Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/NJ_P57sL1iLCiELk6sbE09bwkUM.roa
File:                     NJ_P57sL1iLCiELk6sbE09bwkUM.roa (raw, json)
Hash identifier:          7rAPr2uo7Gkv/ym7n92J/NDFSkVZyfHNUQWNlOlFCOk=
Subject key identifier:   34:9F:CF:E7:BB:0B:D6:22:C2:88:42:E4:EA:C6:C4:D3:D6:F0:91:43
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       0188FBFCEF760C6F43D98AF0A2A9ED863CFD
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/NJ_P57sL1iLCiELk6sbE09bwkUM.roa
Signing time:             Tue 27 Jun 2023 08:33:57 +0000
ROA not before:           Tue 27 Jun 2023 08:33:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        87.248.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jul 2023 09:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fb:fc:ef:76:0c:6f:43:d9:8a:f0:a2:a9:ed:86:3c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Jun 27 08:33:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=349fcfe7bb0bd622c28842e4eac6c4d3d6f09143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:0a:8a:08:1e:90:bf:5e:2c:cc:86:b2:a9:
                    b1:64:54:35:4d:38:c0:0b:05:0d:25:e9:93:2f:d9:
                    f1:3f:be:16:90:93:df:b0:42:13:f2:52:1c:c8:41:
                    74:9c:08:8d:09:52:10:32:6f:85:2a:f5:de:98:5a:
                    f6:4b:f9:94:dc:7d:07:ae:be:df:e0:c3:cd:92:ce:
                    e9:b9:2c:e8:6f:8c:41:ca:7e:9f:26:03:3a:ef:bc:
                    70:98:35:d9:3c:1c:75:de:66:a6:e6:e5:44:bf:39:
                    c3:5c:b8:ca:89:be:6a:f1:71:1f:12:8b:06:cc:b1:
                    3d:72:44:c3:d3:61:4c:9e:19:07:ba:c5:61:46:f8:
                    c9:08:c0:e4:7b:fe:b2:d7:8a:0e:22:38:6b:60:4b:
                    12:7e:c0:ae:bd:01:e6:e1:84:98:5c:94:e4:58:67:
                    47:8f:ee:ac:3c:ac:aa:83:08:92:c5:31:8b:8f:6d:
                    d6:33:79:a3:56:38:4b:9b:ff:52:b3:bd:c1:7a:b9:
                    87:fc:76:c1:85:06:3b:2b:ea:08:ea:9b:c7:db:f6:
                    8d:c3:56:80:50:1c:4b:26:ac:0c:da:69:4a:63:bf:
                    22:c4:43:eb:c6:0c:46:7f:3a:1b:b9:0c:fd:79:43:
                    97:72:73:01:a1:da:ee:dc:e2:c6:19:c3:1d:e0:f1:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9F:CF:E7:BB:0B:D6:22:C2:88:42:E4:EA:C6:C4:D3:D6:F0:91:43
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/NJ_P57sL1iLCiELk6sbE09bwkUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:ee:90:34:e7:46:e9:f5:8f:3d:bc:21:0a:23:8b:4a:dc:
         7d:50:29:3f:7f:8c:ff:8f:c0:c8:86:73:85:00:75:59:e3:30:
         50:b6:8e:fc:28:39:82:55:9e:58:b1:d6:d0:fe:62:f4:af:33:
         12:e5:8e:7f:76:f1:66:50:81:7b:ed:6e:d5:fd:c5:64:af:2b:
         26:26:88:c0:70:a2:fc:01:b0:ba:c5:ea:6c:b8:dd:5b:df:88:
         f8:c3:47:56:26:e4:c0:86:c3:2a:ec:1f:49:95:24:bb:eb:45:
         f4:ca:a7:e2:38:d2:ad:11:e5:43:99:48:2a:91:05:ce:c8:04:
         d6:cf:5b:48:b0:e9:79:61:c0:82:a9:2d:c9:64:5d:29:bf:1f:
         85:11:f5:ea:db:ab:4d:d1:11:26:22:07:63:d2:bf:6a:6d:2b:
         c0:4a:dd:6e:b9:0b:0d:3f:96:01:fd:b7:ec:08:3b:91:62:7c:
         29:99:c2:50:11:d9:fa:b9:ba:0e:cb:c1:06:4b:08:6b:38:28:
         16:ff:e0:4b:a7:6a:5d:fe:89:79:40:61:5a:47:b2:ac:21:af:
         3b:98:dc:6f:89:d8:61:71:16:6c:cc:0f:74:c4:e8:e7:ef:77:
         06:91:61:ca:02:7b:da:9d:01:5d:c7:56:97:8d:88:86:69:4f:
         77:46:94:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj7/O92DG9D2Yrwoqnthjz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwNjI3MDgzMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDlmY2ZlN2JiMGJkNjIyYzI4ODQyZTRlYWM2YzRkM2Q2ZjA5MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAKiggekL9eLMyGsqmxZFQ1TTjA
CwUNJemTL9nxP74WkJPfsEIT8lIcyEF0nAiNCVIQMm+FKvXemFr2S/mU3H0Hrr7f
4MPNks7puSzob4xByn6fJgM677xwmDXZPBx13mam5uVEvznDXLjKib5q8XEfEosG
zLE9ckTD02FMnhkHusVhRvjJCMDke/6y14oOIjhrYEsSfsCuvQHm4YSYXJTkWGdH
j+6sPKyqgwiSxTGLj23WM3mjVjhLm/9Ss73BermH/HbBhQY7K+oI6pvH2/aNw1aA
UBxLJqwM2mlKY78ixEPrxgxGfzobuQz9eUOXcnMBodru3OLGGcMd4PHFBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDSfz+e7C9YiwohC5OrGxNPW8JFDMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvTkpfUDU3c0wxaUxDaUVMazZzYkUwOWJ3a1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iXMA0G
CSqGSIb3DQEBCwUAA4IBAQA7qu6QNOdG6fWPPbwhCiOLStx9UCk/f4z/j8DIhnOF
AHVZ4zBQto78KDmCVZ5YsdbQ/mL0rzMS5Y5/dvFmUIF77W7V/cVkrysmJojAcKL8
AbC6xepsuN1b34j4w0dWJuTAhsMq7B9JlSS760X0yqfiONKtEeVDmUgqkQXOyATW
z1tIsOl5YcCCqS3JZF0pvx+FEfXq26tN0REmIgdj0r9qbSvASt1uuQsNP5YB/bfs
CDuRYnwpmcJQEdn6uboOy8EGSwhrOCgW/+BLp2pd/ol5QGFaR7KsIa87mNxvidhh
cRZszA90xOjn73cGkWHKAnvanQFdx1aXjYiGaU93RpTg
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org