Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GLGW9ZKhrGIiIZwbBsu_nig45To.roa
File:                     GLGW9ZKhrGIiIZwbBsu_nig45To.roa (raw, json)
Hash identifier:          owiLgsGpQhGg9NFEF3eEmIUvB8AvBesscvf0GY0TZxs=
Subject key identifier:   18:B1:96:F5:92:A1:AC:62:22:21:9C:1B:06:CB:BF:9E:28:38:E5:3A
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0185C07212A530BF507B5D53311E0F63B7E0
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GLGW9ZKhrGIiIZwbBsu_nig45To.roa
Signing time:             Tue 17 Jan 2023 15:56:19 +0000
ROA not before:           Tue 17 Jan 2023 15:56:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204197
IP address blocks:        77.47.244.0/22 maxlen: 24
                          77.47.156.0/22 maxlen: 24
                          77.47.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 31 Jan 2023 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c0:72:12:a5:30:bf:50:7b:5d:53:31:1e:0f:63:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan 17 15:56:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18b196f592a1ac6222219c1b06cbbf9e2838e53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:75:bc:a1:b8:de:5e:d8:ac:3b:81:15:9d:
                    9f:88:b5:98:e3:65:63:2d:6b:32:b7:97:26:08:22:
                    4e:80:31:a3:d0:a9:b3:1b:e0:b7:21:11:59:1d:05:
                    11:c6:5e:14:6c:f1:41:2f:1c:2b:0c:4c:d6:de:8d:
                    cc:15:3f:cb:cf:0c:27:16:45:e2:07:18:e7:1a:aa:
                    c8:d6:98:5c:4e:d5:8a:5e:74:b4:84:95:26:5b:a6:
                    e2:87:d7:85:d9:92:b9:6e:0e:05:40:5f:9e:de:1c:
                    c2:92:0d:9d:4e:23:2c:21:ff:f8:90:53:63:35:1a:
                    f1:cb:af:c8:45:71:74:06:df:36:30:cc:28:b0:ca:
                    02:2c:bb:16:be:60:01:1b:3a:d1:55:41:66:c9:bd:
                    ba:40:02:1c:ca:21:d0:c5:96:f6:29:e8:da:cd:b3:
                    f2:22:0b:7d:d5:ce:8c:f1:4e:5e:d9:b6:58:d8:ce:
                    d0:3f:ed:76:a4:59:d5:b7:ce:bc:ae:85:65:da:2a:
                    be:8c:c9:8c:4a:c7:51:ac:17:44:6e:f6:9d:b4:b6:
                    c9:77:cd:89:86:00:5d:c7:66:c0:1b:15:f1:64:f6:
                    8e:2a:50:1b:2b:39:8d:68:bb:f6:95:24:da:7d:2a:
                    b4:1a:fc:ab:96:24:8e:36:15:39:d8:9e:f6:35:2a:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:96:F5:92:A1:AC:62:22:21:9C:1B:06:CB:BF:9E:28:38:E5:3A
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GLGW9ZKhrGIiIZwbBsu_nig45To.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.156.0/22
                  77.47.179.0/24
                  77.47.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:7d:07:e5:b1:c2:a4:94:b0:a7:c0:1f:57:99:86:b6:49:b6:
         92:72:5e:e6:c5:bf:c4:67:f9:f1:a4:dc:dd:65:00:e1:98:09:
         20:9c:e8:e8:58:f6:ce:1e:e2:03:9b:1b:fe:9c:5b:a1:8d:56:
         b5:20:dc:55:c1:9c:27:f3:77:e3:f1:5d:e4:5c:65:e8:08:eb:
         85:5e:20:36:5c:df:4e:a0:d7:b3:86:db:f2:b6:2f:87:69:c4:
         e2:cc:03:7a:c8:89:46:33:70:f0:e8:fa:fb:25:9b:44:7d:34:
         c4:ab:36:94:1d:5d:dc:46:3d:65:68:01:40:9c:f1:60:94:35:
         97:73:02:a6:d9:ca:c1:0a:55:ff:02:1d:0f:2f:56:d0:3e:19:
         58:ec:6b:7f:cf:eb:42:3f:aa:07:b7:a3:12:7a:6c:b9:bf:a9:
         36:77:cf:68:d7:d0:2d:74:78:9e:4e:ae:62:73:14:8e:b5:7d:
         39:c2:75:75:14:49:95:32:c1:af:04:78:87:39:1b:c5:0a:32:
         95:cd:aa:f8:79:51:e7:be:53:b1:b9:09:9b:66:03:e4:06:f2:
         8e:43:16:ca:f1:2b:aa:20:1c:eb:55:ba:12:56:3b:e5:52:1e:
         53:fc:1c:be:0c:6f:85:67:6e:f2:7c:52:d1:72:3a:04:2e:bb:
         d6:ee:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org