Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JXxEZsz0SIf_mKaUkSJEABQjxs4.roa
File:                     JXxEZsz0SIf_mKaUkSJEABQjxs4.roa (raw, json)
Hash identifier:          otzyiPfbkrVu68bQxa/xvfbEv4SqWkrhkcZatfstKW4=
Subject key identifier:   25:7C:44:66:CC:F4:48:87:FF:98:A6:94:91:22:44:00:14:23:C6:CE
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0190DC76BCABC479911017B247B4D592A863
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JXxEZsz0SIf_mKaUkSJEABQjxs4.roa
Signing time:             Mon 22 Jul 2024 22:01:27 +0000
ROA not before:           Mon 22 Jul 2024 22:01:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208485
IP address blocks:        77.47.178.0/24 maxlen: 24
                          77.47.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 16:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:dc:76:bc:ab:c4:79:91:10:17:b2:47:b4:d5:92:a8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jul 22 22:01:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=257c4466ccf44887ff98a694912244001423c6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:5c:bc:5d:79:c7:23:e5:b2:38:22:c3:40:
                    d4:eb:6d:b9:0f:41:a8:27:0e:27:90:be:76:34:3e:
                    35:12:a2:40:33:24:e8:d6:db:b2:c6:8f:29:3d:5d:
                    60:96:68:d3:1c:45:02:d6:d4:29:61:a0:31:cd:32:
                    9e:99:5f:24:4b:4e:b8:0e:5b:ce:c1:f7:23:32:6a:
                    a0:f9:b1:b7:31:04:22:31:9d:74:c7:b6:31:3b:1e:
                    e7:0b:4a:4e:fd:6d:10:50:bd:c3:bf:03:ff:75:60:
                    a2:18:7a:fa:28:89:a6:c8:bb:ea:54:29:c7:9b:cc:
                    a0:b8:24:62:53:d5:9e:8b:9c:d9:7f:6e:72:68:be:
                    bb:e5:0d:14:fe:ec:30:cb:91:c6:5c:11:cf:de:bc:
                    8f:de:73:b6:e4:0a:29:c9:ae:28:32:4b:38:82:e6:
                    af:fd:69:12:63:cb:6a:5f:69:15:2e:2b:d9:20:41:
                    bb:22:a9:74:8d:3a:88:39:41:df:12:99:0e:32:95:
                    a0:14:28:83:c7:6a:ca:c4:cf:07:6f:b1:ac:39:a9:
                    e8:3d:9e:b3:b6:d0:c0:d8:1b:e0:41:49:c8:2a:86:
                    6f:3f:f4:1b:ae:4e:c6:01:71:c2:cb:eb:d6:30:21:
                    2d:66:9d:f7:12:85:02:2a:fe:1b:5e:84:83:51:c0:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7C:44:66:CC:F4:48:87:FF:98:A6:94:91:22:44:00:14:23:C6:CE
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JXxEZsz0SIf_mKaUkSJEABQjxs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.178.0/24
                  77.47.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:81:b8:f7:27:ef:fe:68:bd:81:cd:16:c0:86:e7:c7:0d:f7:
         48:dd:e9:46:62:eb:fe:cf:37:4a:d0:96:f5:28:66:39:fa:1d:
         ef:88:50:32:58:de:01:5f:3a:e3:79:5b:68:24:3f:de:0b:af:
         02:54:d2:b9:db:0a:22:5c:7e:1b:2d:c9:90:32:ae:25:00:0a:
         9c:5f:5c:b7:26:20:07:0b:6a:3f:3e:29:d5:6c:a2:52:80:ad:
         16:05:3e:ef:e0:80:7a:b9:ee:48:bf:01:0c:d2:ea:e1:98:ce:
         ba:b5:8c:51:aa:c5:98:f5:98:2e:18:57:fc:8f:9a:30:59:15:
         67:06:8a:0d:2a:c1:6d:b7:fe:f5:ee:cd:a4:3d:56:b2:f7:37:
         49:57:17:22:a9:f8:ee:cd:36:8d:3e:3b:44:0b:5c:6d:ce:e5:
         d1:5b:77:64:4d:e3:9a:5e:bd:f7:ce:78:50:3a:35:68:aa:d8:
         ca:fc:ec:5d:38:71:fa:77:c1:2d:13:5f:a0:ce:a1:aa:98:a8:
         54:30:da:7b:5f:d8:83:f7:fa:39:13:52:fd:a4:6d:5b:fe:a9:
         75:2c:c5:5b:34:bd:8b:28:a8:2e:2c:c1:bb:23:b6:fb:e9:c9:
         92:7f:dc:32:bd:60:bc:18:26:4d:fe:ca:ea:53:00:80:76:ff:
         35:d2:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:05 2024 by rpki-client on console-ams.rpki-client.org