Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/iSEPREs2FMuBrjqUCU4DcLWg81A.roa
File:                     iSEPREs2FMuBrjqUCU4DcLWg81A.roa (raw, json)
Hash identifier:          7b4p/1JGkwiHaCNo38Ewav2B4eoLO1wKyei6IBNvbv4=
Subject key identifier:   89:21:0F:44:4B:36:14:CB:81:AE:3A:94:09:4E:03:70:B5:A0:F3:50
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018AF0FC28882CAAC0A8F432235F4E5EF1A2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/iSEPREs2FMuBrjqUCU4DcLWg81A.roa
Signing time:             Mon 02 Oct 2023 15:22:51 +0000
ROA not before:           Mon 02 Oct 2023 15:22:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        77.47.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f0:fc:28:88:2c:aa:c0:a8:f4:32:23:5f:4e:5e:f1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Oct  2 15:22:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89210f444b3614cb81ae3a94094e0370b5a0f350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:c0:c6:1f:cc:7d:6e:84:a0:5f:0f:8f:9f:
                    1e:dd:b8:9b:1f:ec:ad:7b:2c:8a:fc:7c:3a:58:d1:
                    53:15:3d:a5:11:82:ba:66:fa:14:57:f8:4a:2c:19:
                    3e:ed:f9:34:b5:b7:59:f1:56:54:db:bb:5e:a7:b3:
                    b7:f9:d6:1c:af:19:26:f6:f5:49:80:e9:0f:84:31:
                    1f:48:79:ba:55:d4:11:71:75:0e:63:17:20:b7:1a:
                    45:8d:6e:dc:c8:db:de:35:9c:af:f7:ac:35:cd:67:
                    ed:b0:e7:54:9f:2f:fb:eb:aa:04:91:cb:55:78:5a:
                    99:46:9c:a5:01:89:ad:fb:23:9b:a3:cf:56:92:4d:
                    95:d2:e0:65:ea:de:25:28:45:a7:ab:31:89:98:8c:
                    58:15:e9:f4:da:9b:3e:db:c8:ea:f1:d5:cd:a4:bd:
                    28:b2:94:ac:35:cd:53:86:c9:c4:57:48:90:e1:11:
                    25:0b:63:88:72:4f:ff:bd:a0:0a:f1:8a:49:77:64:
                    e6:1d:b6:ed:8f:f1:cf:44:78:07:3a:88:98:42:08:
                    44:31:5a:a1:47:d5:e8:a2:96:ea:f9:55:fc:3e:f2:
                    c0:f2:b4:c8:89:63:cb:6c:85:6d:26:e0:32:82:52:
                    39:9c:1b:a2:09:2d:b8:42:39:22:6c:33:98:38:15:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:21:0F:44:4B:36:14:CB:81:AE:3A:94:09:4E:03:70:B5:A0:F3:50
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/iSEPREs2FMuBrjqUCU4DcLWg81A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:a4:d2:df:ba:ec:0e:fb:cc:7b:02:a2:db:d4:52:b3:78:
         14:92:95:75:b9:79:b9:c6:05:67:6f:55:1d:d5:2e:10:6b:02:
         d5:06:8c:fc:35:d0:a7:a1:d9:c7:15:0f:fd:6d:cd:75:08:fe:
         f0:47:88:67:64:4d:82:31:9e:a4:1b:ec:b1:83:de:87:92:17:
         38:82:7e:8f:2f:d5:2b:51:8c:fe:53:0e:ad:ee:5f:8d:53:2a:
         aa:50:a9:7c:2a:3f:f2:ec:d3:a4:83:1c:dc:96:09:0e:8a:02:
         10:b3:43:83:9f:08:84:af:23:36:c8:0d:2b:48:f9:47:f3:7e:
         61:7a:fa:24:de:57:14:7e:c2:a8:7e:6f:be:f4:0c:5c:a2:03:
         87:0c:ef:16:1b:72:ad:92:5a:8c:1a:e5:c1:1b:e0:9c:79:aa:
         44:c6:e2:4e:3d:6d:61:76:ae:04:7b:e8:23:6a:b0:97:51:1d:
         81:13:89:85:09:0b:99:cb:86:e2:05:d2:14:b8:0c:c0:72:88:
         90:22:4e:64:9f:c7:7e:61:98:9a:12:0f:fe:0c:4f:9e:ee:b1:
         93:32:f2:13:d6:dc:24:71:09:72:0f:26:b8:0b:16:e0:1f:6f:
         6b:dd:4a:07:81:0f:59:5a:4b:81:6d:4b:a1:f5:0d:c7:24:c0:
         55:f7:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org