Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/AwRMpGAEFnQVbhK3AmRX6j-OZBA.roa
File:                     AwRMpGAEFnQVbhK3AmRX6j-OZBA.roa (raw, json)
Hash identifier:          x0RGae5b8Si4+djgHK5Qac1dH8VKMyM1EdIGVSgZ2/w=
Subject key identifier:   03:04:4C:A4:60:04:16:74:15:6E:12:B7:02:64:57:EA:3F:8E:64:10
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       018D886C007BD639160FE5E70AF8CC4FA75C
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/AwRMpGAEFnQVbhK3AmRX6j-OZBA.roa
Signing time:             Thu 08 Feb 2024 11:13:15 +0000
ROA not before:           Thu 08 Feb 2024 11:13:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57844
IP address blocks:        77.83.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 14:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:88:6c:00:7b:d6:39:16:0f:e5:e7:0a:f8:cc:4f:a7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Feb  8 11:13:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=03044ca460041674156e12b7026457ea3f8e6410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:b8:28:13:53:c4:03:d8:56:67:97:87:cd:
                    7a:1b:d0:37:bb:57:bf:e4:12:89:63:80:84:80:42:
                    ac:7c:f6:18:e6:2b:49:59:a6:bd:37:34:d8:a7:a7:
                    eb:83:1d:ae:dc:ef:e9:a5:16:ad:55:42:84:13:01:
                    f6:82:58:3b:bf:9d:dc:eb:9c:9d:51:e5:16:8c:1e:
                    66:3c:91:53:4e:34:13:e9:b6:66:91:1f:4e:96:c5:
                    cd:a0:79:56:c4:4f:40:53:b4:8b:a7:dc:ee:e3:ba:
                    34:27:35:48:da:5e:79:81:31:f5:fc:25:f2:0a:ab:
                    6c:58:73:6b:9c:e9:b3:b4:b4:1a:fa:5b:10:5d:07:
                    75:5b:76:77:92:a9:2a:65:fe:ec:27:60:55:45:09:
                    0c:29:21:c7:b0:40:4f:c2:be:71:89:17:b9:5e:f4:
                    d1:b9:41:ef:bd:c3:84:71:81:39:5a:ec:f9:2b:f1:
                    64:10:6e:2f:4f:bd:31:69:c7:51:6f:57:51:18:1f:
                    d4:55:ef:8a:d6:39:7a:40:7d:e5:d7:50:2d:8e:35:
                    a8:0d:e9:a1:9d:29:de:c2:5c:55:2b:59:c5:ae:44:
                    da:6f:93:61:6e:89:75:71:1e:5b:80:1d:3f:70:02:
                    a2:33:86:70:2b:dc:f9:f0:84:07:a9:e3:2f:5f:6b:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:4C:A4:60:04:16:74:15:6E:12:B7:02:64:57:EA:3F:8E:64:10
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/AwRMpGAEFnQVbhK3AmRX6j-OZBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:61:d9:6d:fe:7b:22:ed:0a:8a:6e:9f:5d:c2:79:e7:4f:51:
         6b:bc:0c:5e:1a:93:bf:cb:9a:46:cb:7f:d9:9a:b2:21:99:7f:
         05:60:13:2d:40:85:a8:f0:fd:de:31:34:1e:48:4c:94:1f:cb:
         cb:dd:c9:15:f6:dc:89:24:39:ef:29:22:a4:34:2e:42:12:65:
         ab:2c:c3:50:77:06:e9:e5:75:cd:f6:e5:4f:e7:0e:c8:8d:13:
         a5:ae:be:5b:b3:5b:c3:a5:93:54:25:b9:3e:06:6f:d7:99:2a:
         35:82:1b:fa:b1:aa:57:48:5d:82:79:b2:1f:20:78:3f:9f:df:
         96:78:ec:3e:95:04:21:7c:0c:9b:57:a2:93:c5:bf:7c:41:3f:
         7f:4e:74:5b:5a:fd:ec:63:5d:36:02:d5:03:12:42:a3:44:a3:
         eb:3f:92:41:20:65:7a:e9:83:87:7e:da:14:71:2c:c0:e2:03:
         e1:0d:97:7b:d4:6c:a1:e9:4b:5e:9f:1d:54:c2:2b:99:c0:bd:
         ea:c7:4b:d2:1d:b1:cb:84:d7:0e:ba:4f:04:e2:f3:ad:1a:5c:
         14:64:63:42:dd:a5:87:cb:1b:d6:73:96:78:41:ad:a5:a8:12:
         df:6f:77:44:cd:47:ba:8f:05:a7:e9:69:a2:d5:26:a3:ae:be:
         e7:cd:51:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2IbAB71jkWD+XnCvjMT6dcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjQwMjA4MTExMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzA0NGNhNDYwMDQxNjc0MTU2ZTEyYjcwMjY0NTdlYTNmOGU2NDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sS4KBNTxAPYVmeXh816G9A3u1e/
5BKJY4CEgEKsfPYY5itJWaa9NzTYp6frgx2u3O/ppRatVUKEEwH2glg7v53c65yd
UeUWjB5mPJFTTjQT6bZmkR9OlsXNoHlWxE9AU7SLp9zu47o0JzVI2l55gTH1/CXy
CqtsWHNrnOmztLQa+lsQXQd1W3Z3kqkqZf7sJ2BVRQkMKSHHsEBPwr5xiRe5XvTR
uUHvvcOEcYE5Wuz5K/FkEG4vT70xacdRb1dRGB/UVe+K1jl6QH3l11AtjjWoDemh
nSnewlxVK1nFrkTab5Nhbol1cR5bgB0/cAKiM4ZwK9z58IQHqeMvX2vELwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMETKRgBBZ0FW4StwJkV+o/jmQQMB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvQXdSTXBHQUVGblFWYmhLM0FtUlg2ai1PWkJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVOaMA0G
CSqGSIb3DQEBCwUAA4IBAQBGYdlt/nsi7QqKbp9dwnnnT1FrvAxeGpO/y5pGy3/Z
mrIhmX8FYBMtQIWo8P3eMTQeSEyUH8vL3ckV9tyJJDnvKSKkNC5CEmWrLMNQdwbp
5XXN9uVP5w7IjROlrr5bs1vDpZNUJbk+Bm/XmSo1ghv6sapXSF2CebIfIHg/n9+W
eOw+lQQhfAybV6KTxb98QT9/TnRbWv3sY102AtUDEkKjRKPrP5JBIGV66YOHftoU
cSzA4gPhDZd71Gyh6Utenx1UwiuZwL3qx0vSHbHLhNcOuk8E4vOtGlwUZGNC3aWH
yxvWc5Z4Qa2lqBLfb3dEzUe6jwWn6Wmi1Sajrr7nzVHO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org