cd83fa8c610a59afd6a6d8abb7d5d2ab7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:00:7d:92:22:3b:a1:44:da:15:e1:d0:ea:
                    ae:cc:12:17:ac:3a:7c:3b:d4:f8:6d:56:fc:2f:50:
                    d5:9e:88:6f:5a:26:7c:2e:1b:e1:50:8a:c9:d6:73:
                    05:96:d1:6f:2e:fe:f5:8f:06:db:11:ad:b0:e7:ba:
                    1d:83:30:db:11:a9:47:3c:c4:b2:b7:d5:9d:9e:02:
                    14:aa:5a:d5:75:66:b8:1a:fd:b0:27:02:a0:8a:90:
                    a7:03:8b:19:b9:64:40:f5:f0:00:b5:a1:96:0b:83:
                    d2:6f:22:0f:53:9c:d8:2b:4a:58:af:9c:fb:7b:2c:
                    bf:5d:22:75:11:52:47:3a:f9:6d:c4:83:09:0d:74:
                    a3:05:21:bf:a3:7b:58:d2:6c:69:93:6a:fb:e9:1e:
                    fe:9c:a6:71:65:ad:67:c8:d1:c5:c9:18:c8:6a:1e:
                    fa:46:6a:76:ff:72:07:88:a1:d6:4a:3a:f4:44:13:
                    20:46:d8:7b:e5:3b:87:ed:ac:8a:a2:dc:c8:9e:95:
                    83:10:f1:a7:12:41:75:6b:9b:e6:ab:3f:33:7e:fa:
                    e3:29:32:67:1b:35:a8:ef:36:83:a2:4e:d4:6c:2f:
                    09:fb:63:11:c6:1a:02:9d:f9:7f:9f:9f:8d:47:1b:
                    c6:f3:98:b1:27:8c:19:b4:2b:c4:fd:94:f5:ff:8f:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:5C:D8:3F:A8:C6:10:A5:9A:FD:6A:6D:8A:BB:7D:5D:2A:B7:A0
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eStc2D-oxhClmv1qbYq7fV0qt6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.150.0/24
                  77.90.7.0/24
                  77.90.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:5d:42:f4:6c:d4:14:f6:f5:11:98:07:e9:f4:73:e1:0c:
         ba:64:50:8c:a3:98:59:64:b5:31:c4:04:42:ad:5b:fd:22:72:
         7d:62:72:5f:c8:23:84:5b:a5:40:24:00:00:86:f4:65:7d:a3:
         d0:54:4f:6d:59:ea:9a:e9:e4:68:0c:25:72:98:8e:53:8f:52:
         c9:95:da:bc:9c:67:73:fe:59:a0:51:73:a7:7b:ac:7d:70:1b:
         3c:80:37:30:60:31:3f:4f:85:d9:ff:35:45:15:5d:e0:2f:77:
         b3:eb:78:61:0b:53:f9:14:83:4d:ce:9a:90:94:13:79:1a:6d:
         f9:22:1a:23:c4:8c:51:f8:68:c1:22:88:24:5e:36:03:a7:02:
         89:ad:30:22:26:96:ab:0b:d9:d4:00:df:21:24:1f:43:d1:45:
         58:2a:c1:9a:0d:d1:8c:36:71:c7:7e:b7:c1:7f:3e:3c:10:87:
         f6:29:77:ba:7c:d3:11:51:4f:8f:b3:cc:63:53:44:de:1e:7d:
         6c:22:cc:72:65:33:2f:b1:20:2e:75:fd:4b:e0:28:0f:c5:eb:
         a7:dc:16:5a:6a:88:23:61:5d:a8:0f:14:4c:79:05:74:3a:a2:
         cd:28:de:1e:7d:d5:50:0e:90:c2:17:2c:11:52:9e:b0:dd:be:
         26:f0:9f:93
-----BEGIN CERTIFICATE-----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 at Tue Oct 8 06:36:22 2024 by rpki-client on console-fra.rpki-client.org