Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/JvuMNF7cumM3RV4fFNlsN5nMRO4.roa
File:                     JvuMNF7cumM3RV4fFNlsN5nMRO4.roa (raw, json)
Hash identifier:          YWg1VjDf9pjWam/Vzfpta3J7fS8/zpDFko9gOpmMmsE=
Subject key identifier:   26:FB:8C:34:5E:DC:BA:63:37:45:5E:1F:14:D9:6C:37:99:CC:44:EE
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       01867D76670BDE20DA4D13CD6B397E5C6C55
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/JvuMNF7cumM3RV4fFNlsN5nMRO4.roa
Signing time:             Thu 23 Feb 2023 08:49:17 +0000
ROA not before:           Thu 23 Feb 2023 08:49:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202422
IP address blocks:        91.188.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:76:67:0b:de:20:da:4d:13:cd:6b:39:7e:5c:6c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Feb 23 08:49:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26fb8c345edcba6337455e1f14d96c3799cc44ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:c0:d2:fe:53:06:f2:c9:eb:1c:3c:73:ab:
                    a5:0a:f0:62:ea:ad:99:0e:45:f9:28:d5:7f:17:c4:
                    70:d4:28:9a:d5:a4:e9:02:e7:41:e1:3b:f0:82:3e:
                    2b:18:83:12:92:94:59:a1:e3:0c:17:8f:b4:a5:91:
                    59:dd:98:20:13:28:df:f6:21:03:da:55:51:c4:54:
                    ee:63:9d:ab:2b:55:0b:ea:59:5f:01:6e:25:37:92:
                    0d:2e:a5:d1:6f:d8:94:a8:df:28:7f:8d:c1:1c:98:
                    b5:f2:58:2d:34:35:de:f4:4f:e5:8e:8f:30:b3:0c:
                    4c:10:a2:12:63:84:f9:1c:7d:16:c0:0e:7d:35:bc:
                    0c:6d:22:65:6d:06:29:20:07:93:8b:15:47:52:aa:
                    0f:46:2e:88:19:95:0c:c9:d9:e0:2c:4e:c1:c7:3c:
                    77:28:db:8f:18:8d:9e:3a:1e:7b:f7:2f:cf:72:d8:
                    50:83:c6:f1:a8:1a:61:98:f7:83:1d:d6:34:ef:a9:
                    7a:b2:8f:c8:82:e5:93:99:dc:66:c6:ea:36:39:e4:
                    2b:85:f3:2c:3d:ba:8a:f4:d4:40:32:04:46:fe:a5:
                    23:89:a3:85:0d:f0:79:b8:ee:fc:0d:4f:12:08:90:
                    8e:ff:d2:63:30:73:f1:6b:1b:28:6d:09:10:2f:d4:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FB:8C:34:5E:DC:BA:63:37:45:5E:1F:14:D9:6C:37:99:CC:44:EE
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/JvuMNF7cumM3RV4fFNlsN5nMRO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.188.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:19:8f:8d:58:51:86:eb:bf:45:09:36:1b:ba:d6:5d:65:84:
         fc:69:a4:6a:c5:ae:ff:fb:73:04:40:1d:0e:16:54:e8:c4:4c:
         0e:86:d0:2e:cb:e4:dd:f7:32:d2:0b:ea:d7:8b:d2:a3:67:f5:
         06:8f:c6:07:7f:46:cd:00:2b:e6:2e:dc:a8:cc:3f:5e:7b:34:
         39:24:2c:3a:c4:3c:0c:c3:52:f5:f7:74:a6:9f:f8:99:7c:40:
         65:31:fb:e7:32:f6:44:ec:0b:4d:be:18:0e:45:e9:eb:33:db:
         c4:20:b5:b3:5f:61:f9:2f:d0:ad:fc:d0:fc:94:49:8b:9d:8a:
         e8:05:69:9d:e5:9c:d2:fc:4e:31:b4:75:e6:76:d5:e9:b0:41:
         39:0d:3f:5d:7c:00:46:7e:3e:18:1c:16:28:41:72:fc:72:34:
         72:ca:9f:58:47:01:85:47:9f:dd:4c:88:a1:01:55:45:7e:62:
         30:6d:00:42:29:f0:f9:96:1b:6a:0f:8e:4c:fd:96:7c:df:2c:
         a4:90:be:62:2f:5d:1c:b9:a8:9c:f6:eb:60:32:d0:ae:2d:10:
         6a:7c:6a:b0:27:f7:6b:b5:43:21:56:b6:83:2d:6f:6a:57:2f:
         9a:56:e8:d6:10:a6:c3:32:19:3e:a6:ee:e2:ca:b3:a3:cb:43:
         0c:8b:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:23 2024 by rpki-client on console-ams.rpki-client.org