Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uweztekjHcP4w44VD6zwEFXdWN0.roa
File:                     uweztekjHcP4w44VD6zwEFXdWN0.roa (raw, json)
Hash identifier:          7R4ll0Y5Ka4+dXS8DLLxJQZ/EzsuTDXW+fiV6zjhqtM=
Subject key identifier:   BB:07:B3:B5:E9:23:1D:C3:F8:C3:8E:15:0F:AC:F0:10:55:DD:58:DD
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018FEE37399E7071698946BFB84CF4DFE709
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uweztekjHcP4w44VD6zwEFXdWN0.roa
Signing time:             Thu 06 Jun 2024 15:42:27 +0000
ROA not before:           Thu 06 Jun 2024 15:42:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214753
IP address blocks:        77.90.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 05:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ee:37:39:9e:70:71:69:89:46:bf:b8:4c:f4:df:e7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun  6 15:42:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb07b3b5e9231dc3f8c38e150facf01055dd58dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:5b:e5:d6:8a:d9:f3:b0:0e:3d:d5:71:33:
                    55:dc:e6:05:8f:55:75:f2:55:41:1d:c4:32:3d:f3:
                    39:d6:2a:81:12:46:57:6a:bb:d3:3d:11:13:f0:66:
                    00:ab:e5:7e:12:f0:99:68:6d:37:99:ab:27:ed:ab:
                    ce:02:01:5d:12:50:cb:92:34:40:6d:59:5c:f9:24:
                    e2:a2:31:e5:99:71:7d:d2:c2:54:b6:e4:30:d4:46:
                    1e:66:44:df:f8:84:25:49:b9:dc:7d:11:1b:3e:6f:
                    37:af:a9:19:31:65:64:5a:7c:bb:51:36:75:9c:d9:
                    5a:01:9e:fe:58:8c:2f:66:d4:03:67:1d:0d:2c:e4:
                    68:a4:55:d0:71:32:01:a9:9b:3c:36:2d:af:5f:e3:
                    97:01:09:7c:66:7f:cb:34:60:be:b5:68:6a:18:3e:
                    ee:97:7f:2a:f8:8e:df:3d:ee:86:00:5a:d5:dc:20:
                    29:b0:04:e4:81:35:3c:cd:dd:1c:c7:6c:34:5b:90:
                    cb:b1:f5:d8:af:f9:96:62:32:de:6c:fd:b2:b5:67:
                    a2:e3:a1:5c:c7:f1:71:2d:be:ae:b2:30:b9:15:1c:
                    92:6d:77:6a:38:43:98:3d:d9:3e:a1:b1:74:52:34:
                    ed:70:81:cf:5e:83:dc:a9:65:21:68:8c:e2:71:f8:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:B3:B5:E9:23:1D:C3:F8:C3:8E:15:0F:AC:F0:10:55:DD:58:DD
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uweztekjHcP4w44VD6zwEFXdWN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:43:36:10:ae:0b:ac:44:f5:e8:50:20:53:e0:70:74:f8:6c:
         cf:53:f9:3e:ec:03:5a:3e:66:42:a5:3c:d6:ce:77:5f:27:12:
         ec:07:0a:cb:db:7c:17:e2:91:dd:f1:87:b5:a1:e9:e6:92:34:
         70:7d:8c:49:a4:9e:c9:1f:53:45:42:8e:38:75:89:86:2c:90:
         49:33:b1:99:7d:80:72:f4:21:1d:bf:fb:38:4b:c6:63:4c:b7:
         39:ab:58:95:6c:0d:08:c0:38:91:3b:6e:a4:10:9e:ff:64:11:
         c3:90:dc:ef:08:94:b1:11:dd:12:45:72:11:c5:33:4f:d3:8f:
         0c:5f:42:9b:e0:df:76:e1:35:ae:c3:5d:62:86:55:76:c8:65:
         ba:ee:aa:d1:d6:27:1d:92:5e:21:0d:2b:9a:4d:b4:0b:66:d1:
         e6:60:a5:06:2b:be:e7:c7:66:e5:2a:ac:d6:30:31:2f:5d:ca:
         f6:01:0f:5f:b4:63:e1:1d:9e:57:03:f8:94:e8:5d:34:8c:86:
         32:3f:01:0e:cd:4f:7b:1c:e5:17:4c:ad:47:a3:d2:95:7c:55:
         f4:fb:53:e2:23:23:d3:aa:68:7c:54:de:04:b5:01:74:49:e2:
         ae:bd:99:95:65:78:38:1e:55:27:e9:00:36:17:76:45:52:32:
         11:3f:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:02:16 2024 by rpki-client on console-ams.rpki-client.org