Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/RTpyelB-DZGIq72T8V6VC5dMRTI.roa
File:                     RTpyelB-DZGIq72T8V6VC5dMRTI.roa (raw, json)
Hash identifier:          rxcPnz4gyVQs5dthRr0FtJUdQKrdW+VSujxEqhLFSCA=
Subject key identifier:   45:3A:72:7A:50:7E:0D:91:88:AB:BD:93:F1:5E:95:0B:97:4C:45:32
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       0190A687C67DD6515990F2D79D18785640E0
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/RTpyelB-DZGIq72T8V6VC5dMRTI.roa
Signing time:             Fri 12 Jul 2024 10:40:34 +0000
ROA not before:           Fri 12 Jul 2024 10:40:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        77.246.211.0/24 maxlen: 24
                          88.80.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 19:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a6:87:c6:7d:d6:51:59:90:f2:d7:9d:18:78:56:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jul 12 10:40:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=453a727a507e0d9188abbd93f15e950b974c4532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:17:eb:a5:f3:5b:32:3b:4c:5c:bb:0b:c4:
                    d6:7c:e7:96:c0:e7:d3:f4:df:3b:43:30:e7:ed:ca:
                    85:7d:b7:c7:ee:47:bf:33:e2:36:00:56:85:64:61:
                    08:2f:da:2b:61:f0:69:fa:da:74:17:fc:54:52:2a:
                    c1:b2:9f:27:b7:00:80:21:d5:c4:7c:8f:36:b5:1f:
                    7c:66:cf:4a:7a:4c:65:5f:fb:d2:86:1c:bd:97:16:
                    b7:12:e4:97:a7:da:b9:09:ee:48:89:d4:0d:5a:07:
                    cd:70:d5:62:29:dd:00:8d:ed:c0:98:15:49:48:aa:
                    62:32:eb:d8:5a:47:04:b7:3c:cb:73:72:e3:b0:72:
                    8b:bd:91:9a:ec:fc:6b:d5:32:90:2f:21:dc:54:7b:
                    2a:7a:ee:3d:10:db:25:44:40:1e:0a:c4:bb:09:3a:
                    ab:e7:8a:9f:a7:3e:06:78:9e:00:56:52:cf:3b:56:
                    4d:aa:67:ea:73:a2:cf:1a:ca:7f:37:eb:fe:7a:b7:
                    7d:b3:65:08:f5:6a:eb:5d:49:9e:45:34:bf:cb:14:
                    9e:c6:6a:de:c6:0c:6b:da:e6:27:6f:53:46:c2:d0:
                    e0:6d:40:b6:e9:a2:db:76:75:db:92:6c:ca:32:d8:
                    dd:eb:ad:8b:d9:5a:af:6c:1c:82:4b:dd:c2:d2:35:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3A:72:7A:50:7E:0D:91:88:AB:BD:93:F1:5E:95:0B:97:4C:45:32
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/RTpyelB-DZGIq72T8V6VC5dMRTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.211.0/24
                  88.80.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:09:ee:45:75:de:a8:aa:3c:67:ee:3e:71:48:e1:af:56:3a:
         2e:21:c1:d8:72:86:b7:6e:13:2a:b8:1e:5f:8a:1a:c5:fa:bb:
         99:2c:52:76:8d:c5:d3:51:c8:42:a5:e0:32:54:a7:d3:e3:be:
         40:d4:55:54:f8:60:c0:e3:42:88:06:df:87:51:97:2f:28:48:
         e3:9b:28:c6:3a:c7:1e:0e:8e:a8:c9:1a:57:97:b0:36:d2:7a:
         4b:34:fa:15:d0:27:af:df:9f:ca:d7:c6:c7:1b:8f:d5:9b:55:
         16:35:3b:34:50:97:39:e6:11:ee:e7:78:6e:13:f8:7d:a3:80:
         04:8e:76:c3:e1:b6:d1:30:9f:43:aa:7b:02:a3:b8:6b:97:9d:
         69:11:e9:55:fe:2f:4d:e2:96:0c:b0:d4:8c:0b:4a:8d:bd:e4:
         f3:e2:bc:89:e7:23:21:d7:04:30:9d:0f:17:ca:f7:c4:fa:10:
         2d:c4:3f:89:85:1b:32:04:0f:a0:af:f0:12:a7:9f:b1:56:78:
         62:db:0a:16:5d:e1:3e:1e:ec:c0:50:6e:37:dc:7e:b1:0b:ef:
         a7:01:6d:8b:76:6e:2f:62:7c:ff:78:d0:9a:c8:c5:c4:c1:16:
         6c:ed:5e:1f:80:97:a7:0e:66:cc:30:cc:38:63:b3:4c:a5:0b:
         7f:69:a1:40
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 12 21:15:30 2024 by rpki-client on console-fra.rpki-client.org