Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/eLYk4OYap95oG6RmftpBEoPryCw.roa
File:                     eLYk4OYap95oG6RmftpBEoPryCw.roa (raw, json)
Hash identifier:          7BHRZVQ6JidUv6Hl+FXyV1KYARloWdyeLi+oIUJ4Hus=
Subject key identifier:   78:B6:24:E0:E6:1A:A7:DE:68:1B:A4:66:7E:DA:41:12:83:EB:C8:2C
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018682D1D50633BB213432323FD2F75681FC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/eLYk4OYap95oG6RmftpBEoPryCw.roa
Signing time:             Fri 24 Feb 2023 09:47:15 +0000
ROA not before:           Fri 24 Feb 2023 09:47:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209371
IP address blocks:        77.47.142.0/24 maxlen: 24
                          77.47.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 25 Feb 2023 09:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:82:d1:d5:06:33:bb:21:34:32:32:3f:d2:f7:56:81:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Feb 24 09:47:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78b624e0e61aa7de681ba4667eda411283ebc82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:60:58:8b:98:48:35:17:d1:fd:e2:10:7a:d7:
                    c2:b0:9f:cb:7d:c8:a3:51:a3:52:de:70:33:ba:2f:
                    1d:47:69:cd:a6:c4:97:bc:4d:db:59:b2:0e:cc:0b:
                    51:cb:dc:c2:a4:af:c4:56:c5:51:c4:ec:3b:28:3b:
                    33:b0:87:9f:61:33:69:17:53:81:93:da:64:bf:af:
                    6e:79:32:31:68:4a:bc:e6:d1:16:c3:82:b1:4d:a6:
                    ad:15:b4:2a:48:a7:93:1d:27:2d:f3:55:de:33:5e:
                    05:91:4e:b4:ce:10:c4:1d:fb:e7:12:d4:5a:17:49:
                    8d:ff:ac:2f:2c:9f:cb:4e:8d:0b:2d:ee:10:d2:44:
                    15:b4:a7:a8:10:b7:6e:7d:46:e3:68:00:c1:ef:ae:
                    c6:66:df:f7:0e:a8:3b:d8:7a:b1:d1:0f:d0:0f:79:
                    46:14:35:c2:bd:98:a4:27:bc:6d:fb:ce:6a:ca:0a:
                    12:f2:c3:e6:f0:87:f6:18:56:f5:a6:d4:02:6e:70:
                    9d:10:f2:47:06:72:aa:4a:89:21:86:cc:00:05:a6:
                    25:64:24:b7:47:6e:a7:9a:e8:23:35:42:07:4e:8f:
                    d3:fd:26:0f:b7:00:f6:f3:20:c5:db:2c:be:cb:b7:
                    b6:58:b4:7c:b8:39:35:dd:26:bc:8e:ee:8a:a2:de:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B6:24:E0:E6:1A:A7:DE:68:1B:A4:66:7E:DA:41:12:83:EB:C8:2C
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/eLYk4OYap95oG6RmftpBEoPryCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.142.0/24
                  77.47.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:87:e0:7c:6d:2d:a2:6c:51:38:41:26:d6:39:e5:9c:9c:
         56:5e:da:f3:ab:52:70:63:db:5f:0a:95:9f:18:1d:f0:ed:02:
         40:3d:d2:80:82:57:48:a0:84:be:a3:8b:49:2a:10:9b:2a:f5:
         13:3b:ed:04:22:e8:c5:03:2e:17:ff:6f:6a:0b:f0:8c:ef:7c:
         a4:1d:56:18:e0:c7:6f:6d:35:7d:e3:38:27:c7:81:6f:0e:14:
         ca:ea:b3:4e:2d:33:39:78:a6:67:77:4c:6f:99:41:6f:41:ba:
         fc:da:70:21:20:e5:c2:48:aa:bd:56:0a:ef:6f:20:7b:7e:57:
         62:ea:81:61:b2:fe:76:db:86:bb:20:d4:c0:9e:db:38:c4:e2:
         64:2a:9c:1a:34:18:15:79:84:56:46:dd:b7:45:fd:7f:e1:dc:
         00:5f:66:35:ed:60:d0:63:7b:fc:da:c6:77:34:62:f4:ef:c7:
         63:6f:a1:2f:04:8b:97:60:0b:bc:8a:e5:14:de:67:3a:74:3d:
         79:82:3f:f8:7c:ff:11:1b:7d:a1:43:cb:df:93:be:3d:9c:71:
         69:2b:76:17:88:8a:26:14:c4:55:f0:9d:d7:1d:f1:4a:e0:72:
         f9:1a:05:27:25:75:8d:b9:e1:15:51:81:93:64:1b:82:d2:00:
         fa:af:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org