Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/UxBElhgbF-0qhcL0lmbai60eB0A.roa
File:                     UxBElhgbF-0qhcL0lmbai60eB0A.roa (raw, json)
Hash identifier:          epp3md49xEK/B78PnPjl7XJi16eZgeE4FrMGTUK+vkI=
Subject key identifier:   53:10:44:96:18:1B:17:ED:2A:85:C2:F4:96:66:DA:8B:AD:1E:07:40
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       018B1506E7919298A37F6DC8A0E149417C8C
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/UxBElhgbF-0qhcL0lmbai60eB0A.roa
Signing time:             Mon 09 Oct 2023 15:20:55 +0000
ROA not before:           Mon 09 Oct 2023 15:20:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48678
IP address blocks:        91.102.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 08:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:15:06:e7:91:92:98:a3:7f:6d:c8:a0:e1:49:41:7c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Oct  9 15:20:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53104496181b17ed2a85c2f49666da8bad1e0740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:0b:a4:8a:4c:29:6e:e2:c2:7e:e2:57:4f:
                    12:85:63:7f:5f:32:3e:92:69:d3:f8:71:06:f5:e3:
                    5d:cd:5a:d8:85:97:45:de:77:91:af:2e:31:bf:90:
                    48:d6:a6:f6:2c:80:9d:a8:35:e9:c5:8b:fb:50:32:
                    b7:80:2e:35:57:a7:6e:d1:b0:8e:0b:92:ce:e3:11:
                    14:73:9e:f5:31:1b:f3:d1:21:df:44:ea:93:b8:d1:
                    88:2e:d4:c5:9e:50:94:03:f2:cd:31:65:da:79:17:
                    c9:e2:a0:bf:27:d7:de:c2:17:5f:9c:64:c3:9a:a5:
                    e8:9e:d9:7b:98:96:3a:01:70:63:9b:74:b4:83:c4:
                    75:8c:1f:f8:b5:2c:47:0a:96:93:47:f8:5e:4e:36:
                    9b:d7:82:f2:ff:18:5a:7d:99:35:fc:36:09:93:89:
                    8e:29:e7:5b:12:c9:4a:25:7b:52:5c:6a:c8:80:2f:
                    67:83:2f:bc:52:98:9a:f3:e3:16:20:cb:c8:32:8d:
                    56:75:93:17:3b:6c:1f:e9:3c:d1:5e:8c:71:ca:5c:
                    54:8a:91:17:d1:27:3a:03:a1:c3:5d:f7:7e:86:fb:
                    29:da:12:89:db:e4:91:31:da:ea:a7:d0:df:3c:c7:
                    44:e4:2d:e9:b2:f6:4b:cb:e4:2e:e3:ce:50:9b:fb:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:44:96:18:1B:17:ED:2A:85:C2:F4:96:66:DA:8B:AD:1E:07:40
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/UxBElhgbF-0qhcL0lmbai60eB0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.102.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:75:f0:9c:b3:18:83:2c:8f:0a:19:3f:4f:7f:9b:b1:87:
         96:14:6b:1f:72:29:f4:73:31:b0:c1:14:31:e4:36:bb:1c:ed:
         d3:aa:3b:b5:91:bb:32:ff:e0:76:19:a6:cf:57:f0:24:18:f5:
         33:f9:aa:62:12:54:af:13:b1:d6:70:4c:9a:9e:60:09:1f:14:
         fe:f8:f5:b5:57:c3:ae:94:8d:c7:31:d6:9c:f3:9d:ca:35:f0:
         4a:71:f9:b6:6b:ab:db:f5:af:c6:b6:ed:5e:21:4c:42:54:f3:
         39:2b:79:db:6f:9d:12:6f:ac:8c:f7:b5:0b:b6:c6:31:2c:c2:
         59:e0:96:49:c0:c8:3c:86:cc:51:e4:66:74:85:3e:e4:39:a3:
         69:8b:81:1d:f6:5c:3e:4f:5c:b2:b3:7d:ee:24:af:26:70:19:
         48:f0:8d:30:28:35:43:10:9b:d2:77:ec:19:2f:bd:b6:df:7d:
         0e:2d:58:44:67:03:52:0a:fe:dc:8b:4c:6f:64:73:45:b7:33:
         47:96:8b:43:5c:f2:a8:2f:93:e1:96:4c:90:2d:24:02:70:ae:
         5f:65:51:fe:80:8b:43:ba:55:22:5f:a8:38:9b:9b:02:6a:01:
         af:48:16:64:17:0a:dd:15:d9:5e:5b:02:ff:70:26:cd:d6:92:
         14:07:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org