Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pep5ccbBaZT57sqyNoMsPn9DPjQ.roa
File:                     pep5ccbBaZT57sqyNoMsPn9DPjQ.roa (raw, json)
Hash identifier:          PMOzgRjaquxStoFxz0PD5lXfTW9OeoKEpE1m8heDJ4A=
Subject key identifier:   A5:EA:79:71:C6:C1:69:94:F9:EE:CA:B2:36:83:2C:3E:7F:43:3E:34
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018E1A772AD4DC9A49835895AC2B466A4BFF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pep5ccbBaZT57sqyNoMsPn9DPjQ.roa
Signing time:             Thu 07 Mar 2024 19:50:01 +0000
ROA not before:           Thu 07 Mar 2024 19:50:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199760
IP address blocks:        77.90.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 11:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:1a:77:2a:d4:dc:9a:49:83:58:95:ac:2b:46:6a:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Mar  7 19:50:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a5ea7971c6c16994f9eecab236832c3e7f433e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:08:41:4c:d9:1c:2a:ec:e1:40:22:9d:b9:
                    a0:3d:48:71:66:47:dd:7f:75:0e:a4:b2:50:5a:50:
                    17:5e:c9:2c:13:0d:50:60:73:12:1b:4f:21:42:44:
                    13:96:ca:98:53:50:68:76:c5:93:4b:ba:20:ec:d9:
                    9e:c1:da:83:69:a3:44:dc:fb:25:a6:f4:6a:34:99:
                    b1:5e:b2:ae:43:1a:af:2e:cb:e2:81:ae:c2:b0:9c:
                    43:07:18:59:e9:e7:6b:f7:2a:be:8b:c6:ad:9e:0a:
                    97:0d:41:4e:1d:a8:31:00:48:09:8c:fa:f3:60:4b:
                    9c:10:79:c2:dc:e7:dd:42:af:27:5e:a7:a2:84:7a:
                    7b:af:42:92:6d:ca:56:60:17:d1:32:2b:86:c5:88:
                    7e:f9:fe:6c:86:b0:fd:bc:ce:38:49:ac:ec:43:dc:
                    05:11:54:fa:3a:13:e9:e6:4c:0c:06:89:33:e3:13:
                    0d:1e:44:42:6e:2a:86:bf:2a:4b:1d:7c:d6:0c:8f:
                    a9:dc:bc:86:05:45:6d:f7:0e:d8:ad:70:8c:c8:5c:
                    66:4b:c2:6b:bd:8b:13:4a:0d:e7:45:32:a6:ad:7c:
                    d7:d5:f7:b3:b1:44:d9:b2:98:fc:2f:0d:79:0e:23:
                    69:e8:7e:dd:36:a7:2f:20:77:25:e2:2c:19:df:47:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EA:79:71:C6:C1:69:94:F9:EE:CA:B2:36:83:2C:3E:7F:43:3E:34
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pep5ccbBaZT57sqyNoMsPn9DPjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:61:9b:8c:de:07:53:ba:ca:f7:07:8b:09:33:5f:7a:d0:
         62:eb:4d:e0:f0:fe:85:a4:c5:03:7c:7c:62:c3:63:66:cd:96:
         ea:42:d7:6e:0d:8b:e3:11:cd:26:84:b9:be:d4:aa:5f:12:b3:
         27:2c:6c:26:b4:8c:09:2a:90:93:bb:80:80:6d:88:f8:fb:13:
         2b:d0:30:c7:d3:00:fb:7d:e2:85:31:b7:75:99:45:ae:18:89:
         37:74:16:23:9d:59:e4:ca:e2:7c:42:82:1d:39:1b:59:d9:85:
         c4:d3:eb:ee:82:9f:c9:aa:cb:bb:e5:8b:dd:fa:81:93:26:4e:
         a0:d6:e9:04:ab:7e:16:cf:68:d0:e1:31:41:3a:f0:63:87:70:
         ce:48:da:12:60:51:f9:61:6a:35:e0:c5:df:e8:17:72:c6:bb:
         fb:fd:88:47:c6:f5:27:c4:45:3e:7a:a8:6f:c7:d2:bb:82:53:
         4c:be:55:94:3e:74:ac:24:e8:f2:4a:31:94:bd:0f:5a:ae:d8:
         1e:b6:5f:ec:93:05:b4:e3:9d:a1:aa:47:20:10:55:d1:94:fe:
         71:28:fe:a6:8f:3d:02:cb:d5:7b:91:9a:05:4e:05:22:70:ec:
         c9:89:34:db:70:ca:f7:79:65:1a:19:87:97:0f:c5:7b:0f:cf:
         52:3f:6d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org