Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/J4OGeawKAiLXG-O6ymJXODJI2D8.roa
File:                     J4OGeawKAiLXG-O6ymJXODJI2D8.roa (raw, json)
Hash identifier:          vjCWZy92wbKZ3lwBgebdLBOanzn29daZxBrmLm+0lYM=
Subject key identifier:   27:83:86:79:AC:0A:02:22:D7:1B:E3:BA:CA:62:57:38:32:48:D8:3F
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0188E2464950CEFF523270FA970544165ABF
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/J4OGeawKAiLXG-O6ymJXODJI2D8.roa
Signing time:             Thu 22 Jun 2023 08:43:57 +0000
ROA not before:           Thu 22 Jun 2023 08:43:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398343
IP address blocks:        91.190.184.0/24 maxlen: 24
                          91.190.186.0/24 maxlen: 24
                          91.190.191.0/24 maxlen: 24
                          91.190.187.0/24 maxlen: 24
                          91.190.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 12:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:46:49:50:ce:ff:52:32:70:fa:97:05:44:16:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jun 22 08:43:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27838679ac0a0222d71be3baca6257383248d83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:d9:07:0a:6c:86:59:9c:c2:7d:a2:22:3c:
                    74:cd:86:63:a3:fc:88:81:82:b8:39:52:aa:09:51:
                    cd:91:fd:84:40:aa:ac:26:b0:90:11:30:ac:34:5d:
                    66:cd:a8:5c:00:1b:e0:03:f3:39:2f:b3:50:ef:77:
                    0c:75:a6:27:9e:8d:cf:6c:7a:7f:27:1d:87:3e:fc:
                    21:03:b2:ce:d9:99:d8:2b:ab:84:f9:89:b5:6f:56:
                    0e:b9:4c:11:6c:62:50:7d:57:17:0e:ba:30:0b:31:
                    c7:ca:36:18:c7:eb:ab:06:9e:07:08:34:94:47:53:
                    3e:a3:55:db:44:49:0d:ed:83:d1:7d:5e:12:b1:bd:
                    4d:d4:02:e6:96:4e:6a:11:bc:c7:7d:e5:f9:dd:5d:
                    44:46:0e:fb:f8:23:76:49:b2:6b:e6:48:c9:7a:1b:
                    78:77:4c:66:c6:72:e4:6c:ee:54:59:1d:4d:c1:a3:
                    02:00:a6:b7:be:a5:1e:3d:a7:54:e7:1a:82:1f:1a:
                    1f:c2:8c:e1:b4:ec:8a:f4:ed:d9:1d:21:98:9d:0e:
                    f3:b6:f3:47:be:6e:8b:1e:9a:6b:0a:e3:e5:3f:69:
                    0d:3e:80:d0:11:6d:ce:9a:30:2c:aa:91:72:99:9b:
                    41:15:ab:fc:67:13:b3:86:fb:2e:52:ab:97:3e:32:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:86:79:AC:0A:02:22:D7:1B:E3:BA:CA:62:57:38:32:48:D8:3F
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/J4OGeawKAiLXG-O6ymJXODJI2D8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.184.0/24
                  91.190.186.0/23
                  91.190.189.0/24
                  91.190.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:67:dd:97:36:a9:74:be:0f:b3:57:94:fc:2a:1e:6e:93:10:
         39:6e:87:13:b2:0b:49:da:ba:a8:74:fd:01:56:26:40:97:f5:
         e6:12:ad:60:60:58:01:9b:fb:31:3e:9c:bc:73:5a:b5:92:8c:
         b8:4b:29:17:9d:59:92:e2:4d:e5:03:39:85:c7:46:44:87:f5:
         80:a8:a1:a1:90:f4:9e:88:37:dc:9e:72:7b:31:f9:4b:ea:7d:
         9d:36:4d:76:db:35:ec:d7:3e:1f:d3:f4:6f:c4:d1:7e:0b:c5:
         36:25:77:b7:24:02:15:08:6f:1c:39:a0:9a:65:46:c2:c0:27:
         85:9d:85:56:62:ec:5d:81:d6:49:50:b1:66:cc:15:c8:0a:77:
         7d:fc:ac:9a:9f:aa:cc:f6:5f:b6:a2:d8:46:d0:e6:67:58:90:
         6d:e8:7c:26:cb:bf:f8:e9:bc:eb:a5:5d:d0:60:9a:2b:c0:a8:
         32:14:c3:34:74:3f:84:7f:1d:f0:b1:b3:3e:b8:52:78:52:2e:
         22:f3:6c:a9:b3:5c:31:30:98:7b:54:d9:78:20:98:69:66:72:
         63:cd:af:c3:c2:5c:b6:21:cc:d8:e1:3b:76:21:11:54:5e:9d:
         d7:d9:ed:1a:d1:cc:f9:63:4f:b5:c6:df:1a:66:02:b4:cd:cd:
         15:52:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org