Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/M_Hid158bEZn3ImaLIBpcaf_43Q.roa
File:                     M_Hid158bEZn3ImaLIBpcaf_43Q.roa (raw, json)
Hash identifier:          jA2vKlPdtgm1uVl/rWIwTgd52PeGJmkrKDWETrigFSE=
Subject key identifier:   33:F1:E2:77:5E:7C:6C:46:67:DC:89:9A:2C:80:69:71:A7:FF:E3:74
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0188901E1B503A4315DDCD299EEBC1BE53D6
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/M_Hid158bEZn3ImaLIBpcaf_43Q.roa
Signing time:             Tue 06 Jun 2023 09:51:12 +0000
ROA not before:           Tue 06 Jun 2023 09:51:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50225
IP address blocks:        77.47.157.0/24 maxlen: 24
                          77.47.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 11:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:1e:1b:50:3a:43:15:dd:cd:29:9e:eb:c1:be:53:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jun  6 09:51:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33f1e2775e7c6c4667dc899a2c806971a7ffe374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:30:35:2f:c8:8b:ca:ef:0e:9e:40:93:63:
                    d8:27:c6:3a:4f:0d:a0:4f:23:7b:f3:65:9c:46:34:
                    11:1b:76:20:d5:ce:c6:f5:6c:ab:92:c1:21:44:ee:
                    4b:e6:b4:62:f8:35:28:f6:d7:9e:47:21:56:86:09:
                    6b:cf:00:c4:d2:3f:5f:c0:8c:5f:b4:8b:ff:cf:a8:
                    01:a1:70:07:c6:70:e8:f3:3c:3f:24:3d:0d:af:ca:
                    d1:b0:8b:97:2e:60:a8:88:f8:3a:72:e5:0f:33:c1:
                    d2:b6:09:fc:5e:97:d1:65:5d:7c:e2:10:f6:65:d0:
                    e9:9d:80:ef:2a:af:9a:e7:0c:4a:f0:d5:ac:c8:08:
                    a1:24:e3:f6:bb:a0:da:ba:d0:b5:83:a9:6d:39:7e:
                    3d:a6:89:83:21:e0:ec:c8:69:76:a0:54:4e:a4:be:
                    b3:ef:ce:36:7a:f9:67:e2:81:2d:f2:1c:b8:5b:88:
                    47:34:14:16:9a:c3:a1:e8:ca:91:a5:01:d5:4e:73:
                    97:ee:bd:75:05:1c:b1:7f:4e:39:0b:54:2e:2d:c4:
                    57:72:90:95:bf:58:67:89:e7:49:3a:a4:bc:c8:8a:
                    3a:b4:43:a0:3a:f4:75:cb:46:1f:6a:e8:d6:17:1a:
                    10:a2:36:33:a3:18:4b:0d:69:81:ff:cf:7e:55:a6:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:E2:77:5E:7C:6C:46:67:DC:89:9A:2C:80:69:71:A7:FF:E3:74
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/M_Hid158bEZn3ImaLIBpcaf_43Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.157.0-77.47.158.255

    Signature Algorithm: sha256WithRSAEncryption
         46:25:66:b0:f8:48:0f:96:e3:c5:85:b1:ae:b2:8f:68:e0:a2:
         5d:f5:92:b1:91:c1:b9:79:08:e8:2d:cb:fe:46:17:f8:5a:2c:
         c9:d8:83:6f:21:b9:59:6c:5f:c9:62:2c:8a:e6:a5:68:bb:f6:
         48:10:ea:b4:3d:07:6a:f1:55:38:6e:54:45:a8:4f:24:40:30:
         a6:1d:c2:26:14:9b:38:62:7b:eb:f3:10:e0:30:e7:98:05:96:
         cb:2b:6a:98:7a:d4:c5:86:78:e9:63:6a:b9:dd:e7:ee:f6:11:
         ad:49:22:bf:5c:61:21:ca:ab:4b:e0:e5:fb:a5:fd:77:91:1f:
         53:8e:f3:ea:83:1d:a9:a0:5f:20:73:89:ee:1f:71:c6:97:66:
         68:b6:31:70:47:d2:65:96:2b:eb:7c:ad:30:41:a3:c4:f1:b9:
         77:aa:6e:b5:79:1e:14:05:ba:41:18:62:68:ac:e9:1f:d7:bc:
         80:22:87:10:31:96:2c:ba:ca:1b:1a:18:fa:3d:a9:73:23:c0:
         a5:79:ea:da:6a:e6:1a:ad:a4:8d:b1:1b:f0:a1:79:cd:b1:84:
         6c:62:54:df:79:eb:34:ea:74:fa:b0:88:cc:8e:e3:d1:8c:1d:
         ae:6b:b3:0c:5f:54:8b:01:fc:d6:3e:43:08:49:ba:d8:45:26:
         9c:fa:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org