Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zbRFg84s0rnfusbBa0rhStF26Ug.roa
File:                     zbRFg84s0rnfusbBa0rhStF26Ug.roa (raw, json)
Hash identifier:          52QmND0ONBUDKaumWxssFfnBR0JoDZtmmb/afy/0GhE=
Subject key identifier:   CD:B4:45:83:CE:2C:D2:B9:DF:BA:C6:C1:6B:4A:E1:4A:D1:76:E9:48
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       018FDBBCC28FBBCD67582F93E7186139EB45
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zbRFg84s0rnfusbBa0rhStF26Ug.roa
Signing time:             Mon 03 Jun 2024 01:35:31 +0000
ROA not before:           Mon 03 Jun 2024 01:35:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214902
IP address blocks:        77.90.6.0/24 maxlen: 24
                          77.90.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 02:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:db:bc:c2:8f:bb:cd:67:58:2f:93:e7:18:61:39:eb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun  3 01:35:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cdb44583ce2cd2b9dfbac6c16b4ae14ad176e948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:ba:cb:0e:b0:3e:66:95:c7:18:11:95:94:
                    dd:70:99:a1:bb:22:37:63:69:eb:9b:07:1c:05:29:
                    96:2d:fc:b8:7c:cb:f2:27:2e:e0:7e:43:36:20:32:
                    35:10:fa:a9:a4:f5:f1:f6:6d:6e:8a:38:5f:c8:41:
                    f0:23:6f:ed:88:67:8e:b2:d8:a9:db:40:00:35:9f:
                    1d:b2:ac:b5:d4:f1:29:61:13:57:3e:72:b5:cc:33:
                    4f:59:8a:92:9e:95:1f:0e:83:69:80:78:e7:35:50:
                    5f:b6:e5:27:84:0a:ea:07:a0:34:88:db:64:89:d2:
                    c9:a2:ea:ab:73:82:48:7d:48:d9:23:fd:96:b9:38:
                    88:60:f7:74:31:9c:b6:d6:83:79:83:5e:30:35:95:
                    f5:b3:5a:5a:51:50:4b:9a:10:17:e2:56:5c:62:63:
                    2f:4d:9c:a0:9e:13:4c:5f:bf:60:aa:78:a8:76:16:
                    40:f4:a1:e3:84:03:da:43:08:9d:23:ac:52:2b:ea:
                    ff:74:42:3f:4c:cd:a6:c5:f9:6c:d4:68:2b:cc:7b:
                    07:d9:57:0e:1e:69:0a:5a:17:fe:63:55:d3:d4:a1:
                    6e:e7:81:40:c6:a7:79:12:ac:cf:5d:77:93:58:45:
                    26:87:82:9c:a6:6f:93:d3:0d:30:a7:86:25:44:8b:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B4:45:83:CE:2C:D2:B9:DF:BA:C6:C1:6B:4A:E1:4A:D1:76:E9:48
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zbRFg84s0rnfusbBa0rhStF26Ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.6.0/24
                  77.90.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:94:6d:9d:ba:03:ab:2f:d6:2b:b2:ab:34:d4:15:f5:48:9c:
         cd:56:ba:d5:a1:55:cb:56:a5:a8:3f:11:1d:85:a0:80:3f:ea:
         51:df:9b:98:97:41:7f:90:08:7c:a6:02:70:7e:bf:96:c3:cf:
         86:60:27:9d:10:9b:e0:10:bc:a2:fe:33:dd:15:ce:c7:d0:8a:
         7e:47:77:e4:3f:79:46:3b:ff:c8:da:17:92:08:1b:7a:10:c4:
         70:e8:5e:08:e3:38:fd:eb:03:a6:6b:10:a1:d8:91:10:53:ec:
         ad:f3:d5:d6:b3:5e:22:9d:ad:95:ce:57:47:4b:2b:04:c5:90:
         0f:43:91:c1:b2:1f:44:44:c6:e3:68:ab:3b:ed:72:39:18:80:
         22:9d:bf:3d:b7:2c:5c:4b:0c:d6:61:6c:7a:90:b0:0e:17:40:
         4b:3a:96:32:53:8b:c0:37:c9:91:b2:71:65:1a:eb:78:f6:78:
         0b:0e:b8:bf:d1:00:d2:ba:7b:6b:76:1d:9a:e6:15:bb:31:a0:
         56:fd:79:70:86:a9:c7:7f:c1:26:a0:65:46:ad:2d:c1:9c:cb:
         e0:d1:e2:17:30:ee:de:1e:9b:71:0f:c6:53:6d:b9:96:70:2e:
         80:43:30:11:a5:3e:69:3a:68:de:f6:b0:7b:b1:83:f6:82:eb:
         cf:44:1e:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/bvMKPu81nWC+T5xhhOetFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNjAzMDEzNTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGI0NDU4M2NlMmNkMmI5ZGZiYWM2YzE2YjRhZTE0YWQxNzZlOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rm6yw6wPmaVxxgRlZTdcJmhuyI3
Y2nrmwccBSmWLfy4fMvyJy7gfkM2IDI1EPqppPXx9m1uijhfyEHwI2/tiGeOstip
20AANZ8dsqy11PEpYRNXPnK1zDNPWYqSnpUfDoNpgHjnNVBftuUnhArqB6A0iNtk
idLJouqrc4JIfUjZI/2WuTiIYPd0MZy21oN5g14wNZX1s1paUVBLmhAX4lZcYmMv
TZygnhNMX79gqniodhZA9KHjhAPaQwidI6xSK+r/dEI/TM2mxfls1GgrzHsH2VcO
HmkKWhf+Y1XT1KFu54FAxqd5EqzPXXeTWEUmh4Kcpm+T0w0wp4YlRIuCqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM20RYPOLNK537rGwWtK4UrRdulIMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvemJSRmc4NHMwcm5mdXNiQmEwcmhTdEYyNlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoGAwQA
TVoTMA0GCSqGSIb3DQEBCwUAA4IBAQCflG2dugOrL9Yrsqs01BX1SJzNVrrVoVXL
VqWoPxEdhaCAP+pR35uYl0F/kAh8pgJwfr+Ww8+GYCedEJvgELyi/jPdFc7H0Ip+
R3fkP3lGO//I2heSCBt6EMRw6F4I4zj96wOmaxCh2JEQU+yt89XWs14ina2VzldH
SysExZAPQ5HBsh9ERMbjaKs77XI5GIAinb89tyxcSwzWYWx6kLAOF0BLOpYyU4vA
N8mRsnFlGut49ngLDri/0QDSuntrdh2a5hW7MaBW/XlwhqnHf8EmoGVGrS3BnMvg
0eIXMO7eHptxD8ZTbbmWcC6AQzARpT5pOmje9rB7sYP2guvPRB59
-----END CERTIFICATE-----
Generated at Mon Jul 29 05:18:11 2024 by rpki-client on console-fra.rpki-client.org