Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jYTvrE-ZD5F43p0J4h9bBnvgDYs.roa
File:                     jYTvrE-ZD5F43p0J4h9bBnvgDYs.roa (raw, json)
Hash identifier:          VBuSPRwEhxFGVeAjQ2Eiy4sNa9ltvOlp0arLIiQQiIU=
Subject key identifier:   8D:84:EF:AC:4F:99:0F:91:78:DE:9D:09:E2:1F:5B:06:7B:E0:0D:8B
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0190A73DF80120064E47148BE84BC56C1302
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jYTvrE-ZD5F43p0J4h9bBnvgDYs.roa
Signing time:             Fri 12 Jul 2024 13:59:34 +0000
ROA not before:           Fri 12 Jul 2024 13:59:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215828
IP address blocks:        77.90.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Aug 2024 15:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a7:3d:f8:01:20:06:4e:47:14:8b:e8:4b:c5:6c:13:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jul 12 13:59:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d84efac4f990f9178de9d09e21f5b067be00d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:b0:63:35:97:ff:f4:2a:7a:b4:51:12:cc:
                    ff:f8:f8:92:f4:4b:f8:06:ac:f3:db:50:f7:a5:cd:
                    f5:83:9b:fd:a0:36:b5:86:9f:6b:5e:7e:4f:43:40:
                    52:78:3b:47:30:f6:51:e3:5a:2e:dc:f2:92:cf:22:
                    27:bd:2b:bb:89:87:45:7e:e4:79:7f:52:33:82:b4:
                    71:69:6b:e0:c6:bd:b4:66:9c:5c:ff:27:49:01:22:
                    27:ce:22:f8:59:c6:bd:97:fb:8d:47:4b:f7:63:92:
                    c9:b9:e3:6e:05:36:58:fa:6f:a0:34:67:3f:7a:ef:
                    e4:4a:bd:d8:d7:ad:be:a2:6c:a8:38:65:a1:27:d4:
                    be:c0:2e:d7:5b:9f:24:62:c7:b9:85:cb:96:ee:cd:
                    48:a6:b1:36:e9:20:85:c1:e8:f1:e7:43:09:77:c8:
                    63:90:0a:02:88:fe:9a:6e:6b:6c:13:c8:57:70:7a:
                    e8:cd:64:d1:0c:2b:8b:eb:73:b4:80:df:f5:52:d2:
                    d5:20:4a:19:5a:86:a1:a0:58:06:fa:70:66:62:b1:
                    8b:7d:80:79:2f:99:42:66:e7:df:e8:73:68:f6:68:
                    5a:46:11:f8:06:57:b2:32:65:30:e4:6c:9b:40:02:
                    aa:93:e3:b4:48:22:99:f8:57:9f:af:a7:e1:1f:b2:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:EF:AC:4F:99:0F:91:78:DE:9D:09:E2:1F:5B:06:7B:E0:0D:8B
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jYTvrE-ZD5F43p0J4h9bBnvgDYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:5d:8d:c8:7a:9e:19:c6:ef:0c:a3:96:93:56:ef:33:01:
         a9:df:41:7f:e4:16:5d:0e:75:d6:3a:c7:87:f2:ed:fc:20:90:
         a2:4e:06:f0:0f:41:ea:b6:fd:08:8d:c2:80:26:13:e1:b5:b2:
         4e:f6:51:80:cd:76:af:12:2e:de:64:2a:9a:b6:5f:37:fc:5e:
         cc:6a:6d:d9:53:07:2f:e7:09:ec:c6:a8:e0:89:d9:79:96:ff:
         b8:2e:85:42:21:7b:45:c5:e2:30:9d:21:39:47:e3:57:79:9a:
         f2:4f:ab:63:56:ce:40:02:48:02:62:81:52:29:d9:d4:db:66:
         26:8a:48:72:8d:f2:ce:c8:d9:dd:a0:98:ef:33:33:93:53:07:
         50:8a:1e:95:1a:d8:f8:75:58:88:fb:ce:db:63:f0:da:41:75:
         d0:0c:d0:72:a8:d0:26:83:0a:f8:1d:1e:d8:d7:ef:b0:02:75:
         8d:58:c1:f8:12:88:8e:74:59:a0:77:38:d9:44:ad:24:98:29:
         c8:6d:a3:11:80:65:5f:86:d5:de:d7:a8:33:39:04:bd:6b:69:
         b7:69:57:3f:ac:77:39:ca:3a:c0:38:1b:2b:8f:2c:21:86:b5:
         6c:f7:7c:13:94:5d:1d:9a:7e:c8:67:a4:bb:0f:eb:d6:71:9f:
         52:45:5f:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCnPfgBIAZORxSL6EvFbBMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNzEyMTM1OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDg0ZWZhYzRmOTkwZjkxNzhkZTlkMDllMjFmNWIwNjdiZTAwZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uuwYzWX//QqerRREsz/+PiS9Ev4
Bqzz21D3pc31g5v9oDa1hp9rXn5PQ0BSeDtHMPZR41ou3PKSzyInvSu7iYdFfuR5
f1IzgrRxaWvgxr20Zpxc/ydJASInziL4Wca9l/uNR0v3Y5LJueNuBTZY+m+gNGc/
eu/kSr3Y162+omyoOGWhJ9S+wC7XW58kYse5hcuW7s1IprE26SCFwejx50MJd8hj
kAoCiP6abmtsE8hXcHrozWTRDCuL63O0gN/1UtLVIEoZWoahoFgG+nBmYrGLfYB5
L5lCZuff6HNo9mhaRhH4BleyMmUw5GybQAKqk+O0SCKZ+Fefr6fhH7KDBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2E76xPmQ+ReN6dCeIfWwZ74A2LMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvallUdnJFLVpENUY0M3AwSjRoOWJCbnZnRFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoZMA0G
CSqGSIb3DQEBCwUAA4IBAQBrlV2NyHqeGcbvDKOWk1bvMwGp30F/5BZdDnXWOseH
8u38IJCiTgbwD0Hqtv0IjcKAJhPhtbJO9lGAzXavEi7eZCqatl83/F7Mam3ZUwcv
5wnsxqjgidl5lv+4LoVCIXtFxeIwnSE5R+NXeZryT6tjVs5AAkgCYoFSKdnU22Ym
ikhyjfLOyNndoJjvMzOTUwdQih6VGtj4dViI+87bY/DaQXXQDNByqNAmgwr4HR7Y
1++wAnWNWMH4EoiOdFmgdzjZRK0kmCnIbaMRgGVfhtXe16gzOQS9a2m3aVc/rHc5
yjrAOBsrjywhhrVs93wTlF0dmn7IZ6S7D+vWcZ9SRV9U
-----END CERTIFICATE-----
Generated at Mon Aug 19 19:13:12 2024 by rpki-client on console-fra.rpki-client.org