Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/AWIa_HwXLiDPk4Fg147Qk5o4hwg.roa
File:                     AWIa_HwXLiDPk4Fg147Qk5o4hwg.roa (raw, json)
Hash identifier:          x+JgtrJuVCayi5V+qiRSJktiBJCHqxJAnN0PHLzjjPk=
Subject key identifier:   01:62:1A:FC:7C:17:2E:20:CF:93:81:60:D7:8E:D0:93:9A:38:87:08
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       018D65E7575562BC681E08AC681080DF23E4
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/AWIa_HwXLiDPk4Fg147Qk5o4hwg.roa
Signing time:             Thu 01 Feb 2024 18:21:16 +0000
ROA not before:           Thu 01 Feb 2024 18:21:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57844
IP address blocks:        77.83.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:65:e7:57:55:62:bc:68:1e:08:ac:68:10:80:df:23:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Feb  1 18:21:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=01621afc7c172e20cf938160d78ed0939a388708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:a7:2d:95:d9:95:fd:e0:5c:1c:7c:18:0b:
                    8b:b4:68:04:bd:0e:63:c7:59:81:39:39:88:4f:a7:
                    ed:c0:d2:47:77:01:3b:62:e0:00:16:20:97:56:6f:
                    76:7a:c8:8e:02:1d:ef:c4:14:d1:50:7f:f2:d0:d9:
                    f7:08:47:af:7e:e4:c4:86:90:97:47:69:c4:87:46:
                    e0:d6:37:9c:ca:04:68:4e:d7:2e:60:76:1b:6b:ba:
                    31:4f:26:d2:96:fa:da:86:28:e0:c7:d3:17:f2:87:
                    6d:bb:39:60:cc:40:0d:a6:e8:84:64:0a:f6:76:aa:
                    75:a0:db:39:aa:85:0f:82:98:b5:f7:7e:db:1a:aa:
                    36:de:29:97:fa:67:b1:d2:16:92:40:79:24:5e:25:
                    f1:0d:e0:e8:09:c2:d6:dd:29:55:73:6b:b9:10:95:
                    35:94:2a:7b:25:0b:4d:ee:5d:73:6c:f2:8b:b1:60:
                    b6:ee:32:50:92:4f:d4:68:64:70:9e:b4:91:9b:38:
                    eb:ae:28:2b:fb:00:7c:6f:6b:fe:e5:d4:bd:6e:c0:
                    58:49:18:27:7f:d5:98:16:46:f6:b2:78:8b:06:8d:
                    c6:6a:22:bd:d8:da:ef:25:b2:4d:32:fc:3a:50:ae:
                    33:2f:21:b7:bf:a7:25:34:ce:66:8f:13:49:29:b7:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:1A:FC:7C:17:2E:20:CF:93:81:60:D7:8E:D0:93:9A:38:87:08
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/AWIa_HwXLiDPk4Fg147Qk5o4hwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:af:3c:8a:93:00:71:45:d4:f8:34:cf:01:37:75:e0:45:
         59:9b:0f:ec:f0:ba:c3:69:72:db:90:7d:e7:b2:29:ec:73:9b:
         6d:1d:bb:c7:81:91:2c:cb:cb:59:09:67:b1:d6:08:c3:eb:64:
         30:7c:6b:a2:37:c3:a6:38:69:d9:7b:44:3e:9b:d5:15:c1:03:
         98:8a:28:84:53:ad:2d:ee:68:a4:56:db:4b:cb:d0:73:97:cf:
         c8:b2:aa:fe:e3:c5:81:bd:e8:66:87:c4:30:8b:45:20:e7:15:
         8a:db:54:a3:62:88:19:3f:9c:98:d3:0d:af:85:a6:40:a4:43:
         4f:98:9a:6a:3d:cc:54:78:3a:86:27:03:56:11:b6:43:17:93:
         63:e5:3a:b4:91:37:78:5d:b8:5c:1c:23:98:0d:00:e3:69:bb:
         ab:7e:e9:ba:7a:b8:21:58:6a:26:71:b3:fa:d1:5e:53:fa:e2:
         6e:2b:d8:03:91:e7:3d:e7:a9:25:a6:d8:a5:ac:7b:53:88:9a:
         72:df:96:a5:fe:b2:8d:b2:79:37:92:90:87:4f:78:ed:ba:5d:
         be:a4:4b:fb:96:79:99:ca:a8:29:e2:a0:10:8b:8d:d3:b1:c5:
         31:df:18:02:ec:c0:ee:eb:5b:19:eb:1c:a5:84:39:52:6c:2b:
         b2:79:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org