Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/g6DyC-cZse5Zdw1jC60sNBZpvd4.roa
File:                     g6DyC-cZse5Zdw1jC60sNBZpvd4.roa (raw, json)
Hash identifier:          WI8GY+3MOGZNsPfBQ98wJOOeYClmUhJ3hDHWbstB+tI=
Subject key identifier:   83:A0:F2:0B:E7:19:B1:EE:59:77:0D:63:0B:AD:2C:34:16:69:BD:DE
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       018B5E6282F8713502ABFA71B99C64F9B73C
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/g6DyC-cZse5Zdw1jC60sNBZpvd4.roa
Signing time:             Mon 23 Oct 2023 21:13:16 +0000
ROA not before:           Mon 23 Oct 2023 21:13:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198178
IP address blocks:        77.91.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5e:62:82:f8:71:35:02:ab:fa:71:b9:9c:64:f9:b7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Oct 23 21:13:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=83a0f20be719b1ee59770d630bad2c341669bdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9e:a6:50:cc:f5:e2:67:34:d9:f9:02:1c:56:
                    01:82:dc:c5:5a:53:a3:86:cf:57:48:ae:86:81:ba:
                    2c:6c:8e:3b:1f:fc:70:06:2e:69:6b:09:ba:d9:8c:
                    d5:23:b9:71:82:1f:d5:e1:50:ff:7a:0f:d1:e5:6b:
                    9b:f5:7d:2c:2e:bc:a2:4f:49:c2:37:19:c7:2d:75:
                    1b:5d:1f:ab:bc:53:3c:9e:58:b1:f3:35:20:01:e1:
                    11:0d:f9:ed:48:59:5f:18:b3:74:2a:75:e4:0d:78:
                    66:59:19:52:39:d5:74:43:7f:56:c2:cb:f8:1d:96:
                    fd:21:d1:9e:d0:8e:2c:65:67:08:c8:13:f7:54:3c:
                    b9:16:84:d4:ef:58:bd:58:a1:d4:71:5f:6a:27:10:
                    01:b1:94:78:d4:97:ae:bf:86:d2:55:2f:29:b3:21:
                    24:9a:58:35:d5:2e:15:e5:0b:03:78:ae:3c:ad:da:
                    45:ee:6c:25:e7:91:c6:66:b8:14:aa:e6:d0:3f:b8:
                    23:fa:25:77:40:d1:17:2e:eb:1f:13:5a:9e:53:1b:
                    d3:df:12:7a:40:dc:92:4f:3b:1a:7f:7c:30:da:97:
                    bb:e7:ff:1a:89:26:f4:2a:23:00:75:4f:7a:b3:f5:
                    74:f7:f6:5a:76:76:2e:ce:3e:cb:f4:bc:1f:a4:ba:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:F2:0B:E7:19:B1:EE:59:77:0D:63:0B:AD:2C:34:16:69:BD:DE
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/g6DyC-cZse5Zdw1jC60sNBZpvd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:5b:05:29:f3:59:45:03:d5:0d:4e:73:1d:67:9e:59:24:
         c8:2f:f8:3a:10:e7:0b:5d:77:73:90:06:09:5d:c7:f3:f2:53:
         8a:13:5b:af:17:04:d5:ab:82:5f:29:98:6c:a7:2d:9a:7e:ba:
         d1:e6:ef:80:01:c9:ea:dd:47:7a:fa:b0:cd:9f:b8:a5:c9:9e:
         b1:b1:ce:44:89:83:1d:42:fb:b9:f5:d5:59:81:6f:fd:ee:3c:
         eb:63:3b:a9:63:d4:7e:a5:87:6a:f2:99:58:64:ce:28:b9:b0:
         1b:7f:d1:de:15:46:99:92:c0:f8:7c:28:33:af:82:1f:47:7d:
         58:ef:f9:05:5f:6f:86:4f:b0:43:c5:1c:f6:ee:ef:24:17:e5:
         a1:3b:7e:45:f3:2a:d8:40:66:ad:23:11:bb:75:ec:d5:5d:1f:
         e1:18:6a:ac:25:09:8b:39:7e:37:27:f0:77:30:ea:4d:5b:5f:
         0a:55:ad:e7:a1:e3:b4:b1:05:6d:c6:45:63:6c:51:5b:a7:1a:
         70:47:14:0e:a1:02:40:68:04:7c:d6:4a:d6:72:2b:6c:30:b6:
         19:59:fe:61:65:49:26:02:b4:52:2c:a3:f6:db:80:e1:bc:2a:
         73:72:58:41:dc:43:08:f0:6f:20:45:c4:e1:1f:54:32:86:70:
         26:fa:f9:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYteYoL4cTUCq/pxuZxk+bc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjMxMDIzMjExMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2EwZjIwYmU3MTliMWVlNTk3NzBkNjMwYmFkMmMzNDE2NjliZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp6mUMz14mc02fkCHFYBgtzFWlOj
hs9XSK6GgbosbI47H/xwBi5pawm62YzVI7lxgh/V4VD/eg/R5Wub9X0sLryiT0nC
NxnHLXUbXR+rvFM8nlix8zUgAeERDfntSFlfGLN0KnXkDXhmWRlSOdV0Q39Wwsv4
HZb9IdGe0I4sZWcIyBP3VDy5FoTU71i9WKHUcV9qJxABsZR41Jeuv4bSVS8psyEk
mlg11S4V5QsDeK48rdpF7mwl55HGZrgUqubQP7gj+iV3QNEXLusfE1qeUxvT3xJ6
QNySTzsaf3ww2pe75/8aiSb0KiMAdU96s/V09/ZadnYuzj7L9LwfpLrcewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIOg8gvnGbHuWXcNYwutLDQWab3eMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvZzZEeUMtY1pzZTVaZHcxakM2MHNOQlpwdmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVt/MA0G
CSqGSIb3DQEBCwUAA4IBAQCNSFsFKfNZRQPVDU5zHWeeWSTIL/g6EOcLXXdzkAYJ
Xcfz8lOKE1uvFwTVq4JfKZhspy2afrrR5u+AAcnq3Ud6+rDNn7ilyZ6xsc5EiYMd
Qvu59dVZgW/97jzrYzupY9R+pYdq8plYZM4oubAbf9HeFUaZksD4fCgzr4IfR31Y
7/kFX2+GT7BDxRz27u8kF+WhO35F8yrYQGatIxG7dezVXR/hGGqsJQmLOX43J/B3
MOpNW18KVa3noeO0sQVtxkVjbFFbpxpwRxQOoQJAaAR81krWcitsMLYZWf5hZUkm
ArRSLKP224DhvCpzclhB3EMI8G8gRcThH1QyhnAm+vl6
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:09 2024 by rpki-client on console-fra.rpki-client.org