Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FAWel97ULxVAcUWYN09QIO3ylow.roa
File:                     FAWel97ULxVAcUWYN09QIO3ylow.roa (raw, json)
Hash identifier:          vnRMuxL+Ww/kXBmwSWMoZG23HeVeBXUhrx9tGAIQXSY=
Subject key identifier:   14:05:9E:97:DE:D4:2F:15:40:71:45:98:37:4F:50:20:ED:F2:96:8C
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01886C2503255C76C965D6E2A5B49467EB51
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FAWel97ULxVAcUWYN09QIO3ylow.roa
Signing time:             Tue 30 May 2023 10:12:24 +0000
ROA not before:           Tue 30 May 2023 10:12:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57043
IP address blocks:        77.47.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6c:25:03:25:5c:76:c9:65:d6:e2:a5:b4:94:67:eb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: May 30 10:12:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14059e97ded42f1540714598374f5020edf2968c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:65:23:c3:70:01:5e:d0:86:b5:35:98:8e:
                    6d:70:e2:e3:a8:e7:f8:ad:5d:c7:21:a2:e0:4d:82:
                    a1:64:60:b1:87:b0:18:75:e3:94:4a:ff:bb:c3:6b:
                    1f:a0:2a:32:a1:54:c1:06:08:58:6b:eb:1b:d0:bb:
                    c4:09:23:bc:2b:2d:3c:07:ee:0f:9b:c0:6d:3e:65:
                    86:6e:17:93:00:d6:07:d3:38:21:81:b6:f0:e2:14:
                    9f:42:1d:cf:2f:c2:02:ba:66:d6:84:75:33:ce:8a:
                    24:86:92:f1:a4:82:21:95:25:65:c7:09:bc:20:e6:
                    1f:89:35:14:32:3f:96:c3:98:3c:b5:ee:b3:a5:99:
                    5f:59:4f:56:03:39:3b:b8:04:13:81:7e:06:da:44:
                    83:52:2a:01:24:b5:df:db:d1:1a:6e:0e:36:16:16:
                    4d:96:b9:96:36:61:cc:2a:09:53:be:e2:e4:e1:81:
                    d4:4e:61:7e:13:70:96:36:94:33:ad:c3:82:7d:89:
                    04:70:2c:12:b1:da:a3:d5:fa:c5:89:08:6f:67:04:
                    ac:da:52:34:4d:23:f2:f1:39:7d:77:88:db:48:79:
                    b5:6f:42:1d:1d:77:e9:cd:b7:6e:ec:ba:e1:40:56:
                    21:cc:fa:10:5e:ee:bd:2b:ef:88:ce:5b:bf:26:9c:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:05:9E:97:DE:D4:2F:15:40:71:45:98:37:4F:50:20:ED:F2:96:8C
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FAWel97ULxVAcUWYN09QIO3ylow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:89:21:0d:86:ae:24:9c:f1:23:64:d5:fe:15:0b:5f:1b:57:
         c2:ca:c1:3e:2b:b4:e9:de:d2:b7:13:ab:6c:86:cb:35:24:ac:
         22:59:26:aa:8b:16:0a:c0:d3:47:db:ca:4b:22:78:60:6e:4f:
         ee:81:c1:cd:32:48:1e:d1:6b:31:c2:88:d1:67:13:12:71:8f:
         6b:1b:23:00:5d:64:74:e3:dc:56:53:b0:fa:4e:ac:99:b6:2d:
         21:8a:cf:83:64:1c:2d:d2:6d:ed:0a:0e:25:7c:a8:59:40:a9:
         16:a2:91:a5:64:08:97:c6:7b:fc:fd:bc:15:2c:ae:73:6d:02:
         b8:20:b8:7c:c4:7e:f5:92:a2:bf:53:c1:22:89:70:71:32:70:
         48:0f:5a:47:81:fc:89:6c:3c:ae:00:4c:04:ea:fa:d8:59:b0:
         0f:cf:9a:95:7a:26:0d:48:62:6e:02:c0:4f:e4:22:12:aa:61:
         2a:4f:3e:60:bd:17:f8:a6:31:2c:bf:12:fd:99:3a:4d:4b:86:
         17:0f:13:1e:b6:93:7b:02:6c:49:51:53:06:b8:91:4a:9b:29:
         4f:4f:ea:51:a4:fe:95:b2:40:db:e4:73:06:a6:6b:3a:c2:46:
         89:a5:c9:05:f0:7c:48:d9:3d:c6:d5:5a:87:49:b3:6a:9e:3c:
         94:47:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org