Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/m3-l35SBbuCbcXWIn98Umb0U39k.roa
File:                     m3-l35SBbuCbcXWIn98Umb0U39k.roa (raw, json)
Hash identifier:          rCXioXGwM6D+DgOccvylGTyrKKpQa6ALmunjyeMbUjk=
Subject key identifier:   9B:7F:A5:DF:94:81:6E:E0:9B:71:75:88:9F:DF:14:99:BD:14:DF:D9
Certificate issuer:       /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial:       0186E50CCE64B12079ACF5D2DED14FD6BBD8
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/m3-l35SBbuCbcXWIn98Umb0U39k.roa
Signing time:             Wed 15 Mar 2023 11:34:27 +0000
ROA not before:           Wed 15 Mar 2023 11:34:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49072
IP address blocks:        77.246.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 03:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e5:0c:ce:64:b1:20:79:ac:f5:d2:de:d1:4f:d6:bb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
        Validity
            Not Before: Mar 15 11:34:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b7fa5df94816ee09b7175889fdf1499bd14dfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:ad:d4:78:f0:97:4b:60:3d:fc:8b:9b:11:
                    62:35:a8:55:26:d7:fe:bc:35:a8:a3:25:f3:de:de:
                    45:bb:42:23:ef:50:51:a0:0d:d2:ab:6e:e4:c7:da:
                    45:7c:fa:21:11:18:e0:14:1d:2b:4a:b0:5c:eb:d1:
                    0a:99:a4:36:f4:cb:de:c9:1d:14:6d:91:15:f6:b7:
                    61:ef:0e:5d:47:a0:7d:e5:73:b2:7f:4f:b4:56:ee:
                    72:c8:7d:d3:db:99:b5:e5:be:36:60:43:7e:3c:45:
                    c8:9a:90:22:36:5b:11:dd:9f:ed:02:4c:22:ca:ae:
                    e6:e3:e9:a3:ca:8d:98:d3:fc:6a:74:b4:bb:22:09:
                    98:a8:15:c8:d1:af:4a:62:ca:aa:16:68:88:60:15:
                    df:a2:ff:95:65:1b:6e:87:ee:ef:b5:87:a3:18:d0:
                    73:0c:4f:0f:df:62:f9:1f:6f:d2:21:3a:34:46:9e:
                    ee:fc:a0:3b:81:8f:6a:17:e6:df:39:94:89:f6:c5:
                    75:59:1f:db:93:9e:b9:e9:8f:f3:3b:31:19:93:14:
                    85:ba:36:2b:81:cc:5b:6d:95:10:11:a3:f0:1b:42:
                    2e:d4:9f:e7:c2:2a:c1:c3:7a:60:5d:c4:37:df:ef:
                    79:8c:0a:43:05:88:e4:29:26:7b:81:0c:34:09:8b:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7F:A5:DF:94:81:6E:E0:9B:71:75:88:9F:DF:14:99:BD:14:DF:D9
            X509v3 Authority Key Identifier:
                keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/m3-l35SBbuCbcXWIn98Umb0U39k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:06:a6:2c:34:f3:88:99:9d:35:5e:01:de:25:24:2e:89:
         31:59:48:9d:64:c7:96:2a:e9:e0:e3:64:1c:0f:e9:b8:73:2b:
         8f:2a:3b:22:4a:f9:f3:00:c0:ae:6f:04:15:23:c2:c9:ff:97:
         49:4a:5c:f6:0c:da:a3:ee:18:2a:9c:0d:ca:6d:c9:2f:b9:8f:
         b1:73:35:7e:46:ab:1f:ab:41:52:0b:a9:05:b2:4f:68:e6:cf:
         3d:25:19:16:c1:9a:9e:7d:ea:06:f7:09:e6:ed:bc:07:25:4a:
         75:bf:ee:41:4f:bc:b2:1a:1b:a4:49:74:d7:da:41:12:14:06:
         3d:58:68:26:15:92:6b:a5:59:b1:eb:ac:2c:4d:c3:88:3d:f8:
         c0:a6:c1:f3:d9:a9:fc:66:23:fb:79:d7:f9:f8:e7:63:a7:98:
         e9:18:26:b5:76:4a:1e:ef:22:5e:1f:1f:d4:47:02:19:3c:c4:
         fb:91:35:3a:8a:d0:4f:4d:10:72:af:58:b4:72:5a:07:17:2b:
         fc:d2:0a:94:db:16:18:8b:d8:91:54:08:de:8e:5b:25:89:ab:
         e2:fd:15:9a:49:1d:40:32:76:fd:37:ef:76:a5:a8:18:a6:9e:
         71:71:dd:2d:56:7e:7a:2c:89:85:83:f9:c2:e6:fc:59:23:50:
         21:f2:2b:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYblDM5ksSB5rPXS3tFP1rvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx
ZGUxMWMwHhcNMjMwMzE1MTEzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjdmYTVkZjk0ODE2ZWUwOWI3MTc1ODg5ZmRmMTQ5OWJkMTRkZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/at1Hjwl0tgPfyLmxFiNahVJtf+
vDWooyXz3t5Fu0Ij71BRoA3Sq27kx9pFfPohERjgFB0rSrBc69EKmaQ29MveyR0U
bZEV9rdh7w5dR6B95XOyf0+0Vu5yyH3T25m15b42YEN+PEXImpAiNlsR3Z/tAkwi
yq7m4+mjyo2Y0/xqdLS7IgmYqBXI0a9KYsqqFmiIYBXfov+VZRtuh+7vtYejGNBz
DE8P32L5H2/SITo0Rp7u/KA7gY9qF+bfOZSJ9sV1WR/bk5656Y/zOzEZkxSFujYr
gcxbbZUQEaPwG0Iu1J/nwirBw3pgXcQ33+95jApDBYjkKSZ7gQw0CYvQfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJt/pd+UgW7gm3F1iJ/fFJm9FN/ZMB8GA1UdIwQY
MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et
ZmRlMDczNTg4ZjBmLzEvbTMtbDM1U0JidUNiY1hXSW45OFVtYjBVMzlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm
LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbaMA0G
CSqGSIb3DQEBCwUAA4IBAQBreQamLDTziJmdNV4B3iUkLokxWUidZMeWKung42Qc
D+m4cyuPKjsiSvnzAMCubwQVI8LJ/5dJSlz2DNqj7hgqnA3KbckvuY+xczV+Rqsf
q0FSC6kFsk9o5s89JRkWwZqefeoG9wnm7bwHJUp1v+5BT7yyGhukSXTX2kESFAY9
WGgmFZJrpVmx66wsTcOIPfjApsHz2an8ZiP7edf5+Odjp5jpGCa1dkoe7yJeHx/U
RwIZPMT7kTU6itBPTRByr1i0cloHFyv80gqU2xYYi9iRVAjejlsliavi/RWaSR1A
Mnb9N+92pagYpp5xcd0tVn56LImFg/nC5vxZI1Ah8isi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org