Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BEezl6jHBfM2KB_lqJEE4ooNUQk.roa
File:                     BEezl6jHBfM2KB_lqJEE4ooNUQk.roa (raw, json)
Hash identifier:          kf/dBBMNgTc1JeaaQ6AQmPlnY/nTqxTVUIqatn6TwAE=
Subject key identifier:   04:47:B3:97:A8:C7:05:F3:36:28:1F:E5:A8:91:04:E2:8A:0D:51:09
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       0187983547E6F3BDE372EB95924AA9C8D660
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BEezl6jHBfM2KB_lqJEE4ooNUQk.roa
Signing time:             Wed 19 Apr 2023 06:30:41 +0000
ROA not before:           Wed 19 Apr 2023 06:30:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57844
IP address blocks:        77.83.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 08:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:35:47:e6:f3:bd:e3:72:eb:95:92:4a:a9:c8:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Apr 19 06:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0447b397a8c705f336281fe5a89104e28a0d5109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:70:29:53:7a:63:92:72:cf:d7:cc:15:4a:
                    c7:26:ed:2e:9d:cb:9d:8f:b7:fd:6c:fb:73:bf:17:
                    c7:fa:e1:91:72:c3:da:93:19:4c:07:23:a8:a8:47:
                    3b:f7:6f:f9:79:8f:c2:94:b9:36:5d:d6:09:19:16:
                    c9:70:92:a4:c0:f8:6a:30:7d:e6:e8:1b:b5:ed:d7:
                    d6:9d:33:bc:d1:0d:ee:a3:47:b0:12:de:ff:7e:90:
                    ff:cd:d8:5e:70:82:dc:e3:d5:fb:0d:ee:5b:15:5a:
                    b3:da:47:5a:76:67:67:d7:a4:d6:c9:f1:61:ec:65:
                    64:74:06:87:a7:8d:c0:1c:95:92:d5:a0:ce:bb:00:
                    f1:67:df:2b:a6:01:ff:a6:f6:8f:b8:17:db:36:49:
                    30:f5:6f:b0:b2:15:6f:16:92:27:3b:9d:9c:e5:b3:
                    86:e0:33:b3:4f:15:2a:c6:09:06:a7:86:b4:57:30:
                    c0:13:53:20:fc:a4:57:f1:61:0e:cc:45:31:29:43:
                    07:22:a0:cd:03:cf:db:93:35:93:a0:aa:ac:99:a7:
                    70:64:05:a1:7d:0e:46:9a:80:f1:36:74:51:93:ba:
                    bc:20:26:d3:23:b5:30:cb:f8:dc:82:68:1d:27:11:
                    bf:54:e3:4c:5c:91:ae:dc:76:9d:ac:94:ca:39:af:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:47:B3:97:A8:C7:05:F3:36:28:1F:E5:A8:91:04:E2:8A:0D:51:09
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BEezl6jHBfM2KB_lqJEE4ooNUQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:1c:c3:64:f9:9a:18:b9:b3:8c:ae:46:2e:e3:1a:01:e3:
         ab:56:5d:f7:25:fa:0e:5c:d5:45:f1:1e:7d:29:3b:09:77:17:
         6a:16:70:8d:4c:9a:e2:6f:3a:a0:a5:e4:31:84:e8:fa:cd:e7:
         c5:a7:a9:c0:39:1d:00:3e:8c:5a:3b:76:32:ca:ce:c5:01:75:
         b5:9d:46:ee:ae:70:78:7b:ba:5d:56:41:9d:b8:ac:71:c0:ad:
         7d:f7:28:8d:e1:b7:61:2f:4f:c8:6b:13:ea:90:55:33:95:16:
         83:b6:c8:89:68:5e:85:d1:fa:e4:c5:d4:01:15:45:d1:b6:20:
         c6:a9:8f:7a:5b:c7:5c:89:9e:19:99:15:28:8b:dc:4c:2c:fb:
         5c:fe:9c:98:6a:b7:46:7e:f6:ac:08:e9:dc:bb:c1:92:5d:09:
         51:9c:00:56:58:01:1a:50:7d:7e:31:5c:bf:16:48:9d:80:42:
         36:e7:4c:1b:77:e9:3f:c0:a6:6a:91:f1:a8:ee:df:d5:ab:4a:
         c1:d7:bb:8c:bf:04:2d:b8:b4:e1:4b:a9:a9:a9:2b:cf:91:e1:
         0b:5a:31:32:bb:3e:c8:1f:bf:68:23:e7:87:af:83:62:7c:30:
         1d:62:04:fd:78:20:bf:e7:59:5f:10:6d:60:f9:04:fb:5c:c4:
         ff:a9:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org