Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/jp-Q9mLkGsyt4EZhb4zNDLiZ7Hg.roa
File:                     jp-Q9mLkGsyt4EZhb4zNDLiZ7Hg.roa (raw, json)
Hash identifier:          f77N6JYGjJh2qv1IC7m8lcPdpPB1Pmfcqu2wtACN3dE=
Subject key identifier:   8E:9F:90:F6:62:E4:1A:CC:AD:E0:46:61:6F:8C:CD:0C:B8:99:EC:78
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       018B1A86117CCBB4C8A09EA680D0DFB6B1EE
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/jp-Q9mLkGsyt4EZhb4zNDLiZ7Hg.roa
Signing time:             Tue 10 Oct 2023 16:57:55 +0000
ROA not before:           Tue 10 Oct 2023 16:57:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56913
IP address blocks:        77.246.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Oct 2023 16:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1a:86:11:7c:cb:b4:c8:a0:9e:a6:80:d0:df:b6:b1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Oct 10 16:57:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e9f90f662e41accade046616f8ccd0cb899ec78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:61:67:6e:dd:52:44:fd:32:9e:7b:18:1a:
                    79:58:25:86:24:d2:a3:8e:be:d2:53:40:e4:89:af:
                    57:50:9f:28:24:cb:03:71:17:87:6e:ba:d4:9d:ee:
                    e3:a6:e3:4b:41:3a:8c:48:44:66:c2:29:ac:5a:47:
                    d9:ab:a7:e7:ae:5e:54:45:1c:c1:60:44:08:1c:25:
                    4b:b4:09:a8:1f:92:dc:37:cc:d2:13:57:d2:b8:24:
                    25:d5:d2:2e:8c:75:48:45:8b:8e:28:df:69:e6:8b:
                    11:eb:79:75:23:d0:d4:29:92:f7:dd:d1:46:df:f6:
                    62:23:2f:b4:0d:fb:f4:be:17:ce:0e:80:42:0c:62:
                    8c:19:36:fe:58:ce:c0:b5:3d:94:4c:66:10:cb:31:
                    42:af:dc:ff:49:89:dd:76:92:01:2a:c2:ad:4c:9f:
                    11:de:6b:9a:f9:ca:5c:ca:7f:2f:4c:5b:31:d3:eb:
                    65:97:d1:9f:f5:43:98:b5:ff:4f:96:96:fe:26:74:
                    2d:93:45:86:4c:44:23:9d:bf:73:48:9b:46:15:4f:
                    8f:47:89:99:13:07:ec:8b:95:2f:42:cc:a9:35:e0:
                    99:f4:0a:97:90:c5:1f:2d:97:46:ef:67:e5:02:e4:
                    c2:70:cf:a2:f8:08:28:05:06:27:ce:ba:ae:2b:c6:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:90:F6:62:E4:1A:CC:AD:E0:46:61:6F:8C:CD:0C:B8:99:EC:78
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/jp-Q9mLkGsyt4EZhb4zNDLiZ7Hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:81:53:b8:be:6e:25:1c:ed:01:66:ff:51:9b:27:c5:17:fe:
         e2:1d:c4:e4:2b:b5:b3:2b:a4:53:90:92:fa:38:b4:db:b3:70:
         f5:84:d8:4f:20:19:61:6b:52:d8:ad:bd:4b:ca:fb:d0:73:20:
         f8:a8:57:08:8a:de:c0:32:c6:bb:61:72:1a:be:0c:5f:1c:0e:
         e1:e8:93:68:07:af:99:6f:67:36:ef:ad:e4:26:8a:6a:2e:34:
         ff:22:d3:06:95:4a:d5:52:f6:a9:e1:fd:83:b7:9f:2a:8e:49:
         1a:18:b9:20:84:fc:d4:3c:71:8d:cd:b4:b6:d9:27:d0:ee:63:
         e4:08:20:41:2e:3b:d4:20:e7:f9:c7:5d:01:9d:86:6b:f0:3b:
         b2:e2:ac:f0:6d:c3:c3:dc:49:95:84:fb:e1:bf:d9:9d:39:4f:
         b2:eb:a7:25:60:c2:66:6c:83:74:a9:25:bc:4d:dd:ff:f2:eb:
         af:eb:5d:ce:c5:53:ba:95:39:ca:4a:a2:ba:d2:e3:d3:79:ed:
         d9:8a:e6:eb:92:0b:18:9b:1b:28:f7:f9:a1:63:72:55:30:96:
         08:1d:1d:7e:c5:24:c9:1c:4e:b7:d2:58:ef:3d:1b:0d:22:66:
         b3:59:4d:e4:f5:1a:4f:95:8a:5a:61:26:b9:f9:5a:02:2a:09:
         e1:ef:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org