Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hbtrSPVDY-nZ2UlPNsCtRlSKysk.roa
File:                     hbtrSPVDY-nZ2UlPNsCtRlSKysk.roa (raw, json)
Hash identifier:          i47yG5bCpYHdQSwQKy78WlQUry5uRNkdDYyhsns195U=
Subject key identifier:   85:BB:6B:48:F5:43:63:E9:D9:D9:49:4F:36:C0:AD:46:54:8A:CA:C9
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019139D0B57DEF728C7300EA0D892B18B8C1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hbtrSPVDY-nZ2UlPNsCtRlSKysk.roa
Signing time:             Sat 10 Aug 2024 01:04:24 +0000
ROA not before:           Sat 10 Aug 2024 01:04:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        77.90.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Aug 2024 12:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:39:d0:b5:7d:ef:72:8c:73:00:ea:0d:89:2b:18:b8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Aug 10 01:04:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=85bb6b48f54363e9d9d9494f36c0ad46548acac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:22:55:fb:f0:31:b8:97:f2:73:3e:61:76:
                    eb:29:3e:04:80:5e:98:3c:19:55:be:23:c9:6b:a2:
                    50:48:d9:b7:94:64:44:f4:9e:16:15:a7:7e:2b:7d:
                    67:d1:6d:4f:53:d8:09:0d:85:a2:15:c8:47:54:5b:
                    b3:53:1c:98:e8:b7:cc:8e:0b:92:83:2a:ec:41:b6:
                    19:73:98:19:9d:21:71:46:03:8b:eb:e4:f7:7e:0f:
                    04:06:41:f6:b2:a9:99:4b:ec:08:65:3d:35:65:a9:
                    db:68:37:8a:b2:d4:74:87:3e:1e:86:95:bc:7d:3c:
                    db:58:55:2b:9d:0c:e6:06:ba:4a:6a:45:bf:08:05:
                    b6:28:5e:e9:46:c1:dc:c0:d6:fa:99:0b:5e:35:5a:
                    42:8a:fa:69:38:c8:5f:5d:cb:ad:40:5a:ac:40:69:
                    57:96:94:d6:1d:3f:78:fb:c6:72:33:d3:b8:ec:eb:
                    3f:9e:bf:7b:50:0e:ff:9b:85:31:34:d8:b3:c0:34:
                    f7:b2:e8:e1:91:c1:fb:3d:83:d9:dc:d4:f0:e2:b6:
                    0e:32:13:ea:ee:cc:34:7c:f7:19:04:29:ff:0b:bc:
                    a4:94:c1:55:ce:ed:8d:22:77:0f:b0:d9:71:f7:b2:
                    49:08:59:85:9d:e4:93:82:08:f1:b9:0e:fd:d4:92:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BB:6B:48:F5:43:63:E9:D9:D9:49:4F:36:C0:AD:46:54:8A:CA:C9
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hbtrSPVDY-nZ2UlPNsCtRlSKysk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ea:f1:32:4d:bf:66:4f:3f:d4:1b:5f:5a:a9:56:2c:9c:4c:b8:
         c2:79:f7:c1:91:a7:80:f2:2b:48:03:93:9f:dc:46:26:d7:59:
         f8:55:35:d9:8f:83:6d:3b:c8:2c:e5:ec:7f:d1:7f:09:d6:57:
         50:0a:96:ae:3a:8b:1f:97:82:81:90:48:62:b8:1c:b8:92:33:
         82:50:4f:77:c0:44:9d:3a:43:16:dc:c9:d9:e0:74:61:ad:1f:
         13:4e:eb:7b:b5:50:05:93:ff:3c:52:be:5f:78:c6:90:49:7a:
         cd:8b:39:d6:70:2a:00:28:40:5c:62:c4:08:4b:39:e1:7b:20:
         12:6b:f4:7c:6b:c7:ca:ad:09:07:1e:47:b2:17:75:5f:29:55:
         48:b7:3e:a2:b5:f0:db:37:47:8e:93:28:c3:f6:80:2d:ad:d2:
         13:6a:02:c8:17:db:6b:78:cd:dc:34:32:46:27:eb:e1:ed:a2:
         e5:e3:88:7a:70:ca:e0:3c:ea:15:04:6d:f9:ab:69:46:4f:85:
         73:5a:da:c5:c9:bd:5e:25:90:ba:28:2b:4c:70:46:94:89:6f:
         62:95:75:c9:2b:8a:9a:8f:15:22:6a:44:12:9b:47:51:5b:5b:
         a4:ee:90:c2:45:66:62:58:5d:71:e3:50:85:19:1a:b1:12:46:
         bc:9b:7b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:48 2024 by rpki-client on console-ams.rpki-client.org