Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Vl5VomEVVYOVvJOtUBichBYkcCY.roa
File:                     Vl5VomEVVYOVvJOtUBichBYkcCY.roa (raw, json)
Hash identifier:          ViAgfrTTFFoqVogNhax2THw/zUv2tsNRmpedw6l6HRU=
Subject key identifier:   56:5E:55:A2:61:15:55:83:95:BC:93:AD:50:18:9C:84:16:24:70:26
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01870A05D0D9BA5111127295A144F0C419AA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Vl5VomEVVYOVvJOtUBichBYkcCY.roa
Signing time:             Wed 22 Mar 2023 15:52:45 +0000
ROA not before:           Wed 22 Mar 2023 15:52:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        77.47.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Mar 2023 09:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0a:05:d0:d9:ba:51:11:12:72:95:a1:44:f0:c4:19:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar 22 15:52:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=565e55a26115558395bc93ad50189c8416247026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:24:13:84:c8:b3:28:e1:81:e2:cf:14:48:
                    0c:ba:31:db:f9:b4:92:5a:e0:ef:8f:54:62:2d:6d:
                    47:2e:74:07:db:8b:18:de:d6:5b:50:c6:7a:d4:27:
                    d6:c2:ae:c9:63:0e:00:5d:ce:a1:4d:f6:f5:87:25:
                    e2:ad:89:9f:2c:8d:1c:3b:e5:bb:24:e9:47:6d:e0:
                    45:5c:2c:d5:c6:66:39:72:7c:a0:01:fc:bc:f1:7a:
                    68:83:86:d3:65:e6:75:34:c8:72:05:4c:c7:70:10:
                    c4:8c:88:fb:96:e9:70:44:55:28:a4:d7:d6:6f:63:
                    92:0e:25:b8:91:aa:03:f8:07:25:6c:fe:5e:0d:36:
                    82:b3:e9:cf:f4:37:06:ee:dd:1b:92:2b:74:4b:13:
                    d9:3e:12:d0:02:b5:6a:32:b7:29:6f:91:18:04:f5:
                    09:45:91:54:ea:4f:a9:11:96:62:27:2a:6a:65:f7:
                    c6:3c:6b:90:12:b4:18:67:cb:81:0f:bc:4a:05:8f:
                    cd:73:3d:46:5c:b8:c2:d2:ab:a5:ff:0a:ef:c1:76:
                    cb:ed:f6:6d:88:0d:7b:bc:58:db:b0:fb:43:a2:85:
                    51:4a:0b:ca:a2:ab:9a:3a:f6:92:49:9f:6a:c4:87:
                    14:27:d4:04:f5:50:cf:90:85:8f:d4:6f:c3:1b:c0:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:55:A2:61:15:55:83:95:BC:93:AD:50:18:9C:84:16:24:70:26
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Vl5VomEVVYOVvJOtUBichBYkcCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:20:00:67:de:15:de:87:85:f1:4a:ce:a5:c6:e1:24:87:b3:
         f2:4d:83:a5:e1:73:bb:5c:5f:a7:41:53:1e:be:76:b1:e0:f1:
         8a:88:f7:ca:c3:b6:81:a4:34:54:7d:3d:fd:00:73:3d:c9:34:
         ba:c3:de:2f:36:07:9d:04:f5:40:4f:27:26:42:fd:92:73:42:
         76:fe:de:01:33:b0:58:58:ff:82:95:b1:96:9f:95:5e:74:23:
         c3:cf:99:ae:b5:7f:42:ef:d5:3c:d3:1d:c7:92:a7:a1:2b:b3:
         e3:2b:a4:b0:8a:e6:c3:90:57:ba:2d:7b:03:b8:0a:dc:9f:40:
         3e:a5:f4:b4:9e:d9:17:26:29:fb:3a:79:03:6a:6c:0f:af:c8:
         da:b9:40:61:f6:79:17:70:d0:9c:e0:41:3f:74:8a:2e:aa:2a:
         df:88:bf:99:95:18:70:92:bc:bf:13:f0:d1:98:3d:d7:fc:b3:
         75:85:30:6d:95:fa:11:48:83:de:48:ec:76:ba:15:46:09:bb:
         40:9a:f4:f6:5a:3b:5b:ab:49:56:14:f4:9f:b1:18:d1:4f:62:
         1b:54:19:e1:47:78:e7:3c:96:39:63:51:ff:6a:0f:ba:64:2c:
         71:7d:2e:e3:f2:90:f0:9c:92:da:73:d4:b1:fe:0c:4e:c2:95:
         7d:26:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org