Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pZmvhPt28RY7vSfISCimduKUC_s.roa
File:                     pZmvhPt28RY7vSfISCimduKUC_s.roa (raw, json)
Hash identifier:          SWHoJivJBxIt/5K67zea1tWTJZOaMgwrB8K2Gr47RZQ=
Subject key identifier:   A5:99:AF:84:FB:76:F1:16:3B:BD:27:C8:48:28:A6:76:E2:94:0B:FB
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       01896478ECFC9EA2F7392DDD50E8B2F49448
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pZmvhPt28RY7vSfISCimduKUC_s.roa
Signing time:             Mon 17 Jul 2023 15:29:53 +0000
ROA not before:           Mon 17 Jul 2023 15:29:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        185.179.198.0/24 maxlen: 24
                          77.83.4.0/24 maxlen: 24
                          77.83.7.0/24 maxlen: 24
                          77.83.6.0/24 maxlen: 24
                          77.83.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 15:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:ec:fc:9e:a2:f7:39:2d:dd:50:e8:b2:f4:94:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jul 17 15:29:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a599af84fb76f1163bbd27c84828a676e2940bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:a7:2b:7d:7f:f6:45:fc:d5:c7:9d:a2:7b:
                    06:b2:7e:c3:2f:d0:6c:de:99:c2:0a:dd:2a:14:cf:
                    0f:38:61:b9:17:01:d3:91:f1:8e:52:8d:5b:b8:fd:
                    2b:95:cf:83:c8:08:5b:00:b5:cd:b1:b3:ad:b3:96:
                    2c:2d:83:25:c3:a6:ce:35:a9:0c:8f:dd:c7:c8:53:
                    97:ed:18:a9:35:6f:ee:2b:3b:2c:59:53:63:e4:21:
                    8d:23:b2:9e:61:04:fb:86:15:5f:83:b5:4c:0e:4a:
                    84:bc:5e:d8:51:04:6a:5f:55:71:75:44:a1:53:d1:
                    05:31:a9:44:fd:45:69:2d:93:d3:64:7b:17:35:c8:
                    6e:e4:38:6a:95:67:e8:3e:6a:24:d4:ca:eb:75:b7:
                    67:09:cb:dd:8e:76:1e:2f:d5:e9:ca:3d:07:54:77:
                    9d:03:7f:29:98:34:6a:80:a5:18:ee:85:61:39:b9:
                    c5:37:73:18:f1:5f:ef:99:35:6b:78:b4:4d:d5:cb:
                    33:29:32:3a:31:70:b2:26:6f:a3:89:a4:11:74:82:
                    ec:35:a3:23:45:be:48:c8:2f:f3:cb:97:33:d6:33:
                    b0:38:a9:55:2a:62:36:9f:4c:92:ab:bd:43:f6:3c:
                    19:72:a6:33:b4:aa:c9:9d:0c:09:b0:89:6a:4e:44:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:AF:84:FB:76:F1:16:3B:BD:27:C8:48:28:A6:76:E2:94:0B:FB
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pZmvhPt28RY7vSfISCimduKUC_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.4.0/22
                  185.179.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:44:7b:55:60:8a:9d:21:41:01:5a:8c:15:f7:6b:89:57:
         89:52:a9:3e:f2:45:b8:66:3f:ce:9e:5c:5b:39:7c:0c:87:19:
         d6:e8:ca:43:e0:b3:72:e6:95:a7:0a:58:95:42:d0:27:72:56:
         b0:80:2f:e9:d2:70:8e:52:f4:6f:f5:f5:6b:48:e3:ff:2a:6c:
         1d:68:8f:f1:3d:fb:cf:e3:e3:97:97:af:c3:ce:a8:e8:52:86:
         fa:ad:e5:40:03:f6:43:7b:40:1d:2d:f7:0b:8e:d4:cd:1c:6c:
         66:00:e7:2f:55:0a:ad:3a:de:8e:4f:31:4f:0b:a6:fa:8b:0e:
         60:27:16:42:13:ca:4e:b9:cf:13:44:b7:63:16:45:74:58:c9:
         37:c5:33:54:fa:eb:35:66:1d:97:06:94:76:e5:90:da:26:57:
         ba:84:c4:e0:bc:03:5a:1e:96:97:01:52:d6:1a:02:d0:83:2d:
         ae:61:21:3b:6f:7a:f3:51:78:0d:96:2f:ac:de:41:95:9e:5b:
         f0:dd:30:48:74:2a:2b:54:6d:5e:99:7f:f8:3d:c2:38:16:7b:
         71:e2:26:7a:ab:77:a7:be:4a:34:d8:3e:4b:31:0b:a2:87:47:
         17:3a:3e:23:f3:42:fc:19:01:33:50:8e:72:9b:e0:17:1b:a7:
         93:ba:98:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlkeOz8nqL3OS3dUOiy9JRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwNzE3MTUyOTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTk5YWY4NGZiNzZmMTE2M2JiZDI3Yzg0ODI4YTY3NmUyOTQwYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3SnK31/9kX81cedonsGsn7DL9Bs
3pnCCt0qFM8POGG5FwHTkfGOUo1buP0rlc+DyAhbALXNsbOts5YsLYMlw6bONakM
j93HyFOX7RipNW/uKzssWVNj5CGNI7KeYQT7hhVfg7VMDkqEvF7YUQRqX1VxdUSh
U9EFMalE/UVpLZPTZHsXNchu5DhqlWfoPmok1MrrdbdnCcvdjnYeL9Xpyj0HVHed
A38pmDRqgKUY7oVhObnFN3MY8V/vmTVreLRN1cszKTI6MXCyJm+jiaQRdILsNaMj
Rb5IyC/zy5cz1jOwOKlVKmI2n0ySq71D9jwZcqYztKrJnQwJsIlqTkR4aQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKWZr4T7dvEWO70nyEgopnbilAv7MB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvcFptdmhQdDI4Ulk3dlNmSVNDaW1kdUtVQ19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTVMEAwQA
ubPGMA0GCSqGSIb3DQEBCwUAA4IBAQBOB0R7VWCKnSFBAVqMFfdriVeJUqk+8kW4
Zj/OnlxbOXwMhxnW6MpD4LNy5pWnCliVQtAnclawgC/p0nCOUvRv9fVrSOP/Kmwd
aI/xPfvP4+OXl6/DzqjoUob6reVAA/ZDe0AdLfcLjtTNHGxmAOcvVQqtOt6OTzFP
C6b6iw5gJxZCE8pOuc8TRLdjFkV0WMk3xTNU+us1Zh2XBpR25ZDaJle6hMTgvANa
HpaXAVLWGgLQgy2uYSE7b3rzUXgNli+s3kGVnlvw3TBIdCorVG1emX/4PcI4Fntx
4iZ6q3envko02D5LMQuih0cXOj4j80L8GQEzUI5ym+AXG6eTupjf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org