Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uAQYhJRN0_q3iAd17txgCmjQe8Q.roa
File:                     uAQYhJRN0_q3iAd17txgCmjQe8Q.roa (raw, json)
Hash identifier:          2/7xmQz6wTwBKFJ60fp6BENa5YHQtIg2wIQz4ZkCYEk=
Subject key identifier:   B8:04:18:84:94:4D:D3:FA:B7:88:07:75:EE:DC:60:0A:68:D0:7B:C4
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01904A2FF1E82CBE68CA8F6D70490A81F637
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uAQYhJRN0_q3iAd17txgCmjQe8Q.roa
Signing time:             Mon 24 Jun 2024 12:19:34 +0000
ROA not before:           Mon 24 Jun 2024 12:19:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203446
IP address blocks:        77.90.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 12:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4a:2f:f1:e8:2c:be:68:ca:8f:6d:70:49:0a:81:f6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun 24 12:19:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b8041884944dd3fab7880775eedc600a68d07bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:1e:e3:6e:dd:6f:3e:ee:fd:48:66:0a:06:
                    b4:29:b1:fd:7f:df:5f:e3:94:60:34:3d:f3:0c:60:
                    8e:1c:f5:49:f8:2d:07:ad:30:1c:a7:ba:f4:f2:b3:
                    52:81:63:c9:19:73:12:c6:7c:87:bf:32:32:42:e1:
                    e3:f7:d5:75:ab:95:35:6d:7c:ca:c0:b0:07:6c:b3:
                    b0:3b:66:62:17:85:3a:f8:8d:67:6b:aa:99:d0:3a:
                    67:33:2a:a3:5c:aa:4b:89:8d:c9:1c:b8:fa:98:46:
                    5f:db:c5:cd:ad:8d:b9:f7:e5:21:c6:a0:ef:3a:3e:
                    e3:ad:39:c6:d5:87:6f:6d:1a:1c:91:9e:ff:1a:16:
                    e7:da:62:b0:a8:f8:1b:99:7f:b7:b8:c2:12:a7:05:
                    bc:07:3c:12:33:01:8b:28:4c:5b:c7:4b:57:47:6e:
                    d0:3a:ab:b2:f3:78:81:71:2c:96:33:99:9f:2a:4c:
                    8e:98:82:ef:38:82:10:75:88:4e:b9:50:6b:37:cf:
                    5b:81:54:61:bc:8e:39:64:7b:bd:53:88:88:be:b4:
                    a0:78:c1:0f:b2:c9:1f:65:91:8f:0a:9e:03:34:dc:
                    10:0b:03:c4:6e:9e:00:7f:73:a2:8a:4c:ff:88:5e:
                    25:40:b5:2e:67:e2:cf:dc:31:78:b6:ab:01:ea:48:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:04:18:84:94:4D:D3:FA:B7:88:07:75:EE:DC:60:0A:68:D0:7B:C4
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uAQYhJRN0_q3iAd17txgCmjQe8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:7b:be:d4:29:00:4e:cd:fc:33:03:86:d2:de:7d:96:6e:
         de:51:45:b0:4f:5a:90:55:78:be:b2:dc:ab:8e:3f:04:a4:9a:
         f8:59:e6:ab:a0:19:da:ae:cf:2f:c0:ca:d9:3a:28:06:58:eb:
         46:e6:41:86:b2:36:e3:47:38:6d:f2:e7:41:2d:e3:5e:91:2a:
         c7:5f:06:30:c1:c1:47:fd:85:da:50:18:a2:96:61:df:0d:b6:
         92:e3:e7:a7:8f:a9:70:6c:bb:d5:41:ca:d1:7c:2b:e3:a8:f8:
         2f:52:94:e7:83:f7:ed:5f:a3:f4:2e:7b:e0:0b:5f:bc:37:e5:
         ef:e6:e5:27:d1:b3:b6:24:67:55:e1:49:92:d2:06:e9:2b:b6:
         20:9b:7f:18:fd:f0:6c:c0:70:cf:0e:91:c8:e2:fb:b6:1b:86:
         ac:c5:e1:c5:dc:a1:66:15:ab:8f:5c:7b:08:52:e4:33:61:80:
         e8:2b:68:fa:8d:c2:f0:f4:32:3a:df:81:bb:84:33:b5:ab:16:
         c7:d3:33:4c:43:b4:13:da:29:1e:8d:b1:b4:76:41:38:65:94:
         98:bd:c4:e7:b6:f6:47:dc:f5:bc:21:cb:a3:10:51:8f:7d:ed:
         a6:92:34:5f:ab:a9:fd:9a:0e:9e:8e:e9:01:c6:37:52:e4:01:
         71:92:23:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBKL/HoLL5oyo9tcEkKgfY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNjI0MTIxOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODA0MTg4NDk0NGRkM2ZhYjc4ODA3NzVlZWRjNjAwYTY4ZDA3YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK0e427dbz7u/UhmCga0KbH9f99f
45RgND3zDGCOHPVJ+C0HrTAcp7r08rNSgWPJGXMSxnyHvzIyQuHj99V1q5U1bXzK
wLAHbLOwO2ZiF4U6+I1na6qZ0DpnMyqjXKpLiY3JHLj6mEZf28XNrY259+UhxqDv
Oj7jrTnG1YdvbRockZ7/Ghbn2mKwqPgbmX+3uMISpwW8BzwSMwGLKExbx0tXR27Q
Oquy83iBcSyWM5mfKkyOmILvOIIQdYhOuVBrN89bgVRhvI45ZHu9U4iIvrSgeMEP
sskfZZGPCp4DNNwQCwPEbp4Af3Oiikz/iF4lQLUuZ+LP3DF4tqsB6kgdQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgEGISUTdP6t4gHde7cYApo0HvEMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdUFRWWhKUk4wX3EzaUFkMTd0eGdDbWpRZThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoEMA0G
CSqGSIb3DQEBCwUAA4IBAQA+9Hu+1CkATs38MwOG0t59lm7eUUWwT1qQVXi+styr
jj8EpJr4WearoBnars8vwMrZOigGWOtG5kGGsjbjRzht8udBLeNekSrHXwYwwcFH
/YXaUBiilmHfDbaS4+enj6lwbLvVQcrRfCvjqPgvUpTng/ftX6P0LnvgC1+8N+Xv
5uUn0bO2JGdV4UmS0gbpK7Ygm38Y/fBswHDPDpHI4vu2G4asxeHF3KFmFauPXHsI
UuQzYYDoK2j6jcLw9DI634G7hDO1qxbH0zNMQ7QT2ikejbG0dkE4ZZSYvcTntvZH
3PW8IcujEFGPfe2mkjRfq6n9mg6ejukBxjdS5AFxkiPS
-----END CERTIFICATE-----
Generated at Wed Oct 30 16:45:47 2024 by rpki-client on console-ams.rpki-client.org