Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/gMht-H9oY_c_rksQvj04swJLL70.roa
File:                     gMht-H9oY_c_rksQvj04swJLL70.roa (raw, json)
Hash identifier:          xxsZDj8AdOdFsiqZh2rOWKL+aSdUWgL0Me5UXEt6CIU=
Subject key identifier:   80:C8:6D:F8:7F:68:63:F7:3F:AE:4B:10:BE:3D:38:B3:02:4B:2F:BD
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       018B5E62823C48E920E3CBE64E1706486A10
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/gMht-H9oY_c_rksQvj04swJLL70.roa
Signing time:             Mon 23 Oct 2023 21:13:16 +0000
ROA not before:           Mon 23 Oct 2023 21:13:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30344
IP address blocks:        77.91.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5e:62:82:3c:48:e9:20:e3:cb:e6:4e:17:06:48:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Oct 23 21:13:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80c86df87f6863f73fae4b10be3d38b3024b2fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:83:d8:77:61:f3:cd:eb:0b:a2:a7:72:04:
                    f0:77:1c:12:66:86:b3:e7:47:06:f7:fb:b7:f2:a4:
                    db:62:28:b2:00:33:8a:9a:d1:33:39:92:67:e2:1e:
                    b4:d5:70:a2:40:ea:5e:2c:68:0f:95:b7:65:d7:d3:
                    46:bd:98:d5:56:9a:49:2e:7c:2e:09:65:9f:d0:31:
                    a1:56:f3:be:eb:35:1d:44:f0:78:6e:28:23:99:ed:
                    88:45:ef:2f:fe:7b:2f:31:93:6d:01:dd:4e:9f:3d:
                    56:0e:43:6f:05:0e:68:e4:4f:d3:db:d6:63:23:5f:
                    b6:1f:13:68:95:aa:d6:c2:34:3c:22:5a:e3:2a:a9:
                    99:15:94:bc:fd:66:cb:e9:ee:3f:0a:3e:82:92:54:
                    4f:c0:92:7b:da:6e:d2:d7:e5:89:23:e2:3d:e9:8d:
                    4a:0e:9e:cd:42:e8:51:7a:5c:be:66:79:4d:cb:31:
                    b2:05:7b:1c:50:05:05:7c:97:21:f6:f5:8f:4a:89:
                    4e:8b:6d:3d:b8:d9:88:ea:40:6c:08:66:31:34:fe:
                    ad:09:4a:98:5c:f5:e4:8e:a3:d9:38:7f:8b:c1:52:
                    91:f8:d0:26:a5:d2:c2:ed:ad:c8:1c:5e:67:86:e6:
                    7d:30:f3:7a:63:2d:e4:9e:dc:32:fe:ca:2e:7f:fe:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:6D:F8:7F:68:63:F7:3F:AE:4B:10:BE:3D:38:B3:02:4B:2F:BD
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/gMht-H9oY_c_rksQvj04swJLL70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:4f:4f:81:bd:fa:63:41:0a:74:95:ee:c3:d4:93:36:a2:
         61:45:01:86:25:b6:4c:4b:b0:d6:3a:77:1f:b3:2f:25:cd:df:
         43:71:7c:28:3e:df:82:79:bb:04:44:5f:f5:16:66:ef:48:1e:
         95:74:a5:a4:fb:f0:6e:9e:91:2c:1a:dc:49:02:5f:19:f6:ba:
         86:d6:a6:66:62:c4:e3:4f:16:77:cd:9d:27:d6:bd:b4:f8:2a:
         f9:93:28:24:ac:e5:aa:9c:1e:4b:52:e6:7b:b2:ec:09:9f:29:
         5e:c8:5b:6b:38:86:fe:95:25:f2:7e:45:55:fc:85:a0:e2:44:
         fb:18:f1:8f:a4:f0:71:8c:db:6c:68:26:f6:f8:51:40:df:20:
         5d:ac:61:65:8a:8a:64:66:5e:aa:2c:3d:89:5f:fc:f6:70:7d:
         ea:b9:25:e9:ed:43:33:7f:e2:e3:d6:5a:37:11:97:f1:5c:59:
         5b:c5:d3:b5:f2:3d:0d:f6:61:61:97:67:93:e8:6a:20:2d:ac:
         d6:1d:fa:4b:0b:2f:c3:49:fa:ee:bf:b9:de:78:5e:78:33:86:
         03:4e:3b:a4:4d:ff:ce:07:04:cf:b6:79:45:21:9f:75:20:1c:
         e1:90:e5:9c:2e:1c:04:07:8f:01:4a:8e:37:ff:41:4a:0e:d9:
         90:86:4e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:54 2024 by rpki-client on console-ams.rpki-client.org