Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/SRcEAHJIoGi2S2hGCpXeu_ZoP-0.roa
File:                     SRcEAHJIoGi2S2hGCpXeu_ZoP-0.roa (raw, json)
Hash identifier:          LmPJqZuyVO5dFEbNMni0BtHiajv4g37ZMEDFxDnq6KI=
Subject key identifier:   49:17:04:00:72:48:A0:68:B6:4B:68:46:0A:95:DE:BB:F6:68:3F:ED
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       018CA22FEA5C1BFBD98CB32BDBB08F4FF13C
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/SRcEAHJIoGi2S2hGCpXeu_ZoP-0.roa
Signing time:             Mon 25 Dec 2023 18:14:58 +0000
ROA not before:           Mon 25 Dec 2023 18:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215826
IP address blocks:        77.91.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a2:2f:ea:5c:1b:fb:d9:8c:b3:2b:db:b0:8f:4f:f1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Dec 25 18:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=491704007248a068b64b68460a95debbf6683fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:07:32:0c:5e:59:2d:4e:df:36:5e:95:c3:
                    2a:13:10:2a:ed:7d:5b:46:f3:3a:e0:bf:30:64:14:
                    80:b8:fc:c3:a3:bb:36:6b:aa:13:22:5e:84:af:f2:
                    78:b0:06:fd:65:b4:51:c9:17:47:80:41:83:63:bf:
                    a6:c0:6a:fd:ba:10:4d:d6:87:b5:4b:ca:5d:ea:b6:
                    53:e7:97:ec:c0:e5:d0:5d:e2:8a:d0:b6:96:92:8d:
                    06:d1:89:19:b5:3b:fe:91:e8:ed:44:7c:7a:1c:ed:
                    6d:ed:8a:35:6d:d6:78:3d:61:ea:98:b2:f0:68:c5:
                    24:47:be:03:8e:a0:9e:ac:e2:e4:00:97:85:3f:9c:
                    c7:be:91:63:c7:f8:72:fc:7e:c2:5d:0c:5b:45:73:
                    fa:76:00:4d:f9:a3:e5:cb:6a:24:b4:bb:50:a8:9a:
                    62:09:d2:3a:0c:d4:7b:54:b9:57:ce:56:96:63:13:
                    64:a1:b0:0e:09:b7:45:6f:49:88:58:c5:9e:2f:38:
                    8b:80:00:d1:4b:19:31:48:ed:47:87:7b:89:cf:a3:
                    fc:ff:26:1a:58:23:5a:7a:07:66:30:08:2b:8a:21:
                    d6:c3:ed:bb:c3:37:42:75:9e:8f:6f:4b:f4:dc:5b:
                    66:18:e8:ff:b0:3c:0b:1f:71:f6:71:3e:f9:77:a8:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:04:00:72:48:A0:68:B6:4B:68:46:0A:95:DE:BB:F6:68:3F:ED
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/SRcEAHJIoGi2S2hGCpXeu_ZoP-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:44:e2:4d:6d:2c:1e:51:44:f0:e6:ec:8b:81:7f:fa:79:
         0d:88:72:f8:87:00:bc:2f:68:6f:db:52:4e:bb:78:9e:d9:5a:
         0a:cb:58:32:d6:85:a3:94:17:66:b3:fe:0e:ac:6a:98:d0:e0:
         6b:9a:cb:65:c6:48:73:f1:23:86:a6:99:43:5a:cc:ff:af:02:
         dd:5f:21:3d:43:dd:7b:ee:2e:ab:c1:db:8d:64:79:30:69:33:
         a5:78:13:6c:3f:88:9c:c7:9b:93:54:65:5b:13:83:bd:72:b5:
         47:10:00:bc:0b:7e:66:0f:dd:87:8a:d9:86:c1:96:3c:9f:e7:
         c1:a9:6d:47:0e:0a:a6:6f:2c:85:de:af:1f:94:2f:5f:8e:e5:
         c6:86:4b:f4:7a:0f:a8:37:e3:a1:6a:b2:ff:7f:3e:c2:b2:7c:
         4a:07:61:8d:5a:22:63:9b:00:36:1a:d7:b7:af:2f:c6:1b:5e:
         8f:dc:3d:1e:57:63:07:89:d3:1e:e6:50:96:03:ed:cf:5a:41:
         b8:47:32:1e:e0:0e:ee:22:f4:56:e7:b3:6a:bf:70:cf:f3:03:
         7b:d4:75:f8:36:f5:64:58:9e:fb:b4:ce:c5:ec:df:84:05:b0:
         06:2b:7c:21:a3:ea:5a:27:39:dc:b9:02:d2:27:be:c7:fa:92:
         6e:69:d3:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyiL+pcG/vZjLMr27CPT/E8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjMxMjI1MTgxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTE3MDQwMDcyNDhhMDY4YjY0YjY4NDYwYTk1ZGViYmY2NjgzZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOwHMgxeWS1O3zZelcMqExAq7X1b
RvM64L8wZBSAuPzDo7s2a6oTIl6Er/J4sAb9ZbRRyRdHgEGDY7+mwGr9uhBN1oe1
S8pd6rZT55fswOXQXeKK0LaWko0G0YkZtTv+kejtRHx6HO1t7Yo1bdZ4PWHqmLLw
aMUkR74DjqCerOLkAJeFP5zHvpFjx/hy/H7CXQxbRXP6dgBN+aPly2oktLtQqJpi
CdI6DNR7VLlXzlaWYxNkobAOCbdFb0mIWMWeLziLgADRSxkxSO1Hh3uJz6P8/yYa
WCNaegdmMAgriiHWw+27wzdCdZ6Pb0v03FtmGOj/sDwLH3H2cT75d6jGAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEkXBABySKBotktoRgqV3rv2aD/tMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvU1JjRUFISklvR2kyUzJoR0NwWGV1X1pvUC0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVthMA0G
CSqGSIb3DQEBCwUAA4IBAQCK4kTiTW0sHlFE8Obsi4F/+nkNiHL4hwC8L2hv21JO
u3ie2VoKy1gy1oWjlBdms/4OrGqY0OBrmstlxkhz8SOGpplDWsz/rwLdXyE9Q917
7i6rwduNZHkwaTOleBNsP4icx5uTVGVbE4O9crVHEAC8C35mD92HitmGwZY8n+fB
qW1HDgqmbyyF3q8flC9fjuXGhkv0eg+oN+OharL/fz7CsnxKB2GNWiJjmwA2Gte3
ry/GG16P3D0eV2MHidMe5lCWA+3PWkG4RzIe4A7uIvRW57Nqv3DP8wN71HX4NvVk
WJ77tM7F7N+EBbAGK3who+paJzncuQLSJ77H+pJuadOV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:54 2024 by rpki-client on console-ams.rpki-client.org