Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZSb-Axp6DKg8TkHdIuWsg4F9Rlg.roa
File:                     ZSb-Axp6DKg8TkHdIuWsg4F9Rlg.roa (raw, json)
Hash identifier:          ft1VIeifWNP8UCdHonhYt/J1NrtBoEzF0T5NLopLEjk=
Subject key identifier:   65:26:FE:03:1A:7A:0C:A8:3C:4E:41:DD:22:E5:AC:83:81:7D:46:58
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0190776138D415ED74CA249FC51DA899D053
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZSb-Axp6DKg8TkHdIuWsg4F9Rlg.roa
Signing time:             Wed 03 Jul 2024 06:56:18 +0000
ROA not before:           Wed 03 Jul 2024 06:56:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     401211
IP address blocks:        77.111.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 06:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:77:61:38:d4:15:ed:74:ca:24:9f:c5:1d:a8:99:d0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jul  3 06:56:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6526fe031a7a0ca83c4e41dd22e5ac83817d4658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:96:d0:3a:74:54:ca:8d:53:84:9b:e1:5a:
                    b3:10:3e:59:45:9d:a3:8c:25:5e:48:29:5f:93:93:
                    dc:31:8b:74:03:b9:e6:f7:7c:82:53:d6:d5:88:cb:
                    51:f9:27:5c:88:aa:76:cf:de:6a:1c:05:4b:f4:f6:
                    06:14:5c:49:62:f3:31:26:2f:29:02:7f:ff:3f:c0:
                    21:18:e4:fb:fa:ee:f6:c3:c8:95:cf:c1:e4:d3:c3:
                    09:26:ca:87:c5:54:04:e8:3e:b6:3e:14:bc:e8:a6:
                    d9:1d:14:b5:25:80:23:86:b5:29:9f:fd:3a:34:7f:
                    5a:70:d9:f5:f5:55:e4:b2:e5:44:11:e5:82:ee:2a:
                    f8:39:57:d9:2a:af:02:bf:5b:66:53:85:e7:cf:95:
                    8e:82:a9:7c:fe:09:1f:af:a0:8b:d1:e4:2a:58:60:
                    55:17:b5:c3:d0:68:f3:9a:24:82:4f:d2:c0:1f:af:
                    32:5b:18:a4:eb:96:24:92:f3:43:1a:b8:17:24:09:
                    20:8d:f1:95:50:64:42:c7:93:ac:54:63:4c:fb:75:
                    5e:a3:47:cf:ad:50:1b:09:44:11:45:d8:f4:14:70:
                    2a:48:24:7d:fe:25:14:08:b0:63:67:29:99:36:06:
                    d2:ca:00:6a:3b:76:0e:69:ae:5c:82:b4:90:77:0f:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:26:FE:03:1A:7A:0C:A8:3C:4E:41:DD:22:E5:AC:83:81:7D:46:58
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZSb-Axp6DKg8TkHdIuWsg4F9Rlg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:25:72:43:09:65:7f:61:95:32:e5:fc:bc:8d:60:c6:6e:
         32:86:a4:ba:5b:9d:59:f3:ac:6a:33:64:6d:d9:38:1c:fa:09:
         be:75:7f:a7:b4:de:83:70:b5:26:4e:cf:ce:46:7e:38:76:b7:
         ff:3f:b7:16:c6:a1:41:2f:6f:1e:96:c5:31:9c:8f:67:3a:e1:
         7e:c2:2a:58:84:6a:94:29:fa:e7:f8:c2:15:fa:59:ac:ee:79:
         7d:e7:6b:0e:f0:17:c0:ce:7c:14:37:f2:57:a5:78:cb:d3:f8:
         c0:d3:5f:78:71:80:1a:fe:a3:32:99:bb:d3:75:53:74:9d:66:
         5c:fc:f9:d6:bd:24:52:11:24:de:29:10:db:70:45:c1:7e:10:
         a5:b6:b2:a8:5d:3a:2d:19:c8:c6:61:e3:aa:5c:bc:2e:51:cb:
         92:fb:66:4d:9c:ec:09:fa:f3:3c:07:a2:d4:5c:91:e8:2d:6f:
         d3:66:11:20:25:3e:6c:8b:6a:c3:d3:37:29:2b:f1:9e:1f:e2:
         f4:7c:30:57:19:f6:a1:d9:ed:a6:ab:db:0c:4d:92:e0:d9:8a:
         8e:89:a6:00:94:6e:d4:e9:73:f5:de:0a:3a:2c:97:98:ee:f1:
         66:17:0b:bb:33:51:3b:cc:c7:f8:47:49:e8:f7:09:d5:ef:65:
         65:95:56:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB3YTjUFe10yiSfxR2omdBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjQwNzAzMDY1NjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTI2ZmUwMzFhN2EwY2E4M2M0ZTQxZGQyMmU1YWM4MzgxN2Q0NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNCW0Dp0VMqNU4Sb4VqzED5ZRZ2j
jCVeSClfk5PcMYt0A7nm93yCU9bViMtR+SdciKp2z95qHAVL9PYGFFxJYvMxJi8p
An//P8AhGOT7+u72w8iVz8Hk08MJJsqHxVQE6D62PhS86KbZHRS1JYAjhrUpn/06
NH9acNn19VXksuVEEeWC7ir4OVfZKq8Cv1tmU4Xnz5WOgql8/gkfr6CL0eQqWGBV
F7XD0GjzmiSCT9LAH68yWxik65YkkvNDGrgXJAkgjfGVUGRCx5OsVGNM+3Veo0fP
rVAbCUQRRdj0FHAqSCR9/iUUCLBjZymZNgbSygBqO3YOaa5cgrSQdw+rDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUm/gMaegyoPE5B3SLlrIOBfUZYMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvWlNiLUF4cDZES2c4VGtIZEl1V3NnNEY5UmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW92MA0G
CSqGSIb3DQEBCwUAA4IBAQBsGiVyQwllf2GVMuX8vI1gxm4yhqS6W51Z86xqM2Rt
2Tgc+gm+dX+ntN6DcLUmTs/ORn44drf/P7cWxqFBL28elsUxnI9nOuF+wipYhGqU
Kfrn+MIV+lms7nl952sO8BfAznwUN/JXpXjL0/jA0194cYAa/qMymbvTdVN0nWZc
/PnWvSRSESTeKRDbcEXBfhCltrKoXTotGcjGYeOqXLwuUcuS+2ZNnOwJ+vM8B6LU
XJHoLW/TZhEgJT5si2rD0zcpK/GeH+L0fDBXGfah2e2mq9sMTZLg2YqOiaYAlG7U
6XP13go6LJeY7vFmFwu7M1E7zMf4R0no9wnV72VllVbD
Generated at Tue Jul 16 07:31:35 2024 by rpki-client on console-ams.rpki-client.org