Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/xALqd21y4t2fmLS41GZ4iyDv8S4.roa
File:                     xALqd21y4t2fmLS41GZ4iyDv8S4.roa (raw, json)
Hash identifier:          xhIWri5Ae3J8zs0c+fvcojvN7u+IZ6oeN+kDgs7mgow=
Subject key identifier:   C4:02:EA:77:6D:72:E2:DD:9F:98:B4:B8:D4:66:78:8B:20:EF:F1:2E
Certificate issuer:       /CN=e9ad14362f52569616f0fd5536c5a1a208def29d
Certificate serial:       01905585EC505114742B55E0409A1436E07F
Authority key identifier: E9:AD:14:36:2F:52:56:96:16:F0:FD:55:36:C5:A1:A2:08:DE:F2:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6a0UNi9SVpYW8P1VNsWhogje8p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/xALqd21y4t2fmLS41GZ4iyDv8S4.roa
Signing time:             Wed 26 Jun 2024 17:09:18 +0000
ROA not before:           Wed 26 Jun 2024 17:09:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     174
IP address blocks:        77.83.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:55:85:ec:50:51:14:74:2b:55:e0:40:9a:14:36:e0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ad14362f52569616f0fd5536c5a1a208def29d
        Validity
            Not Before: Jun 26 17:09:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c402ea776d72e2dd9f98b4b8d466788b20eff12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:0c:21:1b:71:51:a6:81:bb:74:83:ff:59:
                    e5:6d:b9:e4:32:a0:ec:ed:6a:9a:1b:a8:66:b5:77:
                    b2:65:8d:4c:66:a5:7d:b4:d4:11:0d:44:f1:5a:79:
                    28:42:64:c1:89:23:16:8b:61:23:1f:38:69:bf:dc:
                    82:c0:d0:8c:5c:5a:24:8c:cc:d2:21:f6:17:72:9e:
                    5e:3f:5a:22:e5:be:fd:25:df:16:c1:4f:49:f9:eb:
                    12:72:14:ed:ae:a0:ac:8d:5f:0e:c5:7e:e5:b1:2f:
                    52:48:f3:97:e5:7c:10:f6:90:87:e8:78:3a:92:f9:
                    d1:3c:11:bd:bd:28:ad:77:ee:84:19:cd:b2:82:92:
                    c2:4b:4a:18:1e:bb:b6:f5:a9:94:ee:e5:56:f4:12:
                    ad:ef:f4:c1:12:df:c2:81:d7:3e:0b:2d:ca:50:a9:
                    96:fd:33:07:b6:01:9c:e4:e9:6d:44:5e:a4:d2:cb:
                    fe:db:6a:42:3d:41:fa:f6:1b:65:66:45:c1:d9:70:
                    81:64:56:f5:34:37:4c:2a:76:91:94:19:07:b4:76:
                    5d:a9:77:fc:2c:5b:4a:74:a5:75:f7:f3:f9:4e:ad:
                    e5:d3:bf:01:a3:2f:cf:2f:00:cb:ae:57:03:d4:30:
                    97:25:c9:82:03:4e:0d:b3:73:47:96:4b:5c:bf:54:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:EA:77:6D:72:E2:DD:9F:98:B4:B8:D4:66:78:8B:20:EF:F1:2E
            X509v3 Authority Key Identifier:
                keyid:E9:AD:14:36:2F:52:56:96:16:F0:FD:55:36:C5:A1:A2:08:DE:F2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a0UNi9SVpYW8P1VNsWhogje8p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/xALqd21y4t2fmLS41GZ4iyDv8S4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/6a0UNi9SVpYW8P1VNsWhogje8p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:ad:b1:c8:5c:48:3e:85:d6:3c:0c:d0:36:96:95:ad:38:
         43:50:47:ad:4e:dd:b0:f0:04:24:4f:89:c7:98:4f:e3:06:bd:
         d8:f1:8a:e4:e4:10:ba:e6:68:ae:cf:c0:b0:0b:66:42:29:bc:
         80:2d:92:96:55:8d:32:d7:c7:d9:21:c4:47:91:a8:5d:b7:b0:
         54:35:a5:6c:1a:1c:f6:c5:85:95:18:98:fa:fa:5e:cf:a9:bf:
         93:c4:c5:4f:64:39:ef:d5:36:d0:0a:ca:09:3b:90:b4:18:bc:
         85:57:bc:a0:32:92:80:66:e1:58:ea:81:dc:70:01:c5:ae:48:
         85:de:36:9e:82:6c:d1:e8:29:a8:e2:20:82:1c:df:8a:14:b7:
         da:27:e0:6a:a1:7e:4c:e7:fb:15:5b:6e:a1:27:7e:2c:96:f7:
         9d:1f:73:32:31:f5:43:7c:eb:0e:96:85:85:d6:05:12:a7:f2:
         61:3b:36:c0:ea:c0:53:6e:37:8d:ff:04:09:77:39:75:64:35:
         dd:f5:be:6f:eb:4e:b4:c8:5d:ec:14:56:09:f5:e5:ae:8d:55:
         16:f5:34:10:c2:1e:ee:d7:fe:32:09:11:2f:6a:ee:62:11:e1:
         09:a4:10:58:1c:64:17:e5:b5:89:c4:dc:e1:dc:42:34:9b:62:
         ee:3a:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:40 2024 by rpki-client on console-ams.rpki-client.org