Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vSc-FuPMheS-SEB34eejaEVhwSM.roa
File:                     vSc-FuPMheS-SEB34eejaEVhwSM.roa (raw, json)
Hash identifier:          bj2lM4klQGWVCfXXtpowgmRlUYbvnbBB2sGeoWr6FfM=
Subject key identifier:   BD:27:3E:16:E3:CC:85:E4:BE:48:40:77:E1:E7:A3:68:45:61:C1:23
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0191D305DE492431FA5867A08711EC9D36E5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vSc-FuPMheS-SEB34eejaEVhwSM.roa
Signing time:             Sun 08 Sep 2024 19:04:22 +0000
ROA not before:           Sun 08 Sep 2024 19:04:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215828
IP address blocks:        5.83.149.0/24 maxlen: 24
                          77.90.24.0/24 maxlen: 32
                          77.90.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 19:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d3:05:de:49:24:31:fa:58:67:a0:87:11:ec:9d:36:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Sep  8 19:04:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bd273e16e3cc85e4be484077e1e7a3684561c123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:c9:2c:c5:fe:d1:48:8b:82:ce:8e:8a:2b:
                    d8:8e:d7:2c:51:06:4f:77:5c:c3:67:c0:5b:39:45:
                    e5:b8:6b:0a:8c:af:10:c8:4e:3a:c6:4b:c4:22:39:
                    e1:a8:c4:a0:31:17:e6:35:68:75:05:d8:3c:4b:0b:
                    ee:23:fd:77:93:99:eb:05:24:16:9a:d6:7b:67:98:
                    ec:3f:65:9d:fc:38:65:a5:38:e6:9e:70:af:8c:8a:
                    a5:bb:01:0c:51:18:72:52:fb:4f:af:14:74:0f:1b:
                    3e:e1:9d:d8:ff:f3:b0:ff:26:e0:ff:18:c1:eb:5e:
                    d0:ac:0a:f5:93:57:78:ec:a2:40:09:fc:b6:3a:28:
                    ca:3c:c1:e9:05:77:e9:99:9c:f7:d1:47:11:69:23:
                    08:ab:97:2c:29:53:fe:60:41:a2:42:c4:16:bc:03:
                    2f:7c:80:48:d9:49:89:04:2d:a0:bd:44:23:a2:1c:
                    3e:06:5a:e2:83:ad:21:4c:d8:c2:70:df:70:bb:25:
                    c4:cf:41:f3:f4:aa:a5:75:bb:47:3a:b3:71:52:27:
                    2f:48:36:d2:57:7f:e8:48:ae:2e:8d:22:a2:73:7c:
                    20:ab:b6:b9:1b:32:57:0c:44:dd:3b:92:cc:70:7d:
                    85:39:b8:55:e5:33:95:7b:89:55:d9:08:b8:f0:5d:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:3E:16:E3:CC:85:E4:BE:48:40:77:E1:E7:A3:68:45:61:C1:23
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vSc-FuPMheS-SEB34eejaEVhwSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.149.0/24
                  77.90.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:d3:51:80:57:6a:0b:fd:c8:b2:a8:c6:8d:e2:4a:d6:82:
         c3:1a:49:e8:ac:55:0e:42:03:39:0f:aa:50:87:a0:cb:ad:62:
         19:94:7c:1a:6e:ce:b7:0a:4b:47:04:a0:52:84:8f:41:d4:ff:
         74:b7:b5:b5:83:f1:88:93:07:fa:e7:ad:00:ad:1c:36:93:2c:
         ff:ab:34:8f:38:f4:5c:8b:22:2f:38:61:0e:a8:df:fa:79:7e:
         ed:2a:95:5a:5e:66:64:a9:39:b5:ae:9d:59:0e:e7:b5:b3:8b:
         fb:a4:7f:b9:7a:c0:4f:2e:45:47:d3:d6:21:51:21:49:0b:26:
         b5:e1:97:fa:92:40:4e:c0:ed:e9:7f:a5:da:8b:f2:07:c4:6c:
         07:95:8f:2b:46:48:15:f2:0c:16:9e:11:85:a2:1e:9b:e7:a3:
         c2:e9:ca:18:c6:c5:83:24:2c:09:33:e0:27:37:66:9d:3d:a4:
         cb:81:85:bb:37:94:98:39:b8:00:b5:4e:c7:4a:f2:71:00:e8:
         c5:8f:7d:a6:d5:84:4b:a7:16:3c:a5:79:d8:19:e4:b4:e8:37:
         0e:45:54:3d:3b:47:c6:22:5d:2c:76:26:62:1a:7e:4c:0a:7a:
         98:df:4c:43:b1:17:5f:02:32:e0:0c:0d:10:ee:4f:8e:b0:a0:
         cf:64:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 21:04:31 2024 by rpki-client on console-ams.rpki-client.org