Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130352e302f32342d3234203d3e203335343039.roa
File:                     37372e38332e3130352e302f32342d3234203d3e203335343039.roa (raw, json)
Hash identifier:          xrZwlKtdFUCRtgnuOFJGcnCuh6XTpw7fY01bLNZDRzI=
Subject key identifier:   09:0C:55:61:27:D2:15:2C:47:57:8E:BF:60:87:89:B9:F8:16:CA:63
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       334D29D82E14A24CD3707B6F0E0BF3EFFC3AD5E0
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130352e302f32342d3234203d3e203335343039.roa
Signing time:             Thu 01 Jun 2023 06:32:56 +0000
ROA not before:           Thu 01 Jun 2023 06:27:56 +0000
ROA not after:            Thu 30 May 2024 06:32:56 +0000
asID:                     35409
IP address blocks:        77.83.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4d:29:d8:2e:14:a2:4c:d3:70:7b:6f:0e:0b:f3:ef:fc:3a:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Jun  1 06:27:56 2023 GMT
            Not After : May 30 06:32:56 2024 GMT
        Subject: CN=090C556127D2152C47578EBF608789B9F816CA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:a9:e8:ae:f8:01:e1:6f:e9:5a:2e:cf:95:
                    05:b7:44:a5:3d:52:01:84:4c:ef:45:a7:95:e1:e6:
                    d8:42:75:c9:4a:11:aa:dc:84:67:8d:40:7b:ed:ab:
                    6a:ef:cb:43:29:12:4a:39:79:5b:4b:14:1c:5b:9a:
                    5b:e0:ba:ec:ad:66:31:55:83:2e:85:50:9a:f6:3e:
                    e6:84:d5:74:b6:2c:32:1f:da:5b:11:ab:ac:05:ad:
                    28:2b:b4:7c:4c:0d:26:23:12:50:87:6e:75:99:9f:
                    67:12:d2:bd:7f:11:e9:9f:89:93:79:af:84:5a:98:
                    c0:c5:ea:e8:b3:0a:de:ed:07:09:38:5b:af:bf:49:
                    68:80:e5:fd:05:3b:9d:be:b6:e2:54:0f:8b:d1:ec:
                    ca:80:98:8e:75:58:b5:f5:ca:0e:ab:c0:0c:1f:32:
                    92:b1:86:57:be:4e:d9:80:51:d8:f3:28:33:97:25:
                    a6:5e:b2:b0:6b:a2:d7:d4:e0:d3:d5:b6:54:61:c7:
                    04:02:ea:99:01:50:bd:b3:c7:0c:5c:44:44:e8:36:
                    af:64:6f:7a:b1:f8:43:13:10:32:70:4a:46:28:7d:
                    a7:d3:f8:e8:53:b2:89:86:44:fb:ca:35:60:ef:e2:
                    2b:c5:23:04:94:c6:2c:64:0a:92:ae:17:b2:2e:e5:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0C:55:61:27:D2:15:2C:47:57:8E:BF:60:87:89:B9:F8:16:CA:63
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130352e302f32342d3234203d3e203335343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:99:85:f8:c9:96:92:f3:f3:20:72:c5:2c:e6:c7:b2:c4:15:
         88:ce:4d:46:4f:9c:5c:92:6f:24:35:f2:e1:a6:11:ef:3e:19:
         d4:f1:98:cb:e2:9b:d9:f9:86:92:8e:98:88:4d:c5:56:c0:a6:
         7e:04:e6:e6:c3:80:68:75:81:02:bc:87:60:ad:73:81:d7:09:
         72:81:33:f8:28:8f:0d:c8:6a:cb:f2:e0:71:ff:6c:7b:1b:95:
         81:ac:6f:6a:2a:a0:23:90:45:9b:ea:27:fc:02:7b:b9:01:2e:
         6c:59:11:9c:2a:d3:43:56:09:c9:4e:a5:67:4a:49:4c:6d:57:
         8a:21:f9:3a:fc:d7:85:29:d4:eb:fb:6f:a0:c8:62:e5:a8:6b:
         a2:b4:d0:43:1b:4f:ca:04:f0:f7:99:a4:f4:c9:03:27:0d:00:
         73:65:7d:49:79:c2:8c:ee:54:8c:0b:95:b8:2d:79:85:54:f4:
         30:2b:1a:b3:49:c8:d8:f1:c0:da:14:0b:e6:b3:10:ef:af:09:
         7d:5d:05:93:fc:07:f9:fb:b7:65:4f:ea:70:aa:95:82:95:be:
         e2:36:19:23:3d:a8:c4:bd:af:5a:da:7b:88:c6:03:0a:bf:a3:
         6b:db:e2:41:f5:70:81:76:6a:89:62:25:a9:31:1a:47:ed:3f:
         9c:30:1b:ff
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUM00p2C4UokzTcHtvDgvz7/w61eAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA2MDEwNjI3NTZaFw0yNDA1MzAwNjMyNTZaMDMxMTAvBgNV
BAMTKDA5MEM1NTYxMjdEMjE1MkM0NzU3OEVCRjYwODc4OUI5RjgxNkNBNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9i6norvgB4W/pWi7PlQW3RKU9
UgGETO9Fp5Xh5thCdclKEarchGeNQHvtq2rvy0MpEko5eVtLFBxbmlvguuytZjFV
gy6FUJr2PuaE1XS2LDIf2lsRq6wFrSgrtHxMDSYjElCHbnWZn2cS0r1/EemfiZN5
r4RamMDF6uizCt7tBwk4W6+/SWiA5f0FO52+tuJUD4vR7MqAmI51WLX1yg6rwAwf
MpKxhle+TtmAUdjzKDOXJaZesrBrotfU4NPVtlRhxwQC6pkBUL2zxwxcREToNq9k
b3qx+EMTEDJwSkYofafT+OhTsomGRPvKNWDv4ivFIwSUxixkCpKuF7Iu5ZeHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUCQxVYSfSFSxHV46/YIeJufgWymMwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzczNzJlMzgzMzJlMzEzMDM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNTM0MzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1T
aTANBgkqhkiG9w0BAQsFAAOCAQEAgJmF+MmWkvPzIHLFLObHssQViM5NRk+cXJJv
JDXy4aYR7z4Z1PGYy+Kb2fmGko6YiE3FVsCmfgTm5sOAaHWBAryHYK1zgdcJcoEz
+CiPDchqy/Lgcf9sexuVgaxvaiqgI5BFm+on/AJ7uQEubFkRnCrTQ1YJyU6lZ0pJ
TG1XiiH5OvzXhSnU6/tvoMhi5ahrorTQQxtPygTw95mk9MkDJw0Ac2V9SXnCjO5U
jAuVuC15hVT0MCsas0nI2PHA2hQL5rMQ768JfV0Fk/wH+fu3ZU/qcKqVgpW+4jYZ
Iz2oxL2vWtp7iMYDCr+ja9viQfVwgXZqiWIlqTEaR+0/nDAb/w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org