Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/UWSKNb1qbiszcizP1YyO19KryCo.roa
File:                     UWSKNb1qbiszcizP1YyO19KryCo.roa (raw, json)
Hash identifier:          9DC1qZs75841XE9bqomgycGY9IYmJucymSw/TGvBM6c=
Subject key identifier:   51:64:8A:35:BD:6A:6E:2B:33:72:2C:CF:D5:8C:8E:D7:D2:AB:C8:2A
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0190BA2E98C42059B80769114766C5A40042
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/UWSKNb1qbiszcizP1YyO19KryCo.roa
Signing time:             Tue 16 Jul 2024 06:15:34 +0000
ROA not before:           Tue 16 Jul 2024 06:15:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7922
IP address blocks:        77.111.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 08:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ba:2e:98:c4:20:59:b8:07:69:11:47:66:c5:a4:00:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jul 16 06:15:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=51648a35bd6a6e2b33722ccfd58c8ed7d2abc82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:02:23:1d:51:4d:ac:24:4c:26:85:39:4b:
                    66:24:8f:c2:ea:bb:e4:16:b6:0f:48:73:0e:ed:b2:
                    2b:35:30:4b:60:81:dd:19:a0:5e:e4:47:69:86:47:
                    91:e5:bf:dc:18:b1:4b:9d:3c:d4:97:38:db:fc:0a:
                    e8:f5:53:fe:ff:44:0a:d6:71:fe:b8:a1:5d:40:fa:
                    c7:74:eb:8b:f8:c4:3d:5e:ec:02:e2:d7:ef:5a:d4:
                    e7:e3:18:06:df:02:2e:05:4d:9e:2a:93:0f:6b:57:
                    65:2c:b6:9c:57:96:da:31:bd:15:5a:ab:81:8f:e5:
                    26:53:54:b4:55:16:3e:c2:59:c2:59:6c:e9:52:20:
                    54:eb:b7:11:bb:45:8b:c3:ba:31:3c:a6:9c:ad:21:
                    68:89:aa:69:b8:9b:d7:28:46:2e:fb:96:80:53:da:
                    f2:6c:47:18:d2:9e:81:b6:75:ca:98:54:07:e0:9d:
                    fb:42:3d:00:56:67:2e:e0:b3:65:2f:61:ca:02:a2:
                    e4:bc:fb:42:a7:b3:f3:ce:4d:1e:41:98:e3:42:63:
                    fa:a0:3e:8e:6e:8c:1e:1f:dc:84:81:00:6a:3a:cb:
                    ee:2e:fc:74:a2:61:cf:1e:79:37:a7:cf:87:ec:2c:
                    00:d8:b2:51:07:fe:35:4b:22:ee:6d:ae:0b:98:a3:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:64:8A:35:BD:6A:6E:2B:33:72:2C:CF:D5:8C:8E:D7:D2:AB:C8:2A
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/UWSKNb1qbiszcizP1YyO19KryCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:8a:b4:78:53:b7:6c:9e:c2:27:a8:4b:4b:23:67:e7:b0:
         70:c3:cb:f1:20:52:fe:81:20:5e:0e:c4:fa:09:66:a7:df:2c:
         d3:1f:39:a4:4f:d7:28:28:64:58:c7:68:ef:3a:ac:74:4b:d4:
         a7:9a:37:00:22:51:7d:e6:c2:df:cb:ec:4a:4d:6f:7a:85:32:
         43:74:a0:78:15:ed:b1:e6:43:c0:18:7d:ec:e1:41:67:c6:d5:
         cb:cb:fc:b3:ca:9c:1c:4c:95:43:3b:31:71:e1:a0:81:d8:91:
         9e:88:69:10:57:43:5e:e8:45:4e:18:7c:3c:98:59:86:03:d3:
         38:44:46:35:3c:65:25:3f:8a:2c:4a:7c:17:f4:ce:22:71:cc:
         b0:26:f2:5d:3e:67:9e:93:06:a9:90:dc:68:2e:12:d5:e0:ed:
         68:db:11:a7:b6:52:a1:aa:88:48:fb:28:e5:9d:e0:04:75:0f:
         46:ff:1d:66:d4:df:57:c4:30:2b:f7:ad:9e:ec:ea:94:e4:70:
         76:a5:85:74:72:46:f3:28:11:45:df:32:99:1a:65:ae:9e:be:
         31:05:37:a5:1a:13:8b:d4:a6:27:6f:2c:f3:b4:90:63:ef:5d:
         f9:28:53:b1:f4:30:aa:5d:6d:f0:3a:5c:ea:f6:ae:b9:fc:3a:
         81:9e:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:00:17 2024 by rpki-client on console-ams.rpki-client.org