Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/euLRZ0iwoDOcC2xL9MOuu7YvpOg.roa
File:                     euLRZ0iwoDOcC2xL9MOuu7YvpOg.roa (raw, json)
Hash identifier:          uM/PgThSXP8qp/lLx6EscgLDOrO3jOwaHBQCAt7Ydpg=
Subject key identifier:   7A:E2:D1:67:48:B0:A0:33:9C:0B:6C:4B:F4:C3:AE:BB:B6:2F:A4:E8
Certificate issuer:       /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial:       018CC6B8D5B31C7FC503AAEC6488EAC39ADD
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/euLRZ0iwoDOcC2xL9MOuu7YvpOg.roa
Signing time:             Mon 01 Jan 2024 20:30:51 +0000
ROA not before:           Mon 01 Jan 2024 20:30:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6830
IP address blocks:        91.194.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 12:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:d5:b3:1c:7f:c5:03:aa:ec:64:88:ea:c3:9a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
        Validity
            Not Before: Jan  1 20:30:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ae2d16748b0a0339c0b6c4bf4c3aebbb62fa4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:70:13:ba:f4:7f:0e:71:90:3f:38:b8:bd:
                    28:1c:fc:af:79:57:14:78:92:d4:b6:bd:02:50:c7:
                    42:59:b5:17:05:cd:13:c2:67:22:52:5e:1d:af:df:
                    9a:e9:2c:87:0d:b2:05:2b:db:32:06:9a:41:d8:fa:
                    71:47:06:65:1f:15:81:a2:cf:31:33:b1:32:41:3d:
                    e8:ed:c5:f4:d5:0c:79:05:d7:2d:a3:d5:af:07:b1:
                    ec:b4:aa:b2:e5:65:39:eb:9a:8d:ec:89:b8:a2:4d:
                    fe:69:13:04:e5:1f:83:ab:10:1e:56:b9:43:e7:7d:
                    9a:bc:19:b3:29:13:be:83:8b:fe:a1:a8:aa:f2:9f:
                    f0:87:91:6c:17:f4:42:d9:d7:3e:96:8b:d8:ca:47:
                    55:cb:63:17:8e:0a:12:a0:79:c4:7c:ee:13:92:41:
                    61:52:22:e5:7c:38:5d:fe:48:f5:12:40:db:59:5b:
                    5e:07:0d:ce:72:23:98:21:14:c0:db:02:5f:91:11:
                    08:39:dc:8d:d0:1b:13:a0:d2:b7:01:3f:8b:b2:92:
                    70:54:5b:96:4a:ac:8e:5b:bb:b4:1f:ad:7a:62:d9:
                    90:b6:1b:42:c8:26:0e:30:a5:ac:84:d9:c7:12:a6:
                    2a:40:5c:3b:3d:4b:81:a8:07:00:2e:0d:e5:13:9a:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:D1:67:48:B0:A0:33:9C:0B:6C:4B:F4:C3:AE:BB:B6:2F:A4:E8
            X509v3 Authority Key Identifier:
                keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/euLRZ0iwoDOcC2xL9MOuu7YvpOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:9d:6e:92:15:d2:9b:ec:f7:d0:d5:e4:35:1b:e3:11:6b:
         15:0b:7a:5a:1c:a3:a0:8f:58:33:a2:f4:1d:ec:8e:8a:2e:ea:
         72:e7:df:a4:06:e1:7f:ce:7d:de:be:c0:d3:81:14:5f:f3:f7:
         6c:ed:5e:f0:75:68:82:f0:9a:50:07:e8:a7:93:30:c6:ff:a2:
         12:ec:af:3c:7a:ce:90:16:30:94:eb:2f:b5:9a:d7:8f:77:1b:
         22:77:1e:c6:7b:de:5e:87:7c:77:7d:f7:d9:5a:1c:03:c0:3e:
         8a:3a:34:a2:23:52:7e:1a:37:fb:ee:33:8c:10:f0:8e:3a:ce:
         10:52:6c:53:92:50:8a:1b:37:ce:a9:ab:5c:e8:a6:55:52:de:
         66:f5:96:88:2e:b1:6e:50:55:bc:de:86:81:fe:cc:b3:6f:3c:
         dc:f0:29:76:b4:fa:45:b7:d7:03:d0:cb:60:96:ca:8d:11:47:
         fc:97:25:ad:b6:e1:ab:1a:28:f7:79:79:ba:3a:c3:36:d5:09:
         51:f9:b0:c9:4b:38:73:a2:58:7a:63:e5:46:f7:df:79:db:6e:
         e8:d6:5f:ca:21:a0:70:09:5a:78:bb:ce:9f:75:56:88:82:56:
         7b:fc:a4:95:82:f0:ed:c3:dc:06:4c:7d:cd:64:3e:a8:d5:cf:
         1c:f1:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-fra.rpki-client.org