Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/8Sro4oxeyWez2cXF4mvgD9FeQ_o.roa
File:                     8Sro4oxeyWez2cXF4mvgD9FeQ_o.roa (raw, json)
Hash identifier:          uhGWhcZ8ihbur8hzFeyC39H2/uxTPMHzuNS8jR1Vf8Q=
Subject key identifier:   F1:2A:E8:E2:8C:5E:C9:67:B3:D9:C5:C5:E2:6B:E0:0F:D1:5E:43:FA
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       0190BFD177FDFB79CFDA2FE9C2E759C0C629
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/8Sro4oxeyWez2cXF4mvgD9FeQ_o.roa
Signing time:             Wed 17 Jul 2024 08:31:34 +0000
ROA not before:           Wed 17 Jul 2024 08:31:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216246
IP address blocks:        77.221.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 11:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:bf:d1:77:fd:fb:79:cf:da:2f:e9:c2:e7:59:c0:c6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Jul 17 08:31:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f12ae8e28c5ec967b3d9c5c5e26be00fd15e43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:f5:e2:cc:f0:a2:e0:a0:90:15:8b:ed:5f:
                    42:b6:c5:ff:06:53:76:d4:d5:f5:f3:78:ad:41:a1:
                    40:3b:c8:4b:9a:b7:d0:fe:d8:e9:f8:4a:87:86:03:
                    78:a0:dc:2b:e3:5a:6e:d1:2c:88:19:84:c4:19:6b:
                    51:68:d7:cd:be:a7:7d:c8:63:bf:d7:4d:5f:98:1c:
                    4d:44:77:6e:3a:f4:e3:46:39:76:02:01:d3:54:27:
                    68:ee:97:06:df:aa:fd:ee:14:12:4f:9e:78:14:bf:
                    18:42:ec:52:4f:ed:ce:4b:24:ef:66:d8:03:6e:3b:
                    32:50:3a:bc:61:1c:76:95:53:62:94:4a:ec:34:55:
                    09:ea:fb:35:3b:a4:31:80:67:81:f3:37:fe:92:df:
                    ef:9a:89:04:01:70:e3:65:75:4e:44:67:e9:b0:c5:
                    36:31:7c:ea:95:b6:f4:89:eb:ac:a9:cd:7d:09:e9:
                    97:c0:65:15:83:9b:e0:11:bd:3c:9f:17:c7:b5:0d:
                    4a:16:7d:cc:c6:aa:0b:d7:47:13:65:99:3e:0d:c6:
                    02:e5:e3:1b:45:ad:3d:38:25:4e:d4:61:e2:e4:68:
                    1b:c4:f8:ea:77:65:39:7e:5e:c4:f8:94:9b:30:74:
                    f7:a9:b2:89:4d:0a:58:2f:f9:8e:9e:00:83:df:ba:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:E8:E2:8C:5E:C9:67:B3:D9:C5:C5:E2:6B:E0:0F:D1:5E:43:FA
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/8Sro4oxeyWez2cXF4mvgD9FeQ_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.221.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:ef:9b:bd:48:7c:58:43:41:be:88:6c:d2:47:25:95:b4:
         7f:16:e6:63:69:7e:10:00:4a:7a:ca:cc:a0:e0:dc:48:4e:cc:
         07:88:22:61:d9:85:ff:b9:1c:46:8a:78:6c:b0:5a:04:0f:21:
         aa:14:71:45:8d:0a:e5:0c:af:be:67:94:1a:6f:f8:94:39:c2:
         ed:36:76:04:79:15:e1:f5:4c:0e:ae:a0:2e:fd:a3:5f:54:61:
         04:8c:2e:f1:d8:dd:cf:67:88:8d:c3:a0:f3:91:65:59:b7:41:
         c1:e9:32:27:34:e1:f1:91:d5:c2:9f:87:38:96:e9:85:f9:e8:
         08:fe:dc:92:6a:92:af:27:fc:9b:99:f8:a2:bb:6b:97:f7:ed:
         d3:18:4f:68:71:28:56:10:43:c4:1f:6a:88:cf:49:ed:66:5b:
         71:e7:7f:36:63:bb:f4:86:df:a3:04:66:85:ba:d3:b4:e4:1f:
         82:c9:b2:67:de:5f:5a:c1:34:f9:3b:e2:68:97:87:5c:d2:49:
         71:63:06:a4:81:ae:f0:99:5e:f8:b2:1a:31:7b:10:45:ac:62:
         0b:38:a2:0a:1b:11:db:25:ac:e5:33:89:5a:8e:6f:93:69:b2:
         70:96:56:5e:fd:b4:5e:c3:f5:de:8f:ed:c8:bf:69:61:50:1c:
         d9:15:57:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZC/0Xf9+3nP2i/pwudZwMYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjQwNzE3MDgzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTJhZThlMjhjNWVjOTY3YjNkOWM1YzVlMjZiZTAwZmQxNWU0M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtz14szwouCgkBWL7V9CtsX/BlN2
1NX183itQaFAO8hLmrfQ/tjp+EqHhgN4oNwr41pu0SyIGYTEGWtRaNfNvqd9yGO/
101fmBxNRHduOvTjRjl2AgHTVCdo7pcG36r97hQST554FL8YQuxST+3OSyTvZtgD
bjsyUDq8YRx2lVNilErsNFUJ6vs1O6QxgGeB8zf+kt/vmokEAXDjZXVORGfpsMU2
MXzqlbb0ieusqc19CemXwGUVg5vgEb08nxfHtQ1KFn3MxqoL10cTZZk+DcYC5eMb
Ra09OCVO1GHi5GgbxPjqd2U5fl7E+JSbMHT3qbKJTQpYL/mOngCD37qCvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEq6OKMXslns9nFxeJr4A/RXkP6MB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvOFNybzRveGV5V2V6MmNYRjRtdmdEOUZlUV9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATd2XMA0G
CSqGSIb3DQEBCwUAA4IBAQAOle+bvUh8WENBvohs0kcllbR/FuZjaX4QAEp6ysyg
4NxITswHiCJh2YX/uRxGinhssFoEDyGqFHFFjQrlDK++Z5Qab/iUOcLtNnYEeRXh
9UwOrqAu/aNfVGEEjC7x2N3PZ4iNw6DzkWVZt0HB6TInNOHxkdXCn4c4lumF+egI
/tySapKvJ/ybmfiiu2uX9+3TGE9ocShWEEPEH2qIz0ntZltx5382Y7v0ht+jBGaF
utO05B+CybJn3l9awTT5O+Jol4dc0klxYwakga7wmV74shoxexBFrGILOKIKGxHb
JazlM4lajm+TabJwllZe/bRew/Xej+3Iv2lhUBzZFVch
-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:37 2024 by rpki-client on console-fra.rpki-client.org