Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/vws6BLBOt-gv1pC9gQ-E4ohNfH8.roa
File:                     vws6BLBOt-gv1pC9gQ-E4ohNfH8.roa (raw, json)
Hash identifier:          5es8SWQCJs53wDW5dP/u6RTMetqmMuJG/Kc3q0DD45s=
Subject key identifier:   BF:0B:3A:04:B0:4E:B7:E8:2F:D6:90:BD:81:0F:84:E2:88:4D:7C:7F
Certificate issuer:       /CN=26e3fc79b638b123191dafa4e886d3a5acad487f
Certificate serial:       018CC424589E6B15734A04DAF908F0575A07
Authority key identifier: 26:E3:FC:79:B6:38:B1:23:19:1D:AF:A4:E8:86:D3:A5:AC:AD:48:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JuP8ebY4sSMZHa-k6IbTpaytSH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/vws6BLBOt-gv1pC9gQ-E4ohNfH8.roa
Signing time:             Mon 01 Jan 2024 08:29:25 +0000
ROA not before:           Mon 01 Jan 2024 08:29:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207713
IP address blocks:        91.216.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 05:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:58:9e:6b:15:73:4a:04:da:f9:08:f0:57:5a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26e3fc79b638b123191dafa4e886d3a5acad487f
        Validity
            Not Before: Jan  1 08:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bf0b3a04b04eb7e82fd690bd810f84e2884d7c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:52:af:c8:53:7d:af:7f:ce:85:c5:13:ca:
                    91:b7:97:db:c6:aa:f6:96:4e:43:1a:f7:de:b2:16:
                    bf:6b:51:12:b2:ff:9c:b2:58:f2:31:28:49:52:f1:
                    4d:8a:b6:6e:e5:e9:ab:72:6a:46:11:05:6e:e5:5a:
                    5d:c6:16:d6:3d:d1:0d:33:2c:df:0a:c6:62:02:db:
                    78:63:1f:29:92:4b:93:62:55:94:6b:cc:01:f9:51:
                    80:03:92:f2:be:d8:2e:d7:22:8b:d2:2a:10:e8:73:
                    e9:d6:1e:aa:47:e1:b3:f1:1a:83:15:93:d1:4e:44:
                    91:89:15:5d:99:46:56:4c:58:1c:e9:2d:c6:4f:48:
                    ca:98:2d:24:64:35:a1:2f:83:4c:d2:9b:9e:49:c5:
                    f3:ff:f7:d1:3d:f0:96:21:ed:dd:75:db:7a:c7:e2:
                    79:0c:39:1a:a1:d5:4b:9b:59:a0:0a:4e:1b:02:02:
                    94:c4:e6:01:0e:6e:f9:8e:42:c5:d3:6a:35:18:16:
                    ef:ee:71:93:c7:aa:bc:03:c2:79:da:d4:70:e5:25:
                    5c:1d:af:2d:35:54:bc:93:0a:f8:61:9f:e1:6c:46:
                    2f:79:f9:b2:17:d8:99:aa:e9:13:e2:e3:5b:27:e0:
                    91:62:c9:53:83:1c:e0:62:8b:86:e9:02:48:83:0c:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:3A:04:B0:4E:B7:E8:2F:D6:90:BD:81:0F:84:E2:88:4D:7C:7F
            X509v3 Authority Key Identifier:
                keyid:26:E3:FC:79:B6:38:B1:23:19:1D:AF:A4:E8:86:D3:A5:AC:AD:48:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuP8ebY4sSMZHa-k6IbTpaytSH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/vws6BLBOt-gv1pC9gQ-E4ohNfH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/JuP8ebY4sSMZHa-k6IbTpaytSH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ea:f7:ac:fb:ec:c6:b5:ce:bb:2b:46:66:fe:7f:56:96:42:
         a0:ae:37:5f:87:6b:24:a3:c7:e4:39:41:b3:56:73:53:1d:35:
         58:5c:e7:34:e3:16:3d:75:77:b4:2a:cc:61:6a:bb:9e:a6:2a:
         65:c0:8b:2f:fe:f9:e3:55:67:d3:34:f8:ab:e8:f3:cd:53:f4:
         32:ad:a7:b2:a6:b5:b6:32:d1:3e:f0:1c:e4:d1:41:ab:af:9e:
         55:36:9a:41:8f:6c:8b:1e:18:e6:23:61:10:70:05:3f:aa:62:
         7d:4a:18:ea:14:c1:39:22:61:46:dd:a5:4b:f2:9c:bf:e7:ff:
         ed:e8:d8:cd:50:ed:8a:8d:62:ab:e9:c3:a2:81:7f:6e:8d:22:
         fe:8d:01:60:2b:94:d3:8e:6a:6b:16:d9:23:ab:4f:fb:16:bc:
         a3:62:21:ce:69:d5:cc:89:1d:c4:f9:a1:81:c2:76:97:07:da:
         e4:cf:b9:ff:1f:28:5c:bd:67:ed:83:8d:0f:78:c9:8a:87:96:
         49:fc:95:c0:43:18:26:49:a3:e8:be:57:4f:ee:9f:7a:4b:f6:
         44:ef:01:23:7e:50:d4:71:bd:9b:7b:86:a6:c2:f7:aa:37:46:
         a7:82:01:98:f3:6d:59:af:df:a1:05:68:aa:db:36:21:46:12:
         97:6c:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:20 2024 by rpki-client on console-fra.rpki-client.org