Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sOfTllJAfjDq4hc87Fv4XsOmmzM.roa
File:                     sOfTllJAfjDq4hc87Fv4XsOmmzM.roa (raw, json)
Hash identifier:          13P2F1Xf8UsF90o4oaHrghImOGHMUd3zM+LZQZRVV+U=
Subject key identifier:   B0:E7:D3:96:52:40:7E:30:EA:E2:17:3C:EC:5B:F8:5E:C3:A6:9B:33
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018A9339C14359B4C20E8EFDAC483A9E982E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sOfTllJAfjDq4hc87Fv4XsOmmzM.roa
Signing time:             Thu 14 Sep 2023 10:25:50 +0000
ROA not before:           Thu 14 Sep 2023 10:25:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        77.47.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:39:c1:43:59:b4:c2:0e:8e:fd:ac:48:3a:9e:98:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Sep 14 10:25:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0e7d39652407e30eae2173cec5bf85ec3a69b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:10:ac:8c:52:41:d7:3a:07:0b:55:fc:5c:
                    a4:8a:13:dd:98:97:a5:59:e4:93:45:9d:c0:c1:4e:
                    9e:8b:e9:a2:de:68:50:68:a4:82:db:85:0c:89:2d:
                    af:c0:fd:92:b7:17:74:99:5a:be:a3:80:24:f4:f0:
                    fd:f6:02:7c:79:09:96:f5:bc:d0:ee:59:23:81:73:
                    5f:b9:36:5c:83:87:90:3b:7a:7f:57:96:42:22:6d:
                    98:69:48:9c:26:84:f5:ce:77:04:ac:13:b9:5a:89:
                    95:6b:f1:48:fa:06:2c:b8:b8:78:ab:1c:dc:fe:9d:
                    79:d2:3d:a0:dd:68:6f:e2:01:9d:a7:6a:6b:81:a6:
                    bd:0a:dd:c4:23:b1:87:9e:bc:5b:5d:20:49:8d:61:
                    79:8c:59:7a:8e:68:2b:dd:9f:a3:28:01:99:2b:c2:
                    c6:64:af:f4:02:d9:f9:52:87:57:68:62:a8:81:6a:
                    d4:79:95:85:3e:8c:1a:7f:79:d9:7f:15:ba:51:73:
                    00:26:f9:c0:db:1e:15:5a:96:3f:f3:87:37:84:98:
                    50:3b:65:84:ed:f9:63:ce:e2:87:fa:53:22:e2:ad:
                    09:e3:bb:56:f9:2b:fb:5b:bc:02:c5:63:c2:a6:4f:
                    97:77:01:6a:9e:85:38:31:9c:1d:4f:bc:e2:f2:06:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E7:D3:96:52:40:7E:30:EA:E2:17:3C:EC:5B:F8:5E:C3:A6:9B:33
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sOfTllJAfjDq4hc87Fv4XsOmmzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:06:ad:44:35:f1:33:93:75:6d:af:9f:3e:fe:d5:a2:d1:
         ef:ab:82:ca:e2:d9:ee:e6:f4:2c:06:6d:94:dc:99:89:e4:e9:
         fc:87:14:a2:dd:99:57:42:8f:fd:f4:c3:29:8c:a1:76:b7:a4:
         51:d0:dc:99:0d:e4:7c:e5:c3:c8:1a:e4:8d:01:83:76:b3:a6:
         f4:b4:c7:2f:c1:3b:a6:dc:3a:25:05:78:e6:50:bc:5c:99:9c:
         a8:b5:01:95:aa:c7:77:9e:b7:9f:30:90:84:8a:02:5f:6e:0c:
         09:5a:0e:58:40:45:00:fc:88:28:2b:e4:b8:1b:7e:41:c8:03:
         de:fe:69:c1:2f:ea:2d:0b:9c:6f:48:05:51:20:76:29:79:46:
         d7:13:4c:ef:9a:90:47:76:d7:af:e0:68:75:2d:b5:b0:2e:e0:
         38:9d:98:4f:8c:6c:e2:0e:7d:90:94:7e:68:c9:6e:48:d0:f3:
         58:9f:48:82:a6:3a:90:76:c9:4c:e7:82:45:33:d1:3e:22:6f:
         4e:c6:9e:3d:b7:c4:5a:58:6c:fd:12:f1:12:7e:35:08:bb:f1:
         51:8e:2b:b3:8b:35:6c:ed:86:86:39:7c:9a:44:7a:0e:05:7b:
         ca:07:07:1b:63:68:37:00:90:d4:b5:74:39:18:2d:7b:c9:66:
         63:45:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org