Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tpla65yCDAOGvHrwzINL3ZUbR04.roa
File:                     tpla65yCDAOGvHrwzINL3ZUbR04.roa (raw, json)
Hash identifier:          QlsHoaLnekqirO2XMjkJBtD+kVSxX89ic4ScOnsuhfw=
Subject key identifier:   B6:99:5A:EB:9C:82:0C:03:86:BC:7A:F0:CC:83:4B:DD:95:1B:47:4E
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018E5BBEF5B5D2BD31AE17E3C98D1A1AFCDA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tpla65yCDAOGvHrwzINL3ZUbR04.roa
Signing time:             Wed 20 Mar 2024 12:03:45 +0000
ROA not before:           Wed 20 Mar 2024 12:03:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44592
IP address blocks:        77.90.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 04:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5b:be:f5:b5:d2:bd:31:ae:17:e3:c9:8d:1a:1a:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Mar 20 12:03:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b6995aeb9c820c0386bc7af0cc834bdd951b474e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:93:e9:31:e8:97:4a:df:47:84:ce:83:56:
                    1f:ce:c5:74:67:ea:05:17:28:85:dd:1f:d2:92:8e:
                    e0:3f:cc:b3:fe:36:35:e7:1b:4a:ab:d2:f3:46:6d:
                    59:ba:b0:05:45:d3:91:6b:17:d2:38:b2:77:cc:46:
                    01:5d:06:cb:af:47:09:a8:e5:08:20:d2:fc:58:8b:
                    bb:37:fd:ab:94:e0:43:fb:c3:99:33:98:42:18:22:
                    1d:a8:3e:e7:6a:6c:80:43:11:b5:63:b2:d2:08:7e:
                    23:95:0e:a5:65:e3:85:2e:5d:b1:e9:14:ed:83:8d:
                    a2:5b:d1:9d:61:b0:54:7b:49:4a:22:80:27:a2:25:
                    c5:5c:ef:e6:a2:85:6e:47:d0:d0:c2:2a:4a:1b:00:
                    fc:b3:2c:30:e2:6b:90:ff:c5:2a:60:81:3b:f6:21:
                    54:62:80:12:2a:b2:fb:f0:f5:a4:bb:3b:05:9b:92:
                    1f:84:fd:43:84:a4:17:4d:d1:05:d1:9b:f4:62:3a:
                    09:7c:35:c0:42:14:27:67:35:46:52:45:4a:2d:b1:
                    b7:9e:78:cd:eb:82:d0:51:48:9f:fd:c6:20:b6:32:
                    b6:e3:d2:42:04:88:fd:d0:23:9e:90:82:76:8d:92:
                    9d:c4:fc:af:a8:79:4d:ae:eb:e9:90:46:84:b4:00:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:5A:EB:9C:82:0C:03:86:BC:7A:F0:CC:83:4B:DD:95:1B:47:4E
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tpla65yCDAOGvHrwzINL3ZUbR04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:1a:a1:5f:83:99:53:cd:c5:42:a0:d8:9a:f6:75:a9:29:
         e5:b8:de:7c:f2:e7:9d:de:2c:8a:7e:61:8a:4f:d0:e3:0e:0f:
         a6:c6:a1:9b:d6:79:d5:ce:df:8f:a5:e6:c3:3b:51:05:d6:c3:
         92:19:5c:6f:31:bf:46:c5:99:b4:5f:75:81:1c:c9:82:f1:ed:
         c6:e9:b5:af:5e:f3:be:22:73:b6:ef:07:e5:2d:05:3d:ff:cf:
         a0:06:e3:7b:6b:0e:85:74:54:0f:f4:5d:4a:b9:43:9a:eb:4b:
         35:53:0a:e3:34:79:a3:38:8c:bd:90:62:5d:0b:65:ec:69:0e:
         e5:64:3f:5d:f5:d4:8b:b6:39:fb:fc:51:42:8e:4b:45:f3:02:
         b7:6e:bb:a2:70:6e:1d:20:a1:9d:24:8c:f6:0a:ce:95:36:96:
         76:a5:03:e0:76:03:bd:01:d8:d0:b1:21:a1:c6:70:f5:34:95:
         26:e2:7c:9c:76:7a:9f:f3:d3:e0:21:14:a8:ef:23:83:f5:e1:
         92:13:e3:0e:b4:71:96:43:4d:81:60:44:82:6f:dd:74:75:67:
         bd:87:f7:26:c2:c3:0a:46:34:79:b1:bb:67:a9:a7:44:f0:b0:
         52:11:09:29:11:b6:fc:91:50:5d:4c:4c:d5:b8:64:e8:bc:03:
         7c:e0:03:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5bvvW10r0xrhfjyY0aGvzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwMzIwMTIwMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjk5NWFlYjljODIwYzAzODZiYzdhZjBjYzgzNGJkZDk1MWI0NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsCT6THol0rfR4TOg1YfzsV0Z+oF
FyiF3R/Sko7gP8yz/jY15xtKq9LzRm1ZurAFRdORaxfSOLJ3zEYBXQbLr0cJqOUI
INL8WIu7N/2rlOBD+8OZM5hCGCIdqD7namyAQxG1Y7LSCH4jlQ6lZeOFLl2x6RTt
g42iW9GdYbBUe0lKIoAnoiXFXO/mooVuR9DQwipKGwD8syww4muQ/8UqYIE79iFU
YoASKrL78PWkuzsFm5IfhP1DhKQXTdEF0Zv0YjoJfDXAQhQnZzVGUkVKLbG3nnjN
64LQUUif/cYgtjK249JCBIj90COekIJ2jZKdxPyvqHlNruvpkEaEtAAJaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLaZWuucggwDhrx68MyDS92VG0dOMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdHBsYTY1eUNEQU9Hdkhyd3pJTkwzWlViUjA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoPMA0G
CSqGSIb3DQEBCwUAA4IBAQAojBqhX4OZU83FQqDYmvZ1qSnluN588ued3iyKfmGK
T9DjDg+mxqGb1nnVzt+PpebDO1EF1sOSGVxvMb9GxZm0X3WBHMmC8e3G6bWvXvO+
InO27wflLQU9/8+gBuN7aw6FdFQP9F1KuUOa60s1UwrjNHmjOIy9kGJdC2XsaQ7l
ZD9d9dSLtjn7/FFCjktF8wK3bruicG4dIKGdJIz2Cs6VNpZ2pQPgdgO9AdjQsSGh
xnD1NJUm4nycdnqf89PgIRSo7yOD9eGSE+MOtHGWQ02BYESCb910dWe9h/cmwsMK
RjR5sbtnqadE8LBSEQkpEbb8kVBdTEzVuGTovAN84AMm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org