Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/bMv5KKWpsAUIb5F839qV5MDsgqQ.roa
File:                     bMv5KKWpsAUIb5F839qV5MDsgqQ.roa (raw, json)
Hash identifier:          9vKoBXPdEx5/4oJZKb7PWkWOD0j+4z5wjdqXBCG7vBI=
Subject key identifier:   6C:CB:F9:28:A5:A9:B0:05:08:6F:91:7C:DF:DA:95:E4:C0:EC:82:A4
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       018BFCD8B16CCDE20FB55311C7F2F30B6C2B
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/bMv5KKWpsAUIb5F839qV5MDsgqQ.roa
Signing time:             Thu 23 Nov 2023 15:42:21 +0000
ROA not before:           Thu 23 Nov 2023 15:42:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        92.61.104.0/24 maxlen: 24
                          91.190.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fc:d8:b1:6c:cd:e2:0f:b5:53:11:c7:f2:f3:0b:6c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Nov 23 15:42:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6ccbf928a5a9b005086f917cdfda95e4c0ec82a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:58:e1:4f:8e:95:7d:d0:33:4e:ea:41:be:
                    83:2d:e2:da:f1:bc:7e:b8:2f:4e:bc:e8:36:21:40:
                    c7:cf:96:64:31:98:d1:bc:1e:23:30:a8:d4:ac:f5:
                    3f:9f:73:75:37:dc:21:5e:cc:4f:92:51:6b:6d:46:
                    af:0e:a8:68:69:c9:90:2e:90:11:37:d1:9d:87:22:
                    88:56:74:b4:ef:7b:ce:ea:76:e6:b2:ec:09:91:b9:
                    89:f1:fa:c4:3e:5b:d1:c7:24:b5:92:7a:39:b4:ff:
                    98:bf:be:61:7f:2f:d2:b7:f1:ad:ee:37:e1:bb:ca:
                    33:b6:79:ef:9b:f0:37:b4:6b:2d:4e:5c:05:e5:9e:
                    47:5c:ff:bf:7c:2c:16:7c:46:b2:40:0a:85:14:5c:
                    f3:33:c9:d6:50:43:8c:54:b1:3f:a9:07:83:cf:e6:
                    fe:51:c6:b9:6c:97:a9:fb:18:09:50:92:20:b1:a3:
                    a4:32:e5:a5:b5:58:b3:58:e2:bd:45:a3:56:af:f3:
                    47:a7:8e:2f:b5:17:ec:fc:b1:16:27:5f:db:e1:b3:
                    af:3f:86:6a:87:61:2f:d9:8d:0a:0f:fb:94:82:76:
                    22:2d:b8:5f:76:49:b1:7a:8a:2e:e8:d5:b1:20:6a:
                    79:58:1d:49:0f:ed:67:5e:36:9f:cc:47:14:6a:5f:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CB:F9:28:A5:A9:B0:05:08:6F:91:7C:DF:DA:95:E4:C0:EC:82:A4
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/bMv5KKWpsAUIb5F839qV5MDsgqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.189.0/24
                  92.61.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:9b:27:42:e3:9e:30:c0:44:e6:7c:35:9e:e9:1f:32:76:
         bb:1b:81:f8:7b:37:bc:64:80:36:f1:2f:25:6a:c0:2b:08:ac:
         ad:55:3b:69:10:af:22:24:62:bf:19:3b:95:15:9e:92:b1:cc:
         29:b5:f6:29:df:53:d9:14:34:a9:ca:f1:ab:9b:6b:20:5d:f5:
         73:b8:8f:80:ed:31:f8:b2:d9:6c:e1:3e:fc:bf:33:e1:43:2a:
         60:8d:20:f4:7b:be:ca:7b:e9:89:bb:49:ef:ba:3f:2a:6d:ef:
         65:76:96:35:83:56:23:78:81:7e:31:5e:fa:8b:f2:15:a1:f5:
         a0:a7:5c:c0:fc:98:df:1e:65:f8:a3:6d:1d:fe:4d:eb:c1:22:
         02:5a:f4:33:bc:6a:05:3d:02:7d:20:ba:55:c5:35:dc:fd:0d:
         ce:dc:6c:a2:65:69:3e:d0:14:2d:59:3f:04:32:c1:74:b2:33:
         90:9d:5d:d4:0c:43:36:cc:1d:84:dd:c3:cb:11:05:95:dc:e9:
         49:a1:9e:63:ca:fe:4b:7b:51:7e:36:41:d5:86:c8:68:a0:3a:
         66:a8:f9:e0:5d:a3:ff:76:aa:f2:37:a5:ba:dd:bb:69:d8:00:
         8e:df:93:43:c1:be:f9:89:aa:a2:fc:3c:55:99:76:ad:65:90:
         ef:da:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org