Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ModYVTAABUp886by-ScDiwOmUPA.roa
File:                     ModYVTAABUp886by-ScDiwOmUPA.roa (raw, json)
Hash identifier:          AsY9O3/ONW7OAb/E95bUc3VmzCeNzLMgtHTwdN07V7U=
Subject key identifier:   32:87:58:55:30:00:05:4A:7C:F3:A6:F2:F9:27:03:8B:03:A6:50:F0
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0191138F015B93A329045AAF3F4DEA2A92E4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ModYVTAABUp886by-ScDiwOmUPA.roa
Signing time:             Fri 02 Aug 2024 14:47:04 +0000
ROA not before:           Fri 02 Aug 2024 14:47:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6830
IP address blocks:        77.47.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 10:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:13:8f:01:5b:93:a3:29:04:5a:af:3f:4d:ea:2a:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Aug  2 14:47:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=328758553000054a7cf3a6f2f927038b03a650f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:eb:2c:46:8f:35:20:fb:e8:0b:da:c7:ab:
                    be:8b:e6:e4:b7:b2:87:8f:fe:01:19:34:a8:b3:16:
                    ae:70:18:73:61:fc:d8:e1:79:08:f2:39:f4:d9:5e:
                    a1:a0:7e:12:b5:b3:1a:d1:20:60:f8:9b:43:c0:7d:
                    79:f7:55:d9:c2:1d:77:93:b6:65:39:14:61:ef:69:
                    5a:9f:ab:ad:dd:9a:d9:43:14:27:9c:d7:b6:cd:80:
                    cc:7e:0b:9a:5a:a9:b0:c6:95:1f:5d:c1:8f:cf:8b:
                    53:de:c8:a0:81:66:69:f4:51:53:09:7d:49:1f:79:
                    7a:d0:d1:ea:a8:5d:d0:8b:9c:da:ac:f8:f1:16:3a:
                    bc:91:ce:77:a3:8f:78:b9:17:e2:5c:68:f5:dd:3e:
                    78:54:d3:62:df:54:f2:b2:ee:32:91:5b:d5:02:3c:
                    33:75:78:0a:4d:46:8c:ed:48:af:86:c6:20:b1:33:
                    83:1d:6d:4e:3f:54:c2:b5:1a:a8:2e:4f:49:c0:cd:
                    cd:51:5a:44:ae:3c:c7:c6:d8:84:8f:e1:91:8a:1b:
                    75:6e:ce:ad:d3:ec:c0:12:cb:3d:c7:4b:c5:8d:2a:
                    e8:b5:97:ee:e0:f1:fa:4e:2a:ed:27:2c:a9:34:da:
                    43:82:cf:6d:97:94:a5:d1:9a:3a:4a:12:ad:fd:16:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:87:58:55:30:00:05:4A:7C:F3:A6:F2:F9:27:03:8B:03:A6:50:F0
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ModYVTAABUp886by-ScDiwOmUPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:66:6f:57:13:0d:ac:bc:04:1b:53:8b:28:bc:e8:8a:9f:
         92:a9:86:97:73:69:e2:b4:2c:8b:58:e5:51:88:b6:2e:6a:c2:
         c1:a3:a0:b8:d1:28:93:80:8f:ef:2b:f5:f7:dd:4f:73:d2:51:
         26:30:73:f8:58:1c:f7:49:d0:ee:23:f6:29:75:02:ca:06:96:
         f8:00:d8:3f:8f:8e:de:a5:02:fe:55:04:6a:23:ed:91:8d:01:
         51:6f:47:8f:d5:cc:43:46:c7:c6:e6:43:26:ad:c0:cf:56:4d:
         ec:15:46:56:8d:22:e5:e9:04:e7:a8:48:02:57:07:4f:6f:58:
         94:80:1c:fd:09:1f:d2:e7:5a:a4:32:95:bc:ea:35:c2:01:87:
         81:1c:d5:27:90:65:ed:45:f9:71:9c:65:59:13:c4:03:63:2c:
         81:26:51:ff:b9:bc:23:35:11:7f:13:a6:54:98:49:42:be:be:
         28:9d:a6:8f:df:03:95:79:a3:37:26:62:ec:c8:9e:41:e3:42:
         05:61:1e:47:0d:f6:81:86:a6:9a:d2:4b:1c:c0:19:ed:a6:c1:
         4e:34:08:93:8a:b7:85:87:d8:6a:cc:9a:0a:4b:83:c7:33:5e:
         ba:d7:e4:80:a1:80:07:9f:91:9a:ad:54:06:7f:be:f2:3a:35:
         e2:36:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 11:53:38 2024 by rpki-client on console-fra.rpki-client.org