Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e20383334.roa
File:                     37372e38332e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tE5ykC9P7x30GTLrUJDGljBRWBIlT3X2odFDa3ELGeY=
Subject key identifier:   05:2E:44:4B:32:E9:F9:2F:E0:3F:B9:F1:78:41:E8:0A:E3:91:CA:8A
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       17A4B60A9E45B9E804CD7E6AF89CCB6FBE68E9F3
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 23 Oct 2023 09:41:40 +0000
ROA not before:           Mon 23 Oct 2023 09:36:40 +0000
ROA not after:            Mon 21 Oct 2024 09:41:40 +0000
asID:                     834
IP address blocks:        77.83.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Nov 2023 12:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a4:b6:0a:9e:45:b9:e8:04:cd:7e:6a:f8:9c:cb:6f:be:68:e9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Oct 23 09:36:40 2023 GMT
            Not After : Oct 21 09:41:40 2024 GMT
        Subject: CN=052E444B32E9F92FE03FB9F17841E80AE391CA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:39:04:f9:ee:e3:9a:35:6a:dc:ba:36:d8:
                    19:63:9c:45:68:e8:7d:75:71:b3:3d:ed:8b:b7:39:
                    1f:e8:9d:ed:cc:1e:8c:f6:e4:62:68:96:45:f8:f7:
                    e7:94:f5:c3:ec:2f:b5:3a:7a:eb:79:a1:8b:b9:a6:
                    84:d1:ed:9a:4e:7c:c3:ee:1a:ad:69:ce:d3:0a:46:
                    89:b0:97:57:cf:dd:61:c6:e8:fb:0a:92:d7:43:d7:
                    bb:6d:fc:4f:f2:24:96:20:d5:aa:f6:88:25:57:60:
                    82:32:df:53:92:fa:c9:42:7e:6e:a6:3a:1d:02:54:
                    6c:77:fb:02:d8:39:f3:67:6d:e9:9c:93:37:53:97:
                    42:05:a3:0f:1c:53:ce:3b:9a:cd:d0:33:0f:08:cc:
                    15:f8:7d:73:af:19:08:e9:17:dc:ea:f6:f2:9f:b3:
                    6d:4a:07:35:d0:c2:31:89:f4:66:c2:30:ef:a1:10:
                    e1:0c:2d:a2:28:13:88:81:dc:d7:cd:64:c4:4a:9e:
                    d7:b0:ae:c8:77:37:2e:27:b3:ef:3e:ce:a4:aa:e5:
                    f7:97:96:cb:2c:55:ce:1b:bf:e3:22:ee:b4:0c:25:
                    ba:72:14:30:5c:5f:89:d4:c3:15:44:cf:9d:25:1a:
                    73:c0:ce:9a:60:c5:17:20:bb:c6:5d:70:c7:32:17:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2E:44:4B:32:E9:F9:2F:E0:3F:B9:F1:78:41:E8:0A:E3:91:CA:8A
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:84:90:7b:a0:93:91:38:30:e3:9b:cd:3e:4c:fe:d4:25:fc:
         0f:e5:ec:9d:22:a5:57:6b:9f:f8:16:4d:95:5f:3a:46:aa:8a:
         49:cf:6b:45:18:f4:35:c7:aa:18:e9:36:ab:88:2c:c2:76:ee:
         b0:90:65:37:10:fb:42:7a:00:c3:a3:19:24:97:b4:ff:fb:73:
         b6:fd:39:49:0c:13:01:e8:04:8e:a1:ee:01:c5:43:0d:98:c2:
         47:63:04:4e:c8:1b:1f:3d:24:5f:d5:85:2f:e1:67:35:e7:a6:
         e8:14:5d:4b:79:da:df:a9:9b:5d:33:af:68:6b:b1:57:44:a3:
         94:0c:17:2f:c8:42:cc:80:7f:52:90:25:f8:3d:54:1f:70:04:
         2d:3b:90:32:6b:37:34:3e:19:eb:cb:3d:78:f7:f6:30:d2:cf:
         90:a1:ad:66:42:34:1a:e6:4b:c3:fc:ff:f5:c7:92:d4:09:a2:
         4c:74:06:0c:8e:de:b4:9b:ce:c4:ef:96:f3:ae:05:94:fb:38:
         f0:cd:96:08:1a:4b:15:73:4c:a7:02:e3:c2:1e:d1:10:b9:01:
         cd:d4:e1:6c:ce:ca:75:ec:a7:32:df:22:de:72:5e:38:93:40:
         a3:65:b5:12:5e:c9:ff:b7:d0:8b:ac:da:d4:3c:8e:46:00:d3:
         4d:d4:42:c7
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUF6S2Cp5FuegEzX5q+JzLb75o6fMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzEwMjMwOTM2NDBaFw0yNDEwMjEwOTQxNDBaMDMxMTAvBgNV
BAMTKDA1MkU0NDRCMzJFOUY5MkZFMDNGQjlGMTc4NDFFODBBRTM5MUNBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqvzkE+e7jmjVq3Lo22BljnEVo
6H11cbM97Yu3OR/one3MHoz25GJolkX49+eU9cPsL7U6eut5oYu5poTR7ZpOfMPu
Gq1pztMKRomwl1fP3WHG6PsKktdD17tt/E/yJJYg1ar2iCVXYIIy31OS+slCfm6m
Oh0CVGx3+wLYOfNnbemckzdTl0IFow8cU847ms3QMw8IzBX4fXOvGQjpF9zq9vKf
s21KBzXQwjGJ9GbCMO+hEOEMLaIoE4iB3NfNZMRKntewrsh3Ny4ns+8+zqSq5feX
lsssVc4bv+Mi7rQMJbpyFDBcX4nUwxVEz50lGnPAzppgxRcgu8ZdcMcyF5jnAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUBS5ESzLp+S/gP7nxeEHoCuORyoowHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVNqMA0G
CSqGSIb3DQEBCwUAA4IBAQAyhJB7oJORODDjm80+TP7UJfwP5eydIqVXa5/4Fk2V
XzpGqopJz2tFGPQ1x6oY6TariCzCdu6wkGU3EPtCegDDoxkkl7T/+3O2/TlJDBMB
6ASOoe4BxUMNmMJHYwROyBsfPSRf1YUv4Wc156boFF1LedrfqZtdM69oa7FXRKOU
DBcvyELMgH9SkCX4PVQfcAQtO5Ayazc0Phnryz149/Yw0s+Qoa1mQjQa5kvD/P/1
x5LUCaJMdAYMjt60m87E75bzrgWU+zjwzZYIGksVc0ynAuPCHtEQuQHN1OFszsp1
7Kcy3yLecl44k0CjZbUSXsn/t9CLrNrUPI5GANNN1ELH
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org