Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KUgk00nBqPTy-DD4Umnb8W-AUys.roa
File:                     KUgk00nBqPTy-DD4Umnb8W-AUys.roa (raw, json)
Hash identifier:          BR52zz9Kw86LAOEeK4Bi3VyGCeGfT1nE/ue9+MceXDg=
Subject key identifier:   29:48:24:D3:49:C1:A8:F4:F2:F8:30:F8:52:69:DB:F1:6F:80:53:2B
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEE70AB572080204D0B3981F4E7FCB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KUgk00nBqPTy-DD4Umnb8W-AUys.roa
Signing time:             Sun 01 Jan 2023 06:04:56 +0000
ROA not before:           Sun 01 Jan 2023 06:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212163
IP address blocks:        77.65.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:e7:0a:b5:72:08:02:04:d0:b3:98:1f:4e:7f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=294824d349c1a8f4f2f830f85269dbf16f80532b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:f8:74:f6:02:75:6b:58:dc:3f:80:45:58:
                    af:c8:6b:5e:eb:71:19:e6:63:5c:3a:b1:7e:c2:53:
                    6a:34:0d:81:d7:2b:46:06:29:42:8c:d4:f2:44:3c:
                    dc:3c:b5:0b:b8:b8:5c:e1:11:af:07:72:a1:93:2c:
                    54:f5:b6:bc:23:30:6e:a7:23:1f:dc:b9:88:40:a8:
                    cd:5b:ad:65:95:3c:d9:fe:14:74:aa:ba:75:dd:70:
                    b2:a3:06:b7:bb:55:57:ff:c2:e4:45:e0:b4:13:c5:
                    17:32:9a:ee:16:e0:ab:de:9e:a6:2d:e0:43:12:91:
                    37:45:5f:13:84:11:cf:b9:ac:a6:b6:d2:44:69:db:
                    24:49:fb:98:2c:a0:46:7c:f1:a7:cb:a0:a0:dc:c6:
                    db:36:06:b5:2f:8e:2d:9d:64:a2:d6:e2:eb:36:cf:
                    d1:31:18:3c:3b:f6:27:ac:78:9d:9b:a5:9e:a6:d3:
                    72:02:c8:1c:ed:f9:3c:a9:fa:c4:24:14:99:8d:15:
                    df:1c:58:05:1b:c7:1a:98:7f:b3:eb:2c:a3:73:45:
                    a1:f9:18:f4:3a:39:80:3a:ce:48:91:ae:f7:ec:6f:
                    2c:1e:dc:0e:3a:f5:33:19:dd:d7:45:17:08:0c:5e:
                    06:2d:91:b3:6e:33:be:76:4f:c7:da:af:cd:1d:6e:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:24:D3:49:C1:A8:F4:F2:F8:30:F8:52:69:DB:F1:6F:80:53:2B
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KUgk00nBqPTy-DD4Umnb8W-AUys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:87:3d:c6:70:01:81:31:e0:00:db:c7:10:5a:da:7e:a8:
         e8:d5:e6:94:f2:8c:65:76:d4:5a:2d:f3:f6:98:23:f7:c2:6d:
         6f:93:c4:43:3f:66:20:be:a9:90:d3:5b:33:b2:61:e0:80:82:
         2d:0d:4f:7a:c5:e7:0c:30:33:5b:eb:11:6c:c5:48:84:60:31:
         b2:28:1a:20:e9:02:5c:ee:36:89:fb:32:6d:b8:31:9c:0e:39:
         12:7f:5b:57:50:7b:41:98:08:10:4d:86:09:6e:3c:90:c6:da:
         ad:06:83:0d:7c:e8:1f:c0:e1:67:fd:1f:23:10:a9:34:50:43:
         18:f5:9c:f5:57:b9:a1:1c:03:c3:59:3d:b5:98:f6:69:eb:26:
         04:51:f7:50:e8:65:04:ce:82:28:d9:78:e9:af:ba:36:42:fa:
         9f:c6:1c:45:dd:a0:16:33:0a:db:34:7f:14:c1:a6:61:02:12:
         95:d3:d9:82:b5:5d:96:6b:7d:9a:88:f8:a3:6a:36:3e:32:59:
         fe:c9:bd:40:23:14:92:0d:ef:a7:1b:ee:16:f6:49:7d:a8:fd:
         99:c5:44:d3:bf:5f:5f:4e:14:17:91:6d:c2:45:4d:d6:73:88:
         bc:09:b3:6a:61:57:f9:3a:0e:d2:70:a4:ad:52:57:ed:31:76:
         1b:1b:fd:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7ucKtXIIAgTQs5gfTn/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTQ4MjRkMzQ5YzFhOGY0ZjJmODMwZjg1MjY5ZGJmMTZmODA1MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwD4dPYCdWtY3D+ARVivyGte63EZ
5mNcOrF+wlNqNA2B1ytGBilCjNTyRDzcPLULuLhc4RGvB3KhkyxU9ba8IzBupyMf
3LmIQKjNW61llTzZ/hR0qrp13XCyowa3u1VX/8LkReC0E8UXMpruFuCr3p6mLeBD
EpE3RV8ThBHPuaymttJEadskSfuYLKBGfPGny6Cg3MbbNga1L44tnWSi1uLrNs/R
MRg8O/YnrHidm6WeptNyAsgc7fk8qfrEJBSZjRXfHFgFG8camH+z6yyjc0Wh+Rj0
OjmAOs5Ika737G8sHtwOOvUzGd3XRRcIDF4GLZGzbjO+dk/H2q/NHW6vawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClIJNNJwaj08vgw+FJp2/FvgFMrMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvS1VnazAwbkJxUFR5LURENFVtbmI4Vy1BVXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTUGcMA0G
CSqGSIb3DQEBCwUAA4IBAQBu14c9xnABgTHgANvHEFrafqjo1eaU8oxldtRaLfP2
mCP3wm1vk8RDP2YgvqmQ01szsmHggIItDU96xecMMDNb6xFsxUiEYDGyKBog6QJc
7jaJ+zJtuDGcDjkSf1tXUHtBmAgQTYYJbjyQxtqtBoMNfOgfwOFn/R8jEKk0UEMY
9Zz1V7mhHAPDWT21mPZp6yYEUfdQ6GUEzoIo2Xjpr7o2QvqfxhxF3aAWMwrbNH8U
waZhAhKV09mCtV2Wa32aiPijajY+Mln+yb1AIxSSDe+nG+4W9kl9qP2ZxUTTv19f
ThQXkW3CRU3Wc4i8CbNqYVf5Og7ScKStUlftMXYbG/0a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org