Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Yqeat7G_6pyE2hQroUu3rfGOShE.roa
File:                     Yqeat7G_6pyE2hQroUu3rfGOShE.roa (raw, json)
Hash identifier:          m0QQ3koj/NZ2vfknHlURDCsgcejCSZgbB4h9UW1D9rE=
Subject key identifier:   62:A7:9A:B7:B1:BF:EA:9C:84:DA:14:2B:A1:4B:B7:AD:F1:8E:4A:11
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       01902AC5F39CA4EC96112F14C3B7A90A63FF
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Yqeat7G_6pyE2hQroUu3rfGOShE.roa
Signing time:             Tue 18 Jun 2024 09:55:34 +0000
ROA not before:           Tue 18 Jun 2024 09:55:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50889
IP address blocks:        77.111.248.0/24 maxlen: 24
                          77.111.249.0/24 maxlen: 24
                          77.111.250.0/24 maxlen: 24
                          77.111.251.0/24 maxlen: 24
                          80.84.160.0/24 maxlen: 24
                          80.84.161.0/24 maxlen: 24
                          80.84.162.0/24 maxlen: 24
                          80.84.163.0/24 maxlen: 24
                          80.84.164.0/24 maxlen: 24
                          80.84.165.0/24 maxlen: 24
                          80.84.166.0/24 maxlen: 24
                          80.84.167.0/24 maxlen: 24
                          80.84.168.0/24 maxlen: 24
                          80.84.169.0/24 maxlen: 24
                          80.84.170.0/24 maxlen: 24
                          80.84.171.0/24 maxlen: 24
                          80.84.172.0/24 maxlen: 24
                          80.84.173.0/24 maxlen: 24
                          80.84.174.0/24 maxlen: 24
                          80.84.175.0/24 maxlen: 24
                          80.250.96.0/24 maxlen: 24
                          80.250.97.0/24 maxlen: 24
                          185.136.69.0/24 maxlen: 24
                          185.136.70.0/24 maxlen: 24
                          185.136.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 14:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:c5:f3:9c:a4:ec:96:11:2f:14:c3:b7:a9:0a:63:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Jun 18 09:55:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62a79ab7b1bfea9c84da142ba14bb7adf18e4a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:ba:f9:5e:6d:4a:36:6d:b4:9d:8d:c7:57:
                    30:56:36:35:15:2d:b7:cd:62:5d:6e:c7:87:20:74:
                    13:e1:f6:9a:e3:9b:85:c0:aa:54:5a:fb:82:24:b2:
                    18:e8:b6:4d:81:47:c1:fd:cf:17:0b:4a:fa:85:e1:
                    69:44:29:8e:37:63:0e:83:27:4a:a7:f1:1a:5b:ff:
                    fa:cc:f0:8d:33:3e:7e:11:14:58:58:e8:05:89:10:
                    7f:e1:bc:66:62:1b:d9:1a:55:97:84:ff:36:7c:14:
                    4f:a8:92:df:e7:4e:ea:db:8b:0e:58:52:14:18:14:
                    6b:79:06:30:57:a5:61:9b:7b:b7:03:d3:dd:c6:d9:
                    10:88:e6:3e:62:c6:f0:bc:2e:f6:9a:8f:26:ce:48:
                    8d:e3:82:d5:03:f9:dd:77:81:71:e6:34:59:51:51:
                    04:b0:aa:29:02:a9:0e:6f:5a:6d:8f:6c:1d:c0:f6:
                    d7:51:a6:2f:ee:72:cd:38:3a:57:60:bc:04:b7:55:
                    65:58:79:00:81:79:5a:0e:45:43:a7:ca:b9:d2:98:
                    82:57:8a:09:eb:5d:d3:42:bf:38:09:73:6c:60:a8:
                    c3:16:d3:3a:55:99:7f:3d:fb:cf:54:79:39:7c:52:
                    4b:f6:ca:66:0c:81:33:b4:a9:31:a7:12:6d:6c:41:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A7:9A:B7:B1:BF:EA:9C:84:DA:14:2B:A1:4B:B7:AD:F1:8E:4A:11
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Yqeat7G_6pyE2hQroUu3rfGOShE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.248.0/22
                  80.84.160.0/20
                  80.250.96.0/23
                  185.136.69.0-185.136.71.255

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:12:ad:e7:e7:2f:1b:4e:ec:dc:d5:d2:59:cc:e4:f7:3c:
         aa:63:25:05:e0:b1:cf:0c:f7:3c:aa:b9:7b:eb:34:ec:32:21:
         43:9b:f2:27:bd:6c:cd:79:c9:11:d4:d4:75:bd:30:f2:3b:1f:
         23:d7:68:fe:23:95:91:aa:6f:f3:7c:ce:c6:63:6d:6b:49:30:
         99:c3:c7:b2:06:20:27:8f:b1:58:79:d1:e5:8b:8b:60:9f:c0:
         07:0c:ef:ce:7d:7b:bc:bb:49:9e:9b:4b:50:a2:f9:9a:8d:0c:
         77:c4:c6:fc:c1:9b:77:17:82:cb:e1:c1:c9:ba:cb:e0:3c:f5:
         ff:15:74:26:a2:c6:59:55:b4:9d:7a:52:5a:fc:b7:78:1b:d9:
         9d:0e:62:8b:ee:99:cd:37:d6:62:cb:15:71:f0:13:cf:b0:8b:
         15:ec:87:3c:68:bd:3c:9f:0d:60:32:b6:33:f9:6f:1e:07:9d:
         46:4c:c6:a2:01:f6:21:bb:e4:95:f6:7f:1e:5c:89:be:62:c7:
         b8:73:49:d0:a5:08:f4:e6:f1:7b:fe:15:b0:02:21:eb:cb:e2:
         58:3d:d6:a6:6d:48:2e:ea:c9:40:65:86:c2:37:e1:3d:c4:e9:
         a4:cd:c7:06:78:c5:82:b9:69:07:b2:1b:4b:c5:0e:96:81:c1:
         63:df:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 16:54:49 2024 by rpki-client on console-fra.rpki-client.org