Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/76Pvi-mCI_kvhvChxawAq9WxpI8.roa
File:                     76Pvi-mCI_kvhvChxawAq9WxpI8.roa (raw, json)
Hash identifier:          or/y7oUYC2QGqUuHt0KNrVhCZ0/7+EVN745Zbj3NAY0=
Subject key identifier:   EF:A3:EF:8B:E9:82:23:F9:2F:86:F0:A1:C5:AC:00:AB:D5:B1:A4:8F
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       01932EEC2D16D7C6C8921DE826382E1D4D32
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/76Pvi-mCI_kvhvChxawAq9WxpI8.roa
Signing time:             Fri 15 Nov 2024 08:24:10 +0000
ROA not before:           Fri 15 Nov 2024 08:24:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        77.242.146.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Wed 01 Jan 2025 17:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2e:ec:2d:16:d7:c6:c8:92:1d:e8:26:38:2e:1d:4d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Nov 15 08:24:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=efa3ef8be98223f92f86f0a1c5ac00abd5b1a48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:7c:2e:97:f4:7d:60:41:4f:01:22:c8:7f:
                    e3:f9:c0:0f:1f:5b:09:95:fc:dd:a2:89:6a:01:3c:
                    10:3a:c4:98:b1:e7:c8:19:b1:c8:2a:44:6f:d0:21:
                    8d:75:cd:68:ec:4c:84:03:f5:53:67:8d:bf:41:72:
                    dd:4e:ee:cd:b3:75:0f:66:52:3f:a1:35:a1:29:5c:
                    1e:b8:7a:42:f1:60:0e:52:19:34:44:2c:5c:dd:2a:
                    ed:36:14:f2:41:58:4c:22:1d:e5:0c:2e:b1:73:09:
                    d6:fa:2a:1a:f6:3a:9f:23:5f:9d:9b:8e:4f:ef:36:
                    97:c9:19:cc:bb:f4:7e:c3:44:23:19:b8:bd:ed:c1:
                    1c:6f:41:27:69:41:cc:b9:cb:98:ed:8a:ae:63:ab:
                    e3:32:64:87:53:2e:eb:a4:95:c8:05:16:94:8b:ab:
                    29:cb:bd:91:e2:a2:7e:7f:53:1a:ad:3c:85:5a:21:
                    c9:02:c3:f6:0c:78:ec:1e:bf:07:6a:f7:d0:a5:53:
                    69:d7:00:df:20:e0:98:de:26:9b:d9:ae:1e:6a:1e:
                    34:27:eb:26:2b:1d:13:86:fc:4f:79:4e:50:dc:f0:
                    ad:67:ee:10:be:3b:a9:5a:e4:2e:53:16:f0:e5:bb:
                    0e:8e:a4:01:e7:fb:a7:c7:87:22:72:c9:13:5a:d9:
                    30:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A3:EF:8B:E9:82:23:F9:2F:86:F0:A1:C5:AC:00:AB:D5:B1:A4:8F
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/76Pvi-mCI_kvhvChxawAq9WxpI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.242.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:8b:b1:5c:24:cb:1e:b8:79:23:bf:80:9f:9b:b6:43:43:
         d5:2a:b6:fa:9a:ea:46:9f:0b:b2:b0:a8:df:fa:bc:e2:54:65:
         13:c8:07:d9:8a:2c:12:e3:1e:6c:5d:be:80:4e:f3:5a:db:62:
         cb:91:b3:73:fa:f1:5a:a7:fe:0a:ec:18:c1:7a:f6:12:ba:74:
         7b:dc:da:2a:40:e9:06:2b:b4:c0:da:99:c8:2a:9a:68:70:81:
         3c:d1:d0:2c:bd:b1:bf:6a:5a:ec:f1:90:79:cb:33:59:09:8b:
         83:c8:7a:79:51:78:5e:24:7b:98:69:17:f3:db:58:04:70:f1:
         f4:48:d6:c7:67:c2:6c:fa:56:03:0e:d8:f5:75:83:12:b0:e7:
         7e:ba:3b:e9:a6:b6:1f:ab:51:43:68:10:ff:ce:ba:b0:f4:00:
         1e:51:6c:a7:ac:7c:a4:62:28:8f:01:3b:34:be:71:d9:1c:a2:
         8f:2c:20:64:57:3e:7f:c1:c0:6e:26:51:56:09:c7:95:c6:90:
         4f:e7:1b:94:1f:94:93:8b:0f:48:ec:ca:12:ab:4c:f4:4a:eb:
         71:bc:43:66:8a:a5:a3:c0:46:43:b1:7c:ae:68:0b:5e:f2:e5:
         19:0e:f1:fe:0c:85:09:5c:9a:7b:83:b5:4e:a8:6a:8f:0a:66:
         99:4a:14:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMu7C0W18bIkh3oJjguHU0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQxMTE1MDgyNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmEzZWY4YmU5ODIyM2Y5MmY4NmYwYTFjNWFjMDBhYmQ1YjFhNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTx8Lpf0fWBBTwEiyH/j+cAPH1sJ
lfzdoolqATwQOsSYsefIGbHIKkRv0CGNdc1o7EyEA/VTZ42/QXLdTu7Ns3UPZlI/
oTWhKVweuHpC8WAOUhk0RCxc3SrtNhTyQVhMIh3lDC6xcwnW+ioa9jqfI1+dm45P
7zaXyRnMu/R+w0QjGbi97cEcb0EnaUHMucuY7YquY6vjMmSHUy7rpJXIBRaUi6sp
y72R4qJ+f1MarTyFWiHJAsP2DHjsHr8HavfQpVNp1wDfIOCY3iab2a4eah40J+sm
Kx0ThvxPeU5Q3PCtZ+4QvjupWuQuUxbw5bsOjqQB5/unx4cicskTWtkwXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+j74vpgiP5L4bwocWsAKvVsaSPMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvNzZQdmktbUNJX2t2aHZDaHhhd0FxOVd4cEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTfKSMA0G
CSqGSIb3DQEBCwUAA4IBAQAfPouxXCTLHrh5I7+An5u2Q0PVKrb6mupGnwuysKjf
+rziVGUTyAfZiiwS4x5sXb6ATvNa22LLkbNz+vFap/4K7BjBevYSunR73NoqQOkG
K7TA2pnIKppocIE80dAsvbG/alrs8ZB5yzNZCYuDyHp5UXheJHuYaRfz21gEcPH0
SNbHZ8Js+lYDDtj1dYMSsOd+ujvpprYfq1FDaBD/zrqw9AAeUWynrHykYiiPATs0
vnHZHKKPLCBkVz5/wcBuJlFWCceVxpBP5xuUH5STiw9I7MoSq0z0SutxvENmiqWj
wEZDsXyuaAte8uUZDvH+DIUJXJp7g7VOqGqPCmaZShTQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:01 2025 by rpki-client