Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/gLrY16enfZGHJ-3NoxMctd2SYgE.roa
File:                     gLrY16enfZGHJ-3NoxMctd2SYgE.roa (raw, json)
Hash identifier:          SNybyV4sLNmwFG0ntkR54nYOcOnbkQZorPXslCVvu5E=
Subject key identifier:   80:BA:D8:D7:A7:A7:7D:91:87:27:ED:CD:A3:13:1C:B5:DD:92:62:01
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018678241ABC7D449D6F45D50CF52F74E690
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/gLrY16enfZGHJ-3NoxMctd2SYgE.roa
Signing time:             Wed 22 Feb 2023 08:01:17 +0000
ROA not before:           Wed 22 Feb 2023 08:01:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201021
IP address blocks:        77.47.240.0/24 maxlen: 24
                          77.47.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 Feb 2023 08:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:78:24:1a:bc:7d:44:9d:6f:45:d5:0c:f5:2f:74:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Feb 22 08:01:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80bad8d7a7a77d918727edcda3131cb5dd926201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:ca:96:8f:e3:53:a4:ae:c4:f4:14:d1:64:
                    89:3a:e7:87:55:85:30:af:6a:25:d4:e6:c5:ad:82:
                    7a:44:7d:47:b9:bf:5b:72:8a:ca:72:80:c4:11:81:
                    58:9f:a0:2b:41:68:c1:11:36:fc:b6:40:c1:db:48:
                    b3:5c:24:ab:6d:9e:11:e1:89:51:d7:41:63:08:de:
                    c3:6a:1a:4d:16:8f:02:bb:67:5d:2b:90:23:3d:82:
                    b2:16:ae:f8:e5:75:0f:a5:9c:96:3f:23:b8:84:29:
                    f6:b5:c8:86:ed:09:3e:fa:80:27:a0:ca:22:44:b6:
                    99:c6:97:d8:62:d8:e0:61:3c:b7:8d:37:c4:88:1b:
                    f7:e0:e7:8c:67:78:30:f1:5a:8e:79:c9:22:54:52:
                    1a:69:cd:42:c6:40:55:8d:24:bd:e5:49:f9:7b:93:
                    df:07:b0:c5:ee:e6:86:bf:83:2c:a3:4b:44:89:1e:
                    6f:95:35:f1:bf:3f:69:ae:b7:3e:d7:6a:f4:92:90:
                    94:dd:b0:1a:b6:80:d0:cc:c2:47:e3:ac:6b:4c:47:
                    7e:5b:bf:06:a0:76:a4:4c:ab:98:b8:d0:2b:88:1d:
                    e7:d6:a1:ca:ca:ab:2f:8d:56:51:99:20:13:5b:23:
                    b1:7f:ae:99:63:b7:75:b9:bd:22:de:f4:71:89:b9:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BA:D8:D7:A7:A7:7D:91:87:27:ED:CD:A3:13:1C:B5:DD:92:62:01
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/gLrY16enfZGHJ-3NoxMctd2SYgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:60:b4:d9:6f:99:59:90:30:20:9f:25:e9:53:b6:13:04:93:
         82:08:58:21:05:9c:8c:a2:50:08:5b:ad:69:34:d8:0c:9b:da:
         6b:8e:bb:ef:43:b1:aa:4c:96:2f:f4:69:ca:90:08:11:b0:7a:
         e8:76:97:5b:87:52:f1:16:95:0b:0a:23:56:63:a9:cf:7b:8c:
         4d:bc:c9:74:6b:2f:53:18:40:18:f8:b6:55:9d:63:62:23:bf:
         e2:43:26:72:8b:cc:44:a0:36:35:86:e1:e8:bf:97:47:4d:d2:
         21:bd:fd:60:eb:8d:5b:e1:a2:b8:82:24:00:36:ab:c2:54:b1:
         a8:86:36:d4:6e:6b:7b:2e:b0:7e:72:83:ec:60:d2:ab:83:a7:
         d1:6c:e6:86:74:a9:33:d0:04:19:fd:d0:d8:4c:0e:0f:30:8b:
         d5:b7:8a:5b:d5:f2:47:f6:ba:98:09:c6:37:3f:55:60:f5:84:
         34:e1:b0:d1:64:67:96:d6:fc:45:7b:5b:95:b7:e0:e7:61:1c:
         16:ab:ee:d2:11:e6:3b:e8:66:62:cd:37:7f:1f:29:b3:17:41:
         4c:9a:14:a0:14:2b:17:13:07:58:63:64:26:90:ed:8d:36:e9:
         73:84:e6:a1:91:6f:0e:14:62:55:70:4b:b8:cc:3e:89:d5:27:
         25:db:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org