Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_wVP1muYhV3aiNLg26iZRK2CAo.roa
File:                     Z_wVP1muYhV3aiNLg26iZRK2CAo.roa (raw, json)
Hash identifier:          jJF0OsDq47jTspw8HKKOP/dOysPt670vwcOQEdP8DFw=
Subject key identifier:   67:FC:15:3F:59:AE:62:15:77:6A:23:4B:83:6E:A2:65:12:B6:08:0A
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018B0955DCC2095F836F4DF44EAFB58EEDD0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_wVP1muYhV3aiNLg26iZRK2CAo.roa
Signing time:             Sat 07 Oct 2023 08:51:43 +0000
ROA not before:           Sat 07 Oct 2023 08:51:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     27796
IP address blocks:        201.77.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:09:55:dc:c2:09:5f:83:6f:4d:f4:4e:af:b5:8e:ed:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Oct  7 08:51:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67fc153f59ae6215776a234b836ea26512b6080a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:3f:0d:c3:5c:17:0b:81:75:ca:95:93:fc:
                    a2:59:0d:b4:85:c4:b4:75:48:80:85:f4:a9:a8:c1:
                    53:38:1d:41:1c:8c:e3:86:fd:d9:39:fb:21:53:65:
                    9b:e5:56:73:04:0a:a3:30:a3:5a:5d:1a:a8:f8:0c:
                    a5:6f:d9:b4:11:22:24:d6:ff:83:75:44:09:16:84:
                    d1:46:30:b0:e0:9d:20:6d:18:e8:7f:b6:2b:78:11:
                    7b:62:ce:43:35:6a:50:65:3c:f1:5d:05:00:0f:e3:
                    72:e0:0d:d1:70:fc:55:de:9b:f1:e3:c6:f5:11:cf:
                    50:5a:d5:2e:2a:89:13:32:7e:fe:ea:7e:0b:44:78:
                    55:4b:4b:b6:9f:7e:82:05:e0:15:1e:34:b4:3e:5b:
                    37:76:f3:01:3e:96:72:eb:a6:77:9c:94:5b:49:f7:
                    65:d3:f5:2a:b1:96:09:78:b0:72:6e:21:56:65:98:
                    bb:22:92:60:ff:bf:44:17:30:c0:ae:ae:a2:32:17:
                    5f:87:d6:aa:a4:d2:6a:b1:8c:ea:d2:46:82:64:dc:
                    dd:4a:33:92:75:c0:e7:aa:22:93:45:bd:96:5f:a0:
                    69:ea:fc:42:07:2a:29:18:67:d8:12:ed:bf:26:83:
                    23:29:cc:93:c1:22:7e:1d:7b:31:94:b6:35:e3:00:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FC:15:3F:59:AE:62:15:77:6A:23:4B:83:6E:A2:65:12:B6:08:0A
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_wVP1muYhV3aiNLg26iZRK2CAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:14:f8:2a:23:4c:9a:1c:ab:64:7d:ca:e2:67:c2:60:af:51:
         9c:bf:ca:3e:03:45:e3:2e:38:53:b2:58:3e:5d:7e:e2:44:64:
         86:78:cd:02:9c:0e:84:a5:c6:cb:ac:a8:10:13:b2:3c:15:c7:
         03:3d:94:4d:3d:ed:52:ab:a1:c8:5f:33:29:75:08:e2:ce:7f:
         d4:49:14:da:2f:7d:8e:fc:2d:4f:61:7c:24:60:e8:5a:f7:5b:
         31:cd:1c:74:65:7e:ef:fb:1f:4d:30:7d:9e:5c:fa:10:c0:62:
         39:fb:86:ae:ae:90:ab:56:54:ed:2a:3f:b4:f4:99:e2:d0:e0:
         b6:31:5b:83:00:a0:f4:d3:7f:63:24:09:58:b9:86:1b:cd:49:
         12:95:c7:c0:f2:e8:01:30:38:8b:25:17:c4:fc:5d:2a:06:fe:
         11:5b:8a:0c:9f:91:a8:ed:cb:02:67:56:bc:f5:02:89:62:a3:
         73:07:2b:53:2f:c2:70:2a:c7:9e:4e:b5:e1:85:c7:8b:cd:ad:
         5b:49:70:68:13:49:3f:dc:69:11:a4:df:1c:c1:81:1d:0e:b6:
         7f:09:1b:44:15:c8:7c:3f:56:dc:3d:b5:8f:2c:47:2e:dd:dd:
         60:38:cd:f2:cb:29:69:77:71:0c:f3:f3:70:89:a3:63:36:04:
         4b:52:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:56 2024 by rpki-client on console-fra.rpki-client.org