Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RTMVVOIKXX6zIEEf3Q8El8OQZ3k.roa
File:                     RTMVVOIKXX6zIEEf3Q8El8OQZ3k.roa (raw, json)
Hash identifier:          qG/zWg9pORzDjtdUWiTcOe3W1XOwcLH+pdivpHMCitg=
Subject key identifier:   45:33:15:54:E2:0A:5D:7E:B3:20:41:1F:DD:0F:04:97:C3:90:67:79
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018608528B3578B3EED1D0891355CFBC9201
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RTMVVOIKXX6zIEEf3Q8El8OQZ3k.roa
Signing time:             Tue 31 Jan 2023 14:54:32 +0000
ROA not before:           Tue 31 Jan 2023 14:54:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204197
IP address blocks:        77.47.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 09:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:08:52:8b:35:78:b3:ee:d1:d0:89:13:55:cf:bc:92:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan 31 14:54:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45331554e20a5d7eb320411fdd0f0497c3906779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:0f:96:63:bf:14:83:01:85:2d:12:b7:97:
                    82:6b:68:cf:7f:d2:65:55:8a:85:84:05:d6:48:7e:
                    e5:00:d6:ac:4a:fc:bc:2e:3b:bb:e6:a2:51:d7:0b:
                    d5:08:51:a6:ce:ab:84:41:82:49:ae:f4:af:68:a6:
                    5f:e8:d9:e6:ed:6f:28:72:27:05:9d:a8:95:87:b9:
                    62:56:0a:13:39:c2:53:5c:a4:af:eb:2b:c8:c3:d9:
                    d2:79:8f:fb:c4:f1:6f:79:44:df:4d:6e:57:2b:a6:
                    62:10:17:3e:96:7b:09:34:55:d5:33:44:45:22:11:
                    9b:b0:34:aa:19:f2:02:2d:e6:f1:23:97:01:9e:73:
                    0c:37:ce:df:d7:d7:f1:16:c2:b8:8d:91:95:76:b3:
                    48:84:53:a3:a7:59:9d:7b:92:a3:fc:85:65:01:80:
                    17:a9:e3:b3:30:44:3c:73:81:9b:5a:d0:5e:42:05:
                    7a:7c:8a:72:d3:85:7a:e0:a1:5b:a3:ab:30:f9:e1:
                    65:1b:5a:f4:a0:a4:39:ae:03:60:02:5c:fe:f9:7a:
                    2f:5b:cd:1b:04:a0:ca:2e:f6:2e:0a:19:46:b1:5f:
                    21:01:d8:00:f1:30:d3:e3:c1:a7:df:83:cc:e3:3b:
                    83:80:d3:73:cb:cd:df:a0:d7:4b:f1:97:46:1b:f9:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:33:15:54:E2:0A:5D:7E:B3:20:41:1F:DD:0F:04:97:C3:90:67:79
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RTMVVOIKXX6zIEEf3Q8El8OQZ3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:b4:d2:09:27:4c:ab:c9:30:97:87:2d:e0:3f:d9:c0:ff:
         39:2f:18:c2:21:70:46:40:e0:2d:d2:fb:e2:5c:5e:23:00:61:
         fd:d3:cd:d1:97:5f:e5:4e:b6:13:9f:d6:09:1b:17:2e:10:04:
         a6:ae:6d:94:33:16:67:23:f5:cd:41:37:99:46:a8:85:29:3b:
         36:af:75:de:74:47:0d:18:49:5a:4f:e1:f6:01:15:18:8e:bd:
         eb:c1:e4:82:0f:2c:1b:1d:a3:6f:49:bf:8b:a6:54:58:a2:82:
         7e:61:d1:c2:2b:05:8f:9b:86:c1:8c:5e:aa:6f:6f:6e:00:be:
         4d:ce:1d:c6:9a:19:f4:e6:62:1e:f0:a0:47:06:38:fb:20:5b:
         61:df:de:41:48:12:e0:e1:04:ee:ed:ef:b4:12:26:5f:3f:57:
         2e:7b:b9:33:c7:5b:84:b3:d5:45:7b:60:0c:db:4a:18:ac:15:
         f1:43:bf:f2:f3:9a:6d:be:9f:c5:a4:2a:8c:a5:a5:00:5d:fa:
         6a:5c:09:60:9d:55:64:11:4b:ad:11:6e:dd:0c:23:ba:40:75:
         90:9b:98:d4:f9:eb:d8:c5:11:c5:c1:c3:39:11:b0:68:f8:01:
         9c:90:7b:31:1d:80:56:da:ec:cd:e2:c4:f8:88:03:31:4a:31:
         f0:ee:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org