Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/AUGR1m57ii9ZdQPMOHWdf0j5WlQ.roa
File:                     AUGR1m57ii9ZdQPMOHWdf0j5WlQ.roa (raw, json)
Hash identifier:          ENHW8WO7jCXiaHZcOKzEq6o08Tp1xTKbM+T5ecVFuVg=
Subject key identifier:   01:41:91:D6:6E:7B:8A:2F:59:75:03:CC:38:75:9D:7F:48:F9:5A:54
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       018AD71B06765A223B73BA59666644213F5B
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/AUGR1m57ii9ZdQPMOHWdf0j5WlQ.roa
Signing time:             Wed 27 Sep 2023 14:46:27 +0000
ROA not before:           Wed 27 Sep 2023 14:46:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5378
IP address blocks:        77.233.128.0/19 maxlen: 19
                          83.107.192.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          80.176.0.0/15 maxlen: 15
                          83.104.0.0/14 maxlen: 14
                          212.225.0.0/17 maxlen: 17
                          62.49.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 15:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d7:1b:06:76:5a:22:3b:73:ba:59:66:66:44:21:3f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Sep 27 14:46:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=014191d66e7b8a2f597503cc38759d7f48f95a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:7a:71:34:23:d0:1d:e9:9b:5a:7e:6a:1c:
                    6f:5b:42:24:e3:18:d8:47:5c:a1:da:3a:8b:d3:c6:
                    e4:d2:b7:67:b1:4c:f1:02:73:c1:cf:cc:94:f7:97:
                    06:26:04:3a:d7:b5:64:52:43:33:6f:68:f7:ec:f9:
                    3d:8a:03:c3:0e:74:ec:fa:b2:ef:cd:23:cd:d2:e2:
                    f6:e8:60:66:9a:e5:22:b6:86:5a:b8:72:74:4a:7c:
                    67:c7:aa:f4:6a:ab:13:30:00:6c:7d:92:11:cc:86:
                    35:4b:e3:04:56:ad:e6:f2:81:87:82:e6:6b:f6:2b:
                    e2:eb:6a:b6:bd:53:84:ba:9d:92:50:04:33:7d:0a:
                    dc:a8:0a:a9:d8:d2:75:e6:20:78:44:c7:a0:8c:38:
                    58:eb:43:22:e4:e6:07:53:9b:04:7d:82:54:7e:72:
                    f2:67:84:9a:1c:8f:52:8d:80:cb:eb:41:df:56:e9:
                    0d:4b:d7:c7:2b:ed:52:f2:90:bf:41:4b:ea:f8:bd:
                    07:c2:ec:78:76:8c:45:2a:a2:f2:44:86:4c:ec:b2:
                    02:ae:a0:34:bd:f5:62:73:c7:c4:ec:7b:41:ec:8e:
                    8a:d6:d4:59:2d:00:22:a2:ce:9b:a8:55:b3:ad:4e:
                    d8:c7:87:bd:03:07:b0:fc:9e:0e:a5:c2:c9:d4:22:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:91:D6:6E:7B:8A:2F:59:75:03:CC:38:75:9D:7F:48:F9:5A:54
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/AUGR1m57ii9ZdQPMOHWdf0j5WlQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  212.225.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         90:45:bc:0d:79:6b:e4:ac:10:f4:13:30:43:aa:77:dd:8d:62:
         bd:df:b3:15:d1:be:f6:a7:11:3e:bd:4b:2f:9f:21:dc:4b:b7:
         59:62:f4:ff:c8:c9:d9:16:e3:c0:43:e9:f0:77:e2:b7:22:03:
         b1:20:c5:11:6b:10:a2:59:5e:40:e0:f1:21:0b:82:02:69:1c:
         3a:c3:36:79:2d:bc:6d:24:6f:ed:99:e7:52:13:32:cc:57:9d:
         80:4f:c7:8a:37:28:76:e1:61:d1:70:29:e7:a5:a6:ac:e5:08:
         4f:49:89:39:5a:8c:28:23:3f:13:cd:12:1d:be:1f:dd:09:89:
         49:35:0f:ef:6f:8f:d0:d0:d8:68:b3:81:50:16:0c:15:60:28:
         4d:fe:d4:c2:21:55:3d:02:38:1b:78:6c:11:6a:66:66:ae:00:
         2b:fa:6b:e2:ca:03:36:c3:33:d6:15:6d:78:b0:04:36:ee:bc:
         e8:1d:8a:1c:d4:8c:aa:55:31:c7:4d:05:77:cb:19:15:b2:00:
         d3:90:3c:3a:34:bc:f2:03:77:ad:6c:18:eb:ec:34:9c:40:6b:
         19:e5:68:6b:fd:d3:b9:ec:81:90:22:38:78:2a:48:1f:a7:4d:
         3c:a4:99:02:39:62:23:9e:b3:ab:7e:e9:e7:1e:2f:92:17:70:
         db:bd:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:10 2024 by rpki-client on console-fra.rpki-client.org