Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MZxWgDR2Txa3mbg6O6jeIt-nCA4.roa
File:                     MZxWgDR2Txa3mbg6O6jeIt-nCA4.roa (raw, json)
Hash identifier:          jbJBQ0IjVcDgO931YxukUMz/wpfhou8eaZTW3pxTbmM=
Subject key identifier:   31:9C:56:80:34:76:4F:16:B7:99:B8:3A:3B:A8:DE:22:DF:A7:08:0E
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0187FADE5E14FDCA4C8592267FD58F89673A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MZxWgDR2Txa3mbg6O6jeIt-nCA4.roa
Signing time:             Mon 08 May 2023 10:18:09 +0000
ROA not before:           Mon 08 May 2023 10:18:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        77.47.212.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 15:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fa:de:5e:14:fd:ca:4c:85:92:26:7f:d5:8f:89:67:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: May  8 10:18:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=319c568034764f16b799b83a3ba8de22dfa7080e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:94:ce:53:18:56:8e:fd:f0:23:b7:54:32:
                    01:8a:83:3a:b6:0d:c4:6a:30:dc:99:c8:29:16:ba:
                    b4:a5:89:13:d1:a1:9f:4a:eb:88:ae:e2:46:b6:d0:
                    2e:d4:30:cd:f6:90:4b:36:a1:6b:87:0c:29:08:ff:
                    4c:50:26:54:6e:21:a7:a9:a5:4c:57:76:05:73:82:
                    d1:50:8d:d5:79:ab:c4:19:f6:ce:b5:63:89:9b:41:
                    3e:36:24:3b:0d:6a:f5:53:53:f6:1f:da:a9:5d:27:
                    cb:be:ef:f1:72:7f:13:34:fb:ea:14:d8:29:4a:b6:
                    e2:3a:31:b4:be:b4:9d:1c:fd:72:a8:e7:df:c0:b3:
                    94:a3:81:b9:22:23:24:0d:69:5e:69:12:17:da:b5:
                    33:cd:cd:c7:30:17:2a:11:f6:f7:08:e0:b3:d1:b0:
                    01:dc:41:3d:0c:84:d6:dd:e6:3b:d4:ec:52:d2:17:
                    85:0e:05:b1:ff:fd:56:46:a9:7e:1b:da:b1:47:65:
                    87:b7:58:a7:3a:b3:b0:b4:be:41:6b:35:ce:17:57:
                    29:4d:ce:a8:14:aa:d9:23:7d:ee:f6:fb:6d:76:89:
                    25:b5:76:8a:66:9a:ba:31:af:10:25:d6:ea:fa:43:
                    ed:60:44:c5:e7:a5:fd:aa:47:6d:ff:80:e8:7c:16:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9C:56:80:34:76:4F:16:B7:99:B8:3A:3B:A8:DE:22:DF:A7:08:0E
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MZxWgDR2Txa3mbg6O6jeIt-nCA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:7c:ff:2b:9f:54:96:4b:95:ea:83:9d:07:12:3b:33:8c:f6:
         ff:f1:36:34:0e:0c:05:70:ca:c3:2f:e1:99:ab:27:ff:8a:88:
         c3:6a:86:69:ca:35:97:6c:9f:1b:b1:d0:b7:39:66:9e:fe:54:
         ab:6a:22:af:a7:9b:af:fc:e5:d6:78:eb:bd:00:8e:11:09:04:
         9e:41:ca:5e:12:ed:7f:8d:d1:b9:ab:96:4b:1d:0b:2f:59:bb:
         5b:67:3c:ce:71:ed:1b:4b:11:dc:53:fa:53:17:37:cf:35:1e:
         df:a9:5f:74:f5:64:45:1c:a6:23:8b:b7:de:5f:88:1b:64:4f:
         fd:5a:ae:54:ee:10:a4:92:c3:64:5e:b3:fc:74:50:f6:c3:45:
         e8:28:f5:34:de:80:1d:cf:be:69:37:08:f4:bd:11:54:f4:3e:
         af:2c:0c:bc:06:19:b9:a0:f8:ae:8c:cb:27:56:c3:b9:a1:c3:
         a8:a2:ec:dd:cd:7a:52:b5:37:49:29:a5:44:d2:f4:79:e4:8a:
         f6:8e:93:26:a1:8d:49:b4:d0:12:2e:62:c4:19:ee:71:19:7b:
         7a:ca:53:5b:8d:44:00:aa:0c:2d:36:a4:f3:e6:4e:73:38:e5:
         36:b3:d0:61:88:32:77:ac:72:f3:20:ba:99:be:e9:f6:da:f2:
         e2:02:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org