Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JN6s1obaDR0TsSQkCowRfpVnRLw.roa
File:                     JN6s1obaDR0TsSQkCowRfpVnRLw.roa (raw, json)
Hash identifier:          yQ9WL9Andw/+xgRQx2Lqf5EzsrWgZgbAJHDWCA8QXu8=
Subject key identifier:   24:DE:AC:D6:86:DA:0D:1D:13:B1:24:24:0A:8C:11:7E:95:67:44:BC
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0192E34326EB2AEB933B2E54AD6563D042A8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JN6s1obaDR0TsSQkCowRfpVnRLw.roa
Signing time:             Thu 31 Oct 2024 15:48:01 +0000
ROA not before:           Thu 31 Oct 2024 15:48:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16589
IP address blocks:        77.47.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 18:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e3:43:26:eb:2a:eb:93:3b:2e:54:ad:65:63:d0:42:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Oct 31 15:48:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=24deacd686da0d1d13b124240a8c117e956744bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:b3:2b:8e:53:92:80:9a:d4:1f:bc:4d:83:
                    cd:ff:16:46:2f:80:9e:90:ba:f6:1a:a1:82:dc:be:
                    8a:4e:5a:1a:fd:f2:b2:3c:bf:a3:41:a8:62:71:42:
                    c9:e7:45:3c:ef:c8:23:98:9d:85:63:3c:78:cf:71:
                    0a:3f:48:52:76:79:c5:89:1b:6c:e3:04:eb:aa:98:
                    fb:80:f4:d4:a5:c0:4f:ec:2b:9d:3c:e9:6e:61:3e:
                    9d:78:ee:95:ea:d7:db:29:cd:b5:44:89:29:ed:45:
                    83:62:db:79:9a:75:71:04:0e:7e:d6:54:3d:23:87:
                    9a:f3:5d:2b:03:ad:5b:ae:54:89:6d:36:bd:ba:9a:
                    d9:a9:a4:0e:8d:2f:a3:a1:84:f4:6c:25:cf:96:e3:
                    45:ac:04:3d:5f:f2:95:60:66:8f:5b:55:1f:0b:6c:
                    c2:e4:f4:ba:54:2c:34:99:e3:3e:15:00:4b:db:83:
                    8e:6e:9b:6a:70:1e:73:20:c6:29:57:2d:be:d9:3c:
                    fa:8f:13:fb:f4:1e:2f:ab:b5:f6:00:97:5e:0c:9f:
                    b0:b2:1c:d4:60:4e:1d:e6:22:a3:c3:d1:d7:01:81:
                    af:67:6d:5d:7c:01:15:85:93:f7:6a:a6:f1:09:6e:
                    ca:ff:5e:a7:85:80:72:9f:04:7f:a1:4f:07:20:d0:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DE:AC:D6:86:DA:0D:1D:13:B1:24:24:0A:8C:11:7E:95:67:44:BC
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JN6s1obaDR0TsSQkCowRfpVnRLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:14:46:8c:64:6c:a0:cd:60:8c:a9:70:c2:5f:fa:9f:18:
         58:aa:ef:c8:7f:73:cc:b4:bd:0e:ac:d4:86:06:9c:69:2b:c5:
         90:92:9a:6a:5f:44:67:63:6d:f4:50:08:07:55:19:4c:96:da:
         d6:fe:05:6d:0e:43:5b:5c:58:a3:4f:65:b9:f7:a9:a1:fe:3b:
         c6:0f:ad:7b:76:26:a8:48:9c:b0:81:7f:01:49:4f:f6:d4:19:
         8f:5f:5f:28:b0:78:f2:7c:3f:a2:55:1a:9a:75:c6:0f:2a:2e:
         2d:c8:94:76:9c:58:03:42:23:0c:d7:3f:6e:da:6e:16:8e:c7:
         20:35:b9:24:cd:d5:a0:42:ea:ee:d7:51:82:40:e4:0c:16:bf:
         f3:62:3d:64:de:2c:25:dd:62:5d:d3:aa:92:0c:26:ad:9d:b7:
         d8:7b:15:b6:7b:fa:3b:80:13:0e:44:c3:36:49:87:93:49:5b:
         b2:ed:35:62:ad:73:74:9c:8f:c7:50:b0:4e:07:f6:06:ab:78:
         59:b7:5a:dd:5f:28:d8:e3:20:fd:77:d0:86:cc:6b:11:97:a8:
         3a:d2:13:79:c5:07:db:61:a3:7b:b2:88:c4:db:5a:27:43:ef:
         4b:5e:0e:b3:08:51:e6:be:0a:1d:03:de:03:7d:d6:5b:e0:9a:
         8b:2e:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 20:13:12 2024 by rpki-client on console-fra.rpki-client.org