Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qDgn3T6mtBU9MuVENHa1T815X1w.roa
File:                     qDgn3T6mtBU9MuVENHa1T815X1w.roa (raw, json)
Hash identifier:          uVBxMKsqz/IDtS+XDaQjQxkCxBRfcoDBh1LaIReLXGs=
Subject key identifier:   A8:38:27:DD:3E:A6:B4:15:3D:32:E5:44:34:76:B5:4F:CD:79:5F:5C
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       0190B20BC5EF2718556D00975CC76553C8BD
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qDgn3T6mtBU9MuVENHa1T815X1w.roa
Signing time:             Sun 14 Jul 2024 16:20:34 +0000
ROA not before:           Sun 14 Jul 2024 16:20:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210644
IP address blocks:        77.91.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b2:0b:c5:ef:27:18:55:6d:00:97:5c:c7:65:53:c8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Jul 14 16:20:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a83827dd3ea6b4153d32e5443476b54fcd795f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:0b:27:05:e8:2d:66:69:44:c8:dd:a5:5d:
                    c8:56:44:f2:38:0c:47:bb:25:69:9b:86:71:f8:ac:
                    c1:7a:de:4b:70:79:18:f5:94:f8:79:31:98:6d:84:
                    30:55:b6:95:94:86:94:22:d6:a3:48:cc:ce:65:b4:
                    94:df:21:64:c8:49:9b:c5:79:06:cd:bb:e5:6f:60:
                    a1:81:cf:6e:1d:29:a6:5a:af:a4:dd:b7:1b:a7:21:
                    66:81:2e:9b:ae:3a:0b:d4:12:62:13:95:af:2b:91:
                    7c:09:4a:d9:ed:44:3b:84:23:be:ef:ce:83:6c:80:
                    b3:63:12:81:45:90:ed:bb:b5:6f:42:06:66:d3:f7:
                    d4:41:26:91:94:e0:12:ee:9d:d5:86:26:47:c3:f8:
                    4d:e2:66:6c:ed:01:04:92:81:0c:0c:6b:9d:7f:50:
                    69:39:67:20:17:7f:14:b9:4f:af:77:41:64:20:b8:
                    2f:b1:41:ea:99:50:c2:b7:dc:33:6a:74:3b:00:a7:
                    d2:7e:06:b5:0e:5c:2f:a5:57:21:a3:ce:2e:7a:79:
                    14:5d:62:00:39:29:f6:85:e6:29:f6:9a:43:78:14:
                    b1:35:03:a8:36:22:14:ae:d0:3a:bf:3d:f4:5c:14:
                    fc:96:49:0c:69:9f:b6:b9:3e:91:b5:1a:44:96:74:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:27:DD:3E:A6:B4:15:3D:32:E5:44:34:76:B5:4F:CD:79:5F:5C
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/qDgn3T6mtBU9MuVENHa1T815X1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:06:5f:76:16:ab:00:e7:43:ea:fe:a3:8e:9b:62:bf:ff:94:
         e8:09:1c:ad:d4:2f:3b:9f:8b:69:d1:20:0f:99:90:a9:0b:09:
         b5:2f:26:33:9d:4e:99:1c:a3:e6:1d:75:c0:83:5a:19:fd:0f:
         53:cb:1d:9f:9a:f8:a3:9a:b0:c4:20:30:8f:b2:f1:39:cb:f9:
         21:5a:cf:a8:1b:fc:67:8d:b6:04:4d:09:ef:20:e8:20:ad:c8:
         18:21:8a:80:49:2c:23:0e:1b:6a:0c:a8:49:0a:12:a3:79:1c:
         cf:ee:b8:48:f4:f7:05:1b:e6:ca:4b:8f:e2:a5:b2:34:de:66:
         74:01:55:61:5a:0d:7e:e6:fd:d4:1e:12:0e:ef:b6:8a:7f:1b:
         d0:9f:a6:7e:da:37:df:c1:32:f7:4c:5f:ae:e1:03:f6:7c:f6:
         76:11:99:62:86:2b:9f:60:be:35:4b:ca:6c:86:31:8c:49:7d:
         93:10:50:0c:75:ef:54:f2:f7:40:58:d4:66:4d:ba:95:cb:09:
         4b:ee:b3:2a:6d:55:ce:c2:bb:a6:03:cb:c2:dd:ea:11:4f:71:
         56:38:d2:d5:fc:f5:3c:4f:3e:e8:ed:8d:4a:fa:da:f5:e8:e8:
         75:6d:ca:b9:04:fb:e3:6d:36:17:cf:80:d0:58:3e:52:81:87:
         28:3b:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 15:53:32 2024 by rpki-client on console-ams.rpki-client.org