Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Z3SbboNfpCEf8wCMSClQExMn370.roa
File:                     Z3SbboNfpCEf8wCMSClQExMn370.roa (raw, json)
Hash identifier:          QX6unckdR0NtL6AXRH4RLJ4a9TcGIGKllK5C5WCG7A4=
Subject key identifier:   67:74:9B:6E:83:5F:A4:21:1F:F3:00:8C:48:29:50:13:13:27:DF:BD
Certificate issuer:       /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial:       018EB83F35E5B7B9557D0F976F1A56174930
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Z3SbboNfpCEf8wCMSClQExMn370.roa
Signing time:             Sun 07 Apr 2024 11:08:54 +0000
ROA not before:           Sun 07 Apr 2024 11:08:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59895
IP address blocks:        77.93.157.0/24 maxlen: 24
                          89.28.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 07:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:b8:3f:35:e5:b7:b9:55:7d:0f:97:6f:1a:56:17:49:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
        Validity
            Not Before: Apr  7 11:08:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67749b6e835fa4211ff3008c482950131327dfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:24:ab:bf:ea:4b:97:3c:1a:69:b6:a7:01:
                    3f:c8:09:99:34:a4:4a:79:67:01:74:eb:c5:7e:40:
                    f9:04:c1:10:d2:03:f4:fd:48:c0:41:59:c4:15:4e:
                    ac:42:0e:19:5f:76:4d:e5:7b:e6:98:e2:be:7c:d3:
                    ff:49:d6:63:30:d1:89:7c:55:ad:da:9b:6b:18:9c:
                    85:92:a5:c7:bd:86:3a:7a:e3:0a:00:19:7d:b8:7e:
                    ec:4f:26:b5:0b:22:75:80:ac:20:fc:c3:bc:80:b0:
                    13:37:01:a1:fe:96:ab:de:00:9c:38:24:99:d5:48:
                    55:42:a0:f8:b7:00:ab:e9:3c:c2:e9:02:af:a8:6d:
                    e5:c2:9e:86:a1:10:46:da:5f:7c:83:2a:bd:e4:ca:
                    e5:6b:0e:92:9b:36:1c:36:f4:a4:a0:bd:a2:af:35:
                    9c:5f:e4:55:e2:08:38:2b:14:cd:0b:22:42:be:91:
                    49:1b:ef:a9:7a:68:96:c0:1c:82:58:7e:a6:0b:9c:
                    c6:b3:66:82:e2:6f:d6:ad:04:c5:ca:81:3f:86:04:
                    cc:2e:c2:5d:7c:0d:8d:6b:c2:ac:6d:a0:84:0b:c3:
                    59:8e:61:d7:6a:a4:f2:d2:a4:83:17:fa:19:b3:9f:
                    97:bb:d7:9b:e8:ff:25:a3:7b:f9:7a:4e:f9:a6:ae:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:74:9B:6E:83:5F:A4:21:1F:F3:00:8C:48:29:50:13:13:27:DF:BD
            X509v3 Authority Key Identifier:
                keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/Z3SbboNfpCEf8wCMSClQExMn370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.93.157.0/24
                  89.28.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:33:d5:d6:fa:9f:d4:64:af:bf:d6:d1:7a:fe:13:1f:8e:aa:
         b2:7f:e0:2e:68:28:57:d3:e0:d0:d1:8b:c7:88:a3:74:d1:16:
         8b:78:ea:67:95:62:6b:34:46:ef:3b:fa:d9:35:f8:c6:01:9e:
         e7:0f:23:72:32:a7:bd:f3:3a:41:88:fa:37:27:89:30:60:dc:
         fe:d2:07:4a:73:c1:21:d9:9c:d5:54:1a:0b:9b:ad:2d:48:70:
         83:d3:db:6f:04:cc:05:77:53:25:7c:43:d8:65:ad:75:28:c0:
         cf:12:5a:a3:d0:d6:6b:76:52:ad:ca:45:b0:ab:19:41:c4:34:
         a9:e9:23:2d:a5:e0:6d:97:09:e0:1e:6f:27:b4:50:a9:8f:d6:
         c6:59:10:03:b7:24:47:a7:4e:bc:20:33:09:ba:53:bd:30:97:
         a9:a0:65:76:74:bc:52:a8:37:29:74:12:94:8e:d7:14:17:02:
         f0:d8:08:7d:f2:61:70:3d:bd:c3:00:0e:a4:27:fd:fa:a5:a4:
         f8:a9:de:ae:6e:67:52:9e:2c:a0:01:69:a9:3d:9a:2e:6f:5d:
         d0:6e:95:df:5d:14:b6:6e:f5:d9:12:1d:33:34:d9:15:ad:5f:
         4e:07:15:2b:a2:72:f9:ad:b6:b0:da:b9:9e:aa:2c:c7:2e:46:
         f4:7f:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org