Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20323135303531.roa
File:                     37372e38332e3130342e302f32342d3234203d3e20323135303531.roa (raw, json)
Hash identifier:          3YPPJREgPqSe2qas5z37g5lKhqT8PrbeDMi80sWzPmw=
Subject key identifier:   C7:25:FF:BA:C2:50:B8:05:DF:69:4C:45:4B:97:2A:69:90:E3:BA:1D
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       0BB0F78C2BBA2C7BBA6D472103F8AE89FAB4FE27
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20323135303531.roa
Signing time:             Sat 27 Apr 2024 15:19:20 +0000
ROA not before:           Sat 27 Apr 2024 15:14:20 +0000
ROA not after:            Sat 26 Apr 2025 15:19:20 +0000
asID:                     215051
IP address blocks:        77.83.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b0:f7:8c:2b:ba:2c:7b:ba:6d:47:21:03:f8:ae:89:fa:b4:fe:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Apr 27 15:14:20 2024 GMT
            Not After : Apr 26 15:19:20 2025 GMT
        Subject: CN=C725FFBAC250B805DF694C454B972A6990E3BA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:c2:04:2c:e0:4f:5c:cb:5b:b6:df:0e:8e:
                    00:94:aa:3c:22:47:50:f6:ea:4b:87:bc:e1:db:5d:
                    00:68:36:8d:75:94:72:bb:c3:af:79:d7:5b:c9:a5:
                    13:85:f5:b7:57:81:70:33:2e:03:8e:a6:8d:08:ce:
                    b4:60:c0:65:5e:f4:a0:67:27:ae:f1:29:a0:3c:c0:
                    c5:fb:ad:20:0b:f8:25:3b:0b:ee:f8:9c:34:61:ba:
                    ba:77:db:1b:c9:8e:6f:de:48:69:6b:94:82:64:c3:
                    09:d1:87:f7:9e:ae:31:55:50:25:e7:bc:98:99:48:
                    ff:31:45:45:fe:ba:bf:0b:0f:ac:1e:56:50:ad:74:
                    14:0e:11:60:43:fe:30:91:42:62:59:78:64:85:54:
                    58:5d:61:48:6f:13:5c:5c:56:7f:8b:a0:ec:18:30:
                    94:67:73:75:49:8d:d5:1d:c7:5a:8b:a2:26:7c:ce:
                    e1:b7:91:14:4d:03:de:af:37:1a:89:e2:6f:9c:72:
                    ac:0a:d3:f5:32:06:e1:93:ea:78:04:3e:51:ba:f6:
                    5a:bf:28:f2:17:75:de:57:a5:ea:6e:ca:49:a7:e8:
                    92:5f:cd:e0:8d:02:97:cb:ce:43:d7:49:1b:7b:29:
                    7a:71:1a:fb:9f:d6:68:ce:21:4b:28:5a:63:2a:e1:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:25:FF:BA:C2:50:B8:05:DF:69:4C:45:4B:97:2A:69:90:E3:BA:1D
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20323135303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:37:79:9f:ba:e4:62:ed:53:77:a0:34:92:fe:34:95:85:ab:
         cc:94:7e:36:59:41:72:2d:36:df:2e:fd:c7:fe:69:33:15:71:
         9a:9c:45:19:d6:a8:62:96:ee:1e:f6:3f:4a:0c:1b:6c:aa:22:
         f9:cb:5a:8e:7b:bc:b9:d7:ea:42:46:f5:1a:f3:c2:ff:48:9c:
         f2:e7:23:32:7d:03:32:eb:24:87:e1:83:21:d5:a6:23:19:98:
         48:d0:ad:09:61:dc:0e:4a:de:f4:ad:9f:80:ca:3d:f7:45:18:
         04:3f:9a:1b:85:4a:f6:11:d7:39:e9:e6:21:53:e0:aa:cc:24:
         9f:2e:65:e1:cd:2a:d9:99:c2:12:32:d1:15:84:b1:a0:c9:3f:
         90:b3:d5:08:e7:d3:5e:90:6b:59:f1:e1:fc:08:71:38:c2:72:
         b4:cf:73:60:45:f8:f1:ba:c2:2f:c6:8e:cb:2f:24:ed:1f:16:
         03:0b:bb:25:78:dd:9d:80:fc:ad:08:56:23:b1:2d:43:69:d6:
         40:4a:92:68:ea:78:2b:b4:2b:ec:0c:32:3e:c6:4c:8e:36:f9:
         9b:10:dc:47:99:83:77:6b:bb:af:3d:52:68:b7:1d:d4:3f:1c:
         b1:47:04:ea:ab:31:48:55:ef:75:32:3c:72:80:14:ad:25:9c:
         38:4e:16:81
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUC7D3jCu6LHu6bUchA/iuifq0/icwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNDA0MjcxNTE0MjBaFw0yNTA0MjYxNTE5MjBaMDMxMTAvBgNV
BAMTKEM3MjVGRkJBQzI1MEI4MDVERjY5NEM0NTRCOTcyQTY5OTBFM0JBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxcIELOBPXMtbtt8OjgCUqjwi
R1D26kuHvOHbXQBoNo11lHK7w69511vJpROF9bdXgXAzLgOOpo0IzrRgwGVe9KBn
J67xKaA8wMX7rSAL+CU7C+74nDRhurp32xvJjm/eSGlrlIJkwwnRh/eerjFVUCXn
vJiZSP8xRUX+ur8LD6weVlCtdBQOEWBD/jCRQmJZeGSFVFhdYUhvE1xcVn+LoOwY
MJRnc3VJjdUdx1qLoiZ8zuG3kRRNA96vNxqJ4m+ccqwK0/UyBuGT6ngEPlG69lq/
KPIXdd5Xpepuykmn6JJfzeCNApfLzkPXSRt7KXpxGvuf1mjOIUsoWmMq4aFhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxyX/usJQuAXfaUxFS5cqaZDjuh0wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzAzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
TVNoMA0GCSqGSIb3DQEBCwUAA4IBAQAmN3mfuuRi7VN3oDSS/jSVhavMlH42WUFy
LTbfLv3H/mkzFXGanEUZ1qhilu4e9j9KDBtsqiL5y1qOe7y51+pCRvUa88L/SJzy
5yMyfQMy6ySH4YMh1aYjGZhI0K0JYdwOSt70rZ+Ayj33RRgEP5obhUr2Edc56eYh
U+CqzCSfLmXhzSrZmcISMtEVhLGgyT+Qs9UI59NekGtZ8eH8CHE4wnK0z3NgRfjx
usIvxo7LLyTtHxYDC7sleN2dgPytCFYjsS1DadZASpJo6ngrtCvsDDI+xkyONvmb
ENxHmYN3a7uvPVJotx3UPxyxRwTqqzFIVe91MjxygBStJZw4ThaB
-----END CERTIFICATE-----
Generated at Mon Sep 30 01:11:53 2024 by rpki-client on console-fra.rpki-client.org