Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/B0ejWZZM5eYDNhhBFPrTYAGJvCE.roa
File:                     B0ejWZZM5eYDNhhBFPrTYAGJvCE.roa (raw, json)
Hash identifier:          4UdWxn1K1/dkjU7DRAbdJrMfUy6XZMGPLAEcoElhXHo=
Subject key identifier:   07:47:A3:59:96:4C:E5:E6:03:36:18:41:14:FA:D3:60:01:89:BC:21
Certificate issuer:       /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial:       01856F26C641127C893AF46A98188058D2F1
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/B0ejWZZM5eYDNhhBFPrTYAGJvCE.roa
Signing time:             Sun 01 Jan 2023 21:04:50 +0000
ROA not before:           Sun 01 Jan 2023 21:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51088
IP address blocks:        91.233.224.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:26:c6:41:12:7c:89:3a:f4:6a:98:18:80:58:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
        Validity
            Not Before: Jan  1 21:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0747a359964ce5e60336184114fad3600189bc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:f4:aa:22:74:4c:54:96:68:b4:06:5d:7c:
                    43:05:97:02:64:16:29:ba:53:e7:cf:52:10:59:fd:
                    57:2d:50:1d:a6:8b:e5:cd:57:9a:ce:71:03:b2:7a:
                    3e:ac:c9:41:d6:8e:19:d2:db:55:f0:57:ac:70:0d:
                    09:d1:7c:2f:25:a6:22:5c:6c:7b:39:bc:92:15:99:
                    05:e3:26:0a:b4:07:c7:96:59:5c:24:0e:40:60:78:
                    00:46:82:fe:f3:b8:d9:bf:ab:81:80:34:c5:fc:57:
                    64:32:5c:28:63:62:f0:0a:ef:61:bf:99:04:cd:61:
                    a0:61:48:b7:fc:14:a8:61:0b:0d:67:93:b2:61:93:
                    43:b3:0c:d5:3a:ee:e2:31:34:50:38:9d:f8:c8:ed:
                    51:2d:a1:fc:bc:49:e0:97:19:ec:81:0d:40:4a:8f:
                    30:20:91:29:bd:7a:ba:c3:da:f1:1e:1a:fd:58:4e:
                    de:57:06:ad:9b:39:9a:b4:fe:f3:9a:c5:96:0d:7d:
                    ef:72:eb:d0:37:d5:28:45:09:fd:bc:5f:5d:4b:3a:
                    13:40:10:ca:02:f4:8b:0e:38:bc:41:75:3f:78:fe:
                    a9:30:ff:34:c6:4f:be:81:57:e3:1a:f5:38:0b:d2:
                    b3:dc:ff:fe:f7:1a:8e:f1:e8:08:2b:ef:27:f9:f9:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:A3:59:96:4C:E5:E6:03:36:18:41:14:FA:D3:60:01:89:BC:21
            X509v3 Authority Key Identifier:
                keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/B0ejWZZM5eYDNhhBFPrTYAGJvCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:eb:11:8c:db:eb:fa:d2:15:35:5f:4a:b7:18:62:30:f9:
         dc:ce:f0:72:34:bd:00:3e:e1:9c:bf:bd:c1:34:fb:67:d6:15:
         3a:f2:06:fc:91:8c:d7:bd:82:71:1b:30:63:0c:7e:6b:a9:a0:
         88:86:b7:d9:9a:a0:79:2c:04:d9:76:86:c9:4b:16:02:5a:a7:
         df:c5:5b:13:3d:b0:85:2e:57:46:56:a0:9d:e6:df:79:29:d4:
         96:7b:41:86:30:d5:63:b8:a7:65:04:9d:f6:89:38:24:87:67:
         e7:0f:30:ee:43:6a:be:67:9b:71:66:82:4f:ed:72:1a:6d:0c:
         ad:27:16:fa:cb:c4:da:3b:e2:4d:1b:78:15:77:a8:72:a7:f1:
         4b:50:a0:3e:fb:ec:e3:fb:a0:87:9b:fb:c8:9c:e6:32:90:29:
         9f:ec:8b:15:f2:24:5e:9a:33:42:65:db:ea:10:91:b6:80:a1:
         d0:ba:3c:40:88:13:3b:da:ab:87:05:58:3d:94:81:f3:e7:20:
         3f:81:f2:cd:5b:77:1f:08:5e:b6:19:45:fb:06:91:a6:e1:df:
         fe:9d:7d:15:c5:43:af:72:fe:f9:08:0b:26:5d:d3:d2:44:92:
         ff:8f:3e:49:7b:be:7b:15:58:e0:45:87:23:b4:84:aa:75:e8:
         c0:7e:ca:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJsZBEnyJOvRqmBiAWNLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmMyMDQ5ZjIxOGI2ZmRhYmNhZDc1OTRjMjUyM2IyOGRh
NDc3YzEwHhcNMjMwMTAxMjEwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQ3YTM1OTk2NGNlNWU2MDMzNjE4NDExNGZhZDM2MDAxODliYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGH0qiJ0TFSWaLQGXXxDBZcCZBYp
ulPnz1IQWf1XLVAdpovlzVeaznEDsno+rMlB1o4Z0ttV8FescA0J0XwvJaYiXGx7
ObySFZkF4yYKtAfHlllcJA5AYHgARoL+87jZv6uBgDTF/FdkMlwoY2LwCu9hv5kE
zWGgYUi3/BSoYQsNZ5OyYZNDswzVOu7iMTRQOJ34yO1RLaH8vEnglxnsgQ1ASo8w
IJEpvXq6w9rxHhr9WE7eVwatmzmatP7zmsWWDX3vcuvQN9UoRQn9vF9dSzoTQBDK
AvSLDji8QXU/eP6pMP80xk++gVfjGvU4C9Kz3P/+9xqO8egIK+8n+fl5fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdHo1mWTOXmAzYYQRT602ABibwhMB8GA1UdIwQY
MBaAFKC8IEnyGLb9q8rXWUwlI7KNpHfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDIt
MTk5MTJhMGU0OTE4LzEvQjBlaldaWk01ZVlETmhoQkZQclRZQUdKdkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDItMTk5MTJhMGU0OTE4
LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+ngMA0G
CSqGSIb3DQEBCwUAA4IBAQB5qOsRjNvr+tIVNV9KtxhiMPnczvByNL0APuGcv73B
NPtn1hU68gb8kYzXvYJxGzBjDH5rqaCIhrfZmqB5LATZdobJSxYCWqffxVsTPbCF
LldGVqCd5t95KdSWe0GGMNVjuKdlBJ32iTgkh2fnDzDuQ2q+Z5txZoJP7XIabQyt
Jxb6y8TaO+JNG3gVd6hyp/FLUKA+++zj+6CHm/vInOYykCmf7IsV8iRemjNCZdvq
EJG2gKHQujxAiBM72quHBVg9lIHz5yA/gfLNW3cfCF62GUX7BpGm4d/+nX0VxUOv
cv75CAsmXdPSRJL/jz5Je757FVjgRYcjtISqdejAfsrE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:45 2024 by rpki-client on console-ams.rpki-client.org