Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/wY_QtNbNxEFdMluywgsag7Us63Y.roa
File:                     wY_QtNbNxEFdMluywgsag7Us63Y.roa (raw, json)
Hash identifier:          lycXYXKwlHpqk6eMvIwbNMgwmsvgE9aYflQqtexo60k=
Subject key identifier:   C1:8F:D0:B4:D6:CD:C4:41:5D:32:5B:B2:C2:0B:1A:83:B5:2C:EB:76
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0189BBFF9F1090E36208480DD7301A4A3F11
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/wY_QtNbNxEFdMluywgsag7Us63Y.roa
Signing time:             Thu 03 Aug 2023 15:23:58 +0000
ROA not before:           Thu 03 Aug 2023 15:23:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        77.47.212.0/23 maxlen: 23
                          77.47.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bb:ff:9f:10:90:e3:62:08:48:0d:d7:30:1a:4a:3f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Aug  3 15:23:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c18fd0b4d6cdc4415d325bb2c20b1a83b52ceb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:96:30:31:18:c3:0f:f7:51:be:9e:72:aa:
                    2e:d3:49:f0:f4:40:1e:d9:66:e4:84:45:3b:ca:48:
                    cb:ac:b3:cd:65:56:98:ef:d7:02:a6:6a:4f:d6:3e:
                    db:a9:cd:18:4e:c7:7c:d7:c5:3d:91:30:db:9a:40:
                    ed:80:d2:fb:76:0d:4e:5b:45:c9:f7:73:82:01:32:
                    8e:d3:ef:09:27:c7:7c:91:9c:9e:6b:01:45:da:4b:
                    0a:6d:19:00:50:72:4d:4a:8f:50:2c:ea:8d:04:dc:
                    7c:d8:b9:a8:be:68:01:46:82:ad:fd:12:1f:ce:6d:
                    89:db:a8:76:d5:1c:ef:0a:03:6e:45:07:35:94:e7:
                    61:6e:df:bd:4a:a7:ec:ab:47:e3:1b:42:79:ea:3e:
                    15:80:56:05:82:ee:19:a2:e0:2c:13:2a:dd:5d:4a:
                    3f:88:35:ea:27:33:67:58:e8:35:2e:58:5a:e3:44:
                    e4:95:68:e3:84:f4:66:c5:f1:8f:e8:c5:8a:47:32:
                    1e:b2:8d:a0:dd:66:46:98:f3:0b:6a:c3:da:f6:56:
                    24:e5:03:84:52:0b:94:6d:d9:fb:7d:71:cb:25:90:
                    5a:18:ab:68:77:14:52:ad:42:66:a6:00:5f:e6:32:
                    ee:44:43:69:fd:67:14:3c:ee:59:5a:36:83:de:c5:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8F:D0:B4:D6:CD:C4:41:5D:32:5B:B2:C2:0B:1A:83:B5:2C:EB:76
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/wY_QtNbNxEFdMluywgsag7Us63Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.210.0-77.47.213.255

    Signature Algorithm: sha256WithRSAEncryption
         00:11:f8:50:5a:0a:2d:47:ec:1e:81:2a:1f:30:46:1b:61:35:
         8b:ba:c7:4b:2c:a3:0e:05:38:76:7f:bc:db:6a:2a:df:11:12:
         ed:b7:0a:f4:0c:0a:1f:21:c9:ad:f1:58:e9:2c:e8:7d:8a:51:
         ff:20:37:a5:e0:e2:14:65:d2:93:4f:79:6e:fb:a1:51:79:6e:
         5f:e2:ae:00:e5:52:88:bf:4e:be:4a:0b:2c:33:96:f1:45:3f:
         80:23:c8:7f:6b:db:f3:86:2a:0b:34:dd:f7:93:cf:b7:bd:eb:
         36:d6:62:b8:e2:b2:d1:89:8d:38:f3:83:d9:27:17:d7:67:76:
         3a:d7:9e:a1:1c:c7:90:19:ab:7e:98:a6:07:4b:20:4e:c4:04:
         fe:f8:d9:2d:e9:52:71:26:05:d1:95:9a:47:20:d8:7e:ef:9d:
         a2:9e:1f:07:f2:4a:cd:40:a0:ec:22:67:14:fe:37:e8:cf:d5:
         26:25:67:19:c9:73:ed:0d:74:d8:13:1f:06:88:34:80:54:0e:
         8e:65:02:25:e6:9d:b6:65:93:76:f0:10:36:3c:21:f1:df:6c:
         23:24:df:4e:ab:b5:f1:1d:b8:4e:a7:45:d6:f7:60:98:7c:27:
         c6:4a:4e:ed:d2:10:86:67:8e:df:59:35:8b:00:a4:34:27:49:
         ea:f7:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org