Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1INO1RLWIxr9-JCGS6NzNs8rU5g.roa
File:                     1INO1RLWIxr9-JCGS6NzNs8rU5g.roa (raw, json)
Hash identifier:          Rh1PH3pgOSe5MsYVr1GBhh+Qrrat48gIOBuftf1hzn8=
Subject key identifier:   D4:83:4E:D5:12:D6:23:1A:FD:F8:90:86:4B:A3:73:36:CF:2B:53:98
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018608AB59EE07B72973D741A0E8B2019E2D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1INO1RLWIxr9-JCGS6NzNs8rU5g.roa
Signing time:             Tue 31 Jan 2023 16:31:32 +0000
ROA not before:           Tue 31 Jan 2023 16:31:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209371
IP address blocks:        77.47.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 Feb 2023 15:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:08:ab:59:ee:07:b7:29:73:d7:41:a0:e8:b2:01:9e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan 31 16:31:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d4834ed512d6231afdf890864ba37336cf2b5398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:ab:d4:38:63:bb:c8:a2:e1:3c:24:cd:a0:
                    b9:bd:15:af:82:e0:e5:4f:15:8a:b7:ef:69:7c:5b:
                    aa:30:6f:71:fc:19:66:ff:15:0b:06:8d:0e:12:df:
                    d9:5a:12:8d:69:ed:aa:ca:e5:03:98:39:25:ac:f2:
                    2d:70:a6:a0:5d:01:cb:ca:1e:e5:7b:93:99:fa:b9:
                    f4:ac:3e:df:18:3f:15:06:18:55:96:1a:66:d5:36:
                    5c:71:c0:42:29:a8:21:68:59:d4:e0:41:cd:48:21:
                    fa:b5:a8:1f:58:4d:b8:41:3d:d7:7f:86:33:c8:d5:
                    7c:82:41:20:83:67:03:14:60:73:30:cf:12:80:42:
                    cd:e7:e5:8a:46:12:66:b1:e2:0a:89:ea:47:14:7d:
                    e7:c6:f7:dd:b6:51:4a:d0:f1:dc:2d:17:48:08:e7:
                    0c:54:4f:92:b4:32:d1:7b:61:db:3c:6d:cb:24:13:
                    08:58:d4:f5:33:b1:41:48:e3:56:9a:d2:54:cf:5c:
                    e9:c3:52:16:06:98:3f:8a:e3:70:3c:2f:0b:a0:76:
                    a8:ec:eb:4c:cb:f4:a1:65:b4:77:15:85:29:72:95:
                    84:e8:9f:37:c5:0a:0b:bb:75:ea:5e:2f:e7:a9:91:
                    42:c3:0b:44:4e:9c:ff:83:59:d8:b9:cd:74:07:1e:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:4E:D5:12:D6:23:1A:FD:F8:90:86:4B:A3:73:36:CF:2B:53:98
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1INO1RLWIxr9-JCGS6NzNs8rU5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:f8:7a:0b:83:ce:23:af:f6:ad:d7:d3:74:14:35:72:54:
         5a:4c:5f:43:58:9d:d4:2a:68:29:f1:85:bb:f2:2c:df:7a:77:
         8e:6b:0e:76:fb:5d:b6:86:ad:1f:47:a9:b1:31:4f:8b:2a:47:
         04:2a:5d:e5:4d:2e:29:1d:5d:9f:f8:63:0f:9a:bb:c9:71:45:
         df:b1:08:19:58:21:88:2b:ef:10:90:a7:58:0d:87:0e:24:26:
         12:4b:0e:12:03:1c:cf:d7:4d:5b:8b:bb:71:e7:5f:8b:29:c4:
         a3:9f:71:5b:de:8d:d3:b2:a6:ac:bd:95:a2:96:6d:a5:7d:27:
         61:28:88:1f:e2:c0:da:49:86:2c:49:b0:7d:5f:21:d4:3e:ed:
         5f:30:5a:5c:f3:ce:4a:cb:50:4f:e9:bb:d7:dd:2a:09:f6:a4:
         f4:56:48:99:a2:f9:a1:fa:32:cc:87:93:b8:d6:f7:28:4c:af:
         07:99:bf:07:62:59:1e:74:b7:d2:34:3e:12:1b:45:10:1c:82:
         aa:88:62:b4:86:36:b3:25:23:a2:b6:59:34:af:16:93:51:ac:
         19:10:c9:a8:b9:cf:bd:30:fc:45:5c:d4:36:51:e5:66:53:e3:
         b9:27:8b:65:73:cd:f3:22:57:08:01:68:a5:97:5e:70:44:ef:
         09:29:ee:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYIq1nuB7cpc9dBoOiyAZ4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTMxMTYzMTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDgzNGVkNTEyZDYyMzFhZmRmODkwODY0YmEzNzMzNmNmMmI1Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx6r1Dhju8ii4TwkzaC5vRWvguDl
TxWKt+9pfFuqMG9x/Blm/xULBo0OEt/ZWhKNae2qyuUDmDklrPItcKagXQHLyh7l
e5OZ+rn0rD7fGD8VBhhVlhpm1TZcccBCKaghaFnU4EHNSCH6tagfWE24QT3Xf4Yz
yNV8gkEgg2cDFGBzMM8SgELN5+WKRhJmseIKiepHFH3nxvfdtlFK0PHcLRdICOcM
VE+StDLRe2HbPG3LJBMIWNT1M7FBSONWmtJUz1zpw1IWBpg/iuNwPC8LoHao7OtM
y/ShZbR3FYUpcpWE6J83xQoLu3XqXi/nqZFCwwtETpz/g1nYuc10Bx480wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNSDTtUS1iMa/fiQhkujczbPK1OYMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvMUlOTzFSTFdJeHI5LUpDR1M2TnpOczhyVTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATS+OMA0G
CSqGSIb3DQEBCwUAA4IBAQAA0vh6C4POI6/2rdfTdBQ1clRaTF9DWJ3UKmgp8YW7
8izfeneOaw52+122hq0fR6mxMU+LKkcEKl3lTS4pHV2f+GMPmrvJcUXfsQgZWCGI
K+8QkKdYDYcOJCYSSw4SAxzP101bi7tx51+LKcSjn3Fb3o3TsqasvZWilm2lfSdh
KIgf4sDaSYYsSbB9XyHUPu1fMFpc885Ky1BP6bvX3SoJ9qT0VkiZovmh+jLMh5O4
1vcoTK8Hmb8HYlkedLfSND4SG0UQHIKqiGK0hjazJSOitlk0rxaTUawZEMmouc+9
MPxFXNQ2UeVmU+O5J4tlc83zIlcIAWill15wRO8JKe6I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org