Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qq-INi6MOhAZUc_IdqNnZQu8p5U.roa
File:                     qq-INi6MOhAZUc_IdqNnZQu8p5U.roa (raw, json)
Hash identifier:          ivMMZrViWU50qFv/TYQVSJqndOU5tI/JNj/RFsX3H20=
Subject key identifier:   AA:AF:88:36:2E:8C:3A:10:19:51:CF:C8:76:A3:67:65:0B:BC:A7:95
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01935772046640B4E8AA0E7E976F9BBE5BFE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qq-INi6MOhAZUc_IdqNnZQu8p5U.roa
Signing time:             Sat 23 Nov 2024 05:15:10 +0000
ROA not before:           Sat 23 Nov 2024 05:15:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214347
IP address blocks:        5.83.138.0/24 maxlen: 24
                          77.90.29.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 24 Nov 2024 05:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:72:04:66:40:b4:e8:aa:0e:7e:97:6f:9b:be:5b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Nov 23 05:15:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aaaf88362e8c3a101951cfc876a367650bbca795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:58:5e:f6:22:11:33:bc:2b:26:9c:b3:50:
                    73:fb:d2:37:93:43:40:b2:d8:29:33:ff:da:c8:0d:
                    44:b3:ea:4a:f3:af:14:19:63:35:8d:c0:d6:03:06:
                    03:6e:97:d7:f4:f3:9a:e6:dc:0a:f1:c3:09:0c:c9:
                    9d:d5:ca:08:6f:b6:e1:37:f7:9c:47:19:f9:9f:af:
                    68:12:3a:74:fa:5c:68:7d:52:55:6e:cf:35:3c:d2:
                    c5:90:41:40:f5:86:b2:aa:82:fd:f8:06:a4:a3:0e:
                    65:64:2b:ac:8b:48:a9:5a:5b:ad:86:f6:89:02:e4:
                    2b:0c:a6:85:75:a4:b4:63:27:82:70:43:32:22:86:
                    c5:36:7f:07:e0:db:38:e5:46:e4:36:b0:f8:ac:b5:
                    15:d2:bb:a6:e1:ff:3e:71:0a:8d:ce:14:b8:bf:71:
                    c9:0c:77:a3:0e:e8:de:12:68:8f:7d:e9:56:ec:bc:
                    dc:30:4b:ad:46:7b:17:ca:f0:d9:de:c0:96:f6:b4:
                    f1:8f:90:00:d9:80:6c:af:3f:b1:95:a0:2f:e6:06:
                    f7:91:6e:6d:57:8d:c6:3f:7a:45:70:06:9b:87:c0:
                    06:03:e6:e3:e4:37:38:be:1f:01:20:aa:81:e3:a4:
                    57:2a:ee:b4:4b:6c:2a:81:e5:80:47:50:55:4f:b5:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:88:36:2E:8C:3A:10:19:51:CF:C8:76:A3:67:65:0B:BC:A7:95
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qq-INi6MOhAZUc_IdqNnZQu8p5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.138.0/24
                  77.90.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:57:15:ed:34:d7:3d:6e:dd:8b:c9:de:14:50:ce:e0:4f:d4:
         d0:fd:61:8a:04:ca:6d:7a:9c:d0:22:36:1b:60:7b:59:8f:1a:
         5d:cf:ca:a7:bd:74:bc:59:80:0d:ac:4c:63:27:0e:1f:da:6f:
         ed:99:08:01:50:1b:4c:7a:e3:45:b8:b8:60:13:22:4a:fd:fc:
         b4:d9:03:bd:84:e3:35:33:d9:a0:dd:f0:d5:55:3b:1c:1d:c6:
         41:f3:cb:91:a2:8c:82:d0:f5:f4:e3:5c:70:16:33:dd:71:da:
         9a:7e:60:2e:22:9c:61:ca:cf:4c:ae:fa:97:07:73:f6:67:0c:
         8e:a1:f7:d4:81:df:af:bb:5d:b0:ae:ce:b1:1c:f6:7f:51:93:
         04:f7:fd:46:f0:64:fe:42:6a:13:c4:bd:4e:29:e6:ae:de:89:
         24:25:31:1f:8a:11:f4:a9:97:d7:ab:b2:77:0e:01:d3:66:be:
         b0:e2:9d:5d:70:df:33:74:1d:7d:ad:3a:fa:a7:41:31:e7:59:
         ec:df:1f:ce:b0:a1:a2:bb:84:ff:1a:2f:33:98:db:08:16:2f:
         cd:19:8a:d7:ec:79:2a:a0:66:7f:2b:6c:ae:d8:0a:79:54:f6:
         31:90:eb:62:12:20:9c:25:e2:b0:22:10:1e:78:70:41:9f:11:
         e9:e3:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:35 2025 by rpki-client