Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rnWvYisgf_5eVo-dbjvS7_HZoMw.roa
File:                     rnWvYisgf_5eVo-dbjvS7_HZoMw.roa (raw, json)
Hash identifier:          SUD1muwgnXhInU/Dy0egTX2CsMlNOQSg54CTvY9Ge90=
Subject key identifier:   AE:75:AF:62:2B:20:7F:FE:5E:56:8F:9D:6E:3B:D2:EF:F1:D9:A0:CC
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01934A48E0E205A12D7A38ACE1B8DA3E7FC8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rnWvYisgf_5eVo-dbjvS7_HZoMw.roa
Signing time:             Wed 20 Nov 2024 15:55:10 +0000
ROA not before:           Wed 20 Nov 2024 15:55:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215365
IP address blocks:        77.90.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 18:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:4a:48:e0:e2:05:a1:2d:7a:38:ac:e1:b8:da:3e:7f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Nov 20 15:55:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ae75af622b207ffe5e568f9d6e3bd2eff1d9a0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:2f:f5:1b:93:85:ac:2f:1f:6c:a4:95:84:
                    51:84:22:18:37:39:77:bc:9b:d4:7f:8f:f8:5e:95:
                    2c:2b:1d:9b:5f:d1:4e:7c:85:28:6c:f0:5e:e8:b7:
                    1e:6d:b3:3c:13:4d:bb:c0:92:33:2a:5d:2b:fb:aa:
                    2b:7d:12:9c:a4:9d:f2:39:5a:34:1b:0d:5d:26:8e:
                    4f:f5:42:9d:0d:71:b3:ac:44:8e:8b:ef:19:39:e4:
                    9f:4d:cd:d2:71:f7:9e:c9:20:e9:36:d0:fa:cf:f2:
                    9f:df:2d:1a:0a:9e:a5:d3:26:3a:60:4c:4b:35:57:
                    a2:7c:ec:0a:b2:b3:d0:33:0e:2f:d0:0f:66:32:2c:
                    e1:1e:8c:08:7b:74:8a:6a:d0:2e:32:56:9a:cc:5c:
                    54:35:3f:ec:85:cb:2c:92:67:ad:24:ff:ba:3c:da:
                    30:c2:a8:d6:3b:b6:4d:f8:25:95:b5:a4:a9:69:dd:
                    90:aa:61:d2:fd:41:81:48:29:a8:55:3b:28:07:74:
                    4b:2a:7f:e6:90:04:b2:77:71:fc:e1:fd:14:b3:b4:
                    15:ea:39:31:c6:47:af:9f:ba:c3:ea:6c:65:8f:13:
                    b6:d6:78:27:d6:64:31:d7:75:36:37:dd:78:99:20:
                    1f:3c:19:c7:28:ab:1f:9a:e7:84:3d:a9:d1:b3:59:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:75:AF:62:2B:20:7F:FE:5E:56:8F:9D:6E:3B:D2:EF:F1:D9:A0:CC
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rnWvYisgf_5eVo-dbjvS7_HZoMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:49:f7:dc:bc:c3:c6:b4:e3:c4:25:50:9d:c4:d2:d8:78:81:
         62:81:68:e3:3d:ac:34:34:db:99:90:d7:78:85:9c:d6:e9:87:
         2a:c3:24:e1:80:56:a5:c7:12:48:00:02:3d:29:41:7c:4a:58:
         f8:79:67:e4:23:1c:16:5d:61:59:90:9c:4b:75:df:3b:12:3f:
         eb:83:75:85:ca:fa:a0:ea:94:51:d9:28:3f:d9:3d:fa:84:e8:
         6c:cc:35:a7:4f:94:1f:18:74:cf:37:92:b4:46:05:06:02:ec:
         6b:ee:d8:19:ab:d9:b9:87:8d:73:14:fe:e8:8f:e7:70:e9:d6:
         4e:af:30:56:56:2f:94:63:d3:e1:fc:d4:83:87:03:14:08:d4:
         af:b2:2b:84:9e:a9:d3:95:b8:f9:86:2b:ac:05:ba:b9:d4:a7:
         90:2a:70:2b:b6:8e:3a:bf:66:a7:aa:7d:79:cc:45:94:b5:60:
         86:dd:6c:09:86:5d:00:34:c0:cd:65:31:0a:29:e0:df:21:3a:
         8a:8f:9c:d7:94:71:7a:e3:9f:99:74:75:53:d5:ea:53:a6:f6:
         5d:a0:8e:27:67:05:ed:68:bc:65:fa:26:b3:be:7c:e1:41:a2:
         4a:82:42:1a:37:92:03:d0:ed:c5:5c:96:57:79:86:89:f2:a2:
         93:33:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:46:12 2024 by rpki-client on console-fra.rpki-client.org