Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aR5otnqrqGCQmac2K09mLg7We-0.roa
File:                     aR5otnqrqGCQmac2K09mLg7We-0.roa (raw, json)
Hash identifier:          ta/mZnVrndGbxf+uPOvM75Wlyl8JXb+QJjaMhZs6BGw=
Subject key identifier:   69:1E:68:B6:7A:AB:A8:60:90:99:A7:36:2B:4F:66:2E:0E:D6:7B:ED
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018A743D1781124A2110049EA048CA65E7B7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aR5otnqrqGCQmac2K09mLg7We-0.roa
Signing time:             Fri 08 Sep 2023 10:01:15 +0000
ROA not before:           Fri 08 Sep 2023 10:01:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50225
IP address blocks:        77.47.240.0/24 maxlen: 24
                          77.47.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:74:3d:17:81:12:4a:21:10:04:9e:a0:48:ca:65:e7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Sep  8 10:01:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=691e68b67aaba8609099a7362b4f662e0ed67bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:8a:81:7e:88:e9:bb:ed:4e:63:b8:ea:15:
                    83:a5:ab:2e:3a:d2:ab:0e:63:4b:48:85:31:ab:00:
                    cf:e0:c8:d4:5f:79:63:ec:54:54:b9:79:14:64:2e:
                    4b:82:f5:58:5d:46:db:5f:8b:ab:f3:0b:18:cf:48:
                    d4:62:38:ba:c0:cb:2b:7f:46:56:57:2c:38:54:dc:
                    26:cf:65:1b:f2:a1:b6:b4:18:cc:ea:42:92:66:55:
                    84:ba:8d:00:50:e8:73:ad:7e:29:fb:1f:dd:53:d6:
                    b7:a7:c9:89:6a:d6:5a:f6:18:7c:14:79:ec:e3:7d:
                    3d:71:de:a4:d9:fb:20:05:cd:fd:f7:7a:e6:f9:f3:
                    72:9a:8d:c7:17:4c:bb:17:34:22:e8:ba:e7:47:7e:
                    1f:8b:87:6d:40:4c:4a:fc:28:50:6a:3a:7e:71:ed:
                    f0:0c:d8:1a:42:2f:ad:1c:3f:58:4d:ae:36:1b:5c:
                    09:22:87:40:6a:f8:1d:7d:90:0e:5d:24:a8:68:af:
                    b5:47:82:32:25:86:83:c9:3c:36:f6:48:6f:8e:a2:
                    c5:98:3f:69:ef:25:40:91:69:c6:74:38:a9:ee:5a:
                    c5:da:65:21:6f:0c:22:0c:e6:29:f4:ad:bb:c3:02:
                    4a:4c:03:2b:f8:c1:fb:cb:26:54:5d:c2:68:d8:77:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1E:68:B6:7A:AB:A8:60:90:99:A7:36:2B:4F:66:2E:0E:D6:7B:ED
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aR5otnqrqGCQmac2K09mLg7We-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:3a:be:89:a8:6c:c7:bc:47:76:b8:19:64:ac:93:82:7f:97:
         3d:91:a3:8b:34:62:51:d0:64:35:f8:16:1d:42:f2:0a:ed:13:
         09:03:09:0f:22:92:1e:00:67:97:6c:e2:da:a6:c6:6d:38:8a:
         fe:cd:dc:89:ad:25:b6:85:b3:53:7c:8c:4e:18:9d:e0:e2:72:
         d8:13:63:22:fb:fb:6c:20:a4:79:82:ae:fb:e1:b4:3b:6b:f3:
         f9:32:b2:08:52:2f:a0:8d:a9:6d:01:5e:36:63:79:81:fa:f7:
         85:72:74:d5:9c:af:05:5a:e7:c7:4d:06:e9:c6:b0:c1:5a:c0:
         35:2c:d6:ed:8a:d9:29:7e:5f:0c:a1:13:d9:d1:62:a2:9c:92:
         d5:8b:a6:ed:fb:d7:66:29:23:16:82:ae:38:9e:a6:29:8f:d7:
         e4:86:99:18:33:10:ad:85:dd:31:45:35:26:8a:c9:34:f5:c7:
         45:65:22:d1:0b:e8:36:65:87:17:0e:03:18:af:26:27:a4:44:
         87:14:e8:88:db:d7:04:e0:86:37:45:68:2b:8e:fc:47:e7:8f:
         57:1f:91:61:5c:e9:41:ae:69:93:11:ee:5e:a5:c0:16:4b:97:
         34:06:d8:f1:40:a6:47:20:fe:ee:dc:b4:49:d3:11:6f:35:18:
         da:c5:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org