Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/k7e-IFN_ZPjv3Ae8Mj4lYO0Mp10.roa
File:                     k7e-IFN_ZPjv3Ae8Mj4lYO0Mp10.roa (raw, json)
Hash identifier:          TGJFR8mZq+Xqfy8c5HpDNZ2CqdDUwbRNZ0kAjn/ZwiE=
Subject key identifier:   93:B7:BE:20:53:7F:64:F8:EF:DC:07:BC:32:3E:25:60:ED:0C:A7:5D
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       018AD1CB775607A706212E4FC3536BDF9E7E
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/k7e-IFN_ZPjv3Ae8Mj4lYO0Mp10.roa
Signing time:             Tue 26 Sep 2023 14:01:27 +0000
ROA not before:           Tue 26 Sep 2023 14:01:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209828
IP address blocks:        91.102.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Nov 2023 08:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d1:cb:77:56:07:a7:06:21:2e:4f:c3:53:6b:df:9e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Sep 26 14:01:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93b7be20537f64f8efdc07bc323e2560ed0ca75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:e7:82:64:02:30:dc:16:1d:60:17:99:1c:
                    b6:3c:c2:f1:6d:c8:23:ba:8a:b4:26:48:b5:fb:17:
                    8b:2a:79:b4:cf:38:91:85:c8:5c:d6:79:75:34:b0:
                    d3:84:3d:d4:ed:fc:e4:9e:0c:3f:dc:16:1f:73:1c:
                    e4:14:9e:52:62:59:1a:28:ce:56:96:4e:2d:b9:f4:
                    c5:4a:29:0d:be:22:6b:df:a2:6e:20:e9:d5:9e:75:
                    90:2a:ac:d7:3e:68:9c:fe:3a:ed:f7:eb:f4:f9:61:
                    0b:a8:86:d5:0a:d6:89:54:8c:62:92:30:19:3c:31:
                    37:c5:83:78:d3:ac:52:29:80:94:d6:6d:a3:d4:76:
                    0d:e2:e4:cf:68:8f:2e:3c:99:a6:ce:36:e8:ac:c4:
                    22:66:90:9d:cc:05:cf:82:86:ae:08:40:48:ff:f4:
                    bf:1e:d6:ae:18:1e:1b:69:0f:09:b8:b0:7e:0d:9b:
                    c9:b6:74:24:32:74:9b:0d:db:c4:6f:d4:d3:82:a0:
                    ae:49:dc:7e:4b:be:92:2a:05:3b:5c:e0:af:e5:5c:
                    b8:33:8b:7e:ef:0e:c0:f8:39:e9:8d:f2:f2:c7:c7:
                    0c:9f:2d:f2:47:26:a3:85:66:03:75:fb:94:ce:8e:
                    3f:01:ce:8f:cb:38:34:47:21:22:ce:03:6c:c2:1f:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:BE:20:53:7F:64:F8:EF:DC:07:BC:32:3E:25:60:ED:0C:A7:5D
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/k7e-IFN_ZPjv3Ae8Mj4lYO0Mp10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.102.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:07:d8:b8:4c:7d:d9:3f:fa:8e:59:30:76:40:b5:ff:08:68:
         5c:7f:87:1c:df:17:3c:72:0f:85:3c:64:5a:d4:60:39:26:9d:
         03:f6:7d:fa:22:19:68:86:92:35:2b:23:86:d3:6a:05:f5:05:
         8e:ce:b2:d0:e8:93:2f:37:c7:d5:d6:7f:0d:5f:03:1e:26:7b:
         a9:39:64:86:75:dd:70:17:bb:b5:3f:ad:3b:b7:d1:97:81:08:
         6e:9d:24:27:9b:f2:89:e9:9b:41:95:eb:5f:65:33:51:91:5c:
         1f:72:86:ea:c0:ec:19:17:02:f5:4f:65:19:25:cd:13:f9:05:
         5e:b2:44:30:62:97:f8:5c:6d:84:02:a2:a5:d8:74:0f:e5:5e:
         3b:38:36:4d:9a:90:ac:53:96:36:27:a9:45:2b:82:01:f2:7a:
         c3:60:f7:ed:56:01:b3:9f:18:fb:a0:ff:1d:3f:3e:29:79:eb:
         3e:78:02:ee:dd:39:0e:f9:e4:26:0d:5a:7c:03:48:de:c0:f8:
         df:23:d6:d1:1e:18:1b:07:da:f3:f6:be:fa:0a:f1:46:4a:21:
         d6:aa:2c:20:be:48:3b:5a:a1:49:0f:63:7f:1e:71:51:fe:ae:
         1b:d7:e4:20:72:c8:36:a8:4a:0b:7f:4a:77:89:b5:30:56:a6:
         aa:81:d5:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrRy3dWB6cGIS5Pw1Nr355+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjMwOTI2MTQwMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2I3YmUyMDUzN2Y2NGY4ZWZkYzA3YmMzMjNlMjU2MGVkMGNhNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGHngmQCMNwWHWAXmRy2PMLxbcgj
uoq0Jki1+xeLKnm0zziRhchc1nl1NLDThD3U7fzkngw/3BYfcxzkFJ5SYlkaKM5W
lk4tufTFSikNviJr36JuIOnVnnWQKqzXPmic/jrt9+v0+WELqIbVCtaJVIxikjAZ
PDE3xYN406xSKYCU1m2j1HYN4uTPaI8uPJmmzjborMQiZpCdzAXPgoauCEBI//S/
HtauGB4baQ8JuLB+DZvJtnQkMnSbDdvEb9TTgqCuSdx+S76SKgU7XOCv5Vy4M4t+
7w7A+DnpjfLyx8cMny3yRyajhWYDdfuUzo4/Ac6Pyzg0RyEizgNswh9rPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJO3viBTf2T479wHvDI+JWDtDKddMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvazdlLUlGTl9aUGp2M0FlOE1qNGxZTzBNcDEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2akMA0G
CSqGSIb3DQEBCwUAA4IBAQAUB9i4TH3ZP/qOWTB2QLX/CGhcf4cc3xc8cg+FPGRa
1GA5Jp0D9n36IhlohpI1KyOG02oF9QWOzrLQ6JMvN8fV1n8NXwMeJnupOWSGdd1w
F7u1P607t9GXgQhunSQnm/KJ6ZtBletfZTNRkVwfcobqwOwZFwL1T2UZJc0T+QVe
skQwYpf4XG2EAqKl2HQP5V47ODZNmpCsU5Y2J6lFK4IB8nrDYPftVgGznxj7oP8d
Pz4pees+eALu3TkO+eQmDVp8A0jewPjfI9bRHhgbB9rz9r76CvFGSiHWqiwgvkg7
WqFJD2N/HnFR/q4b1+Qgcsg2qEoLf0p3ibUwVqaqgdU4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org