Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/8EmiiJUBlYcp1t6xAgeO7qCjpZY.roa
File:                     8EmiiJUBlYcp1t6xAgeO7qCjpZY.roa (raw, json)
Hash identifier:          /QQIfAWm+hn1dXq4MjeWyMlgz/S8P0FW1UdgBlwX4po=
Subject key identifier:   F0:49:A2:88:95:01:95:87:29:D6:DE:B1:02:07:8E:EE:A0:A3:A5:96
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       01856D9D17650F6E57DFA95308B7754A41F7
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/8EmiiJUBlYcp1t6xAgeO7qCjpZY.roa
Signing time:             Sun 01 Jan 2023 13:54:49 +0000
ROA not before:           Sun 01 Jan 2023 13:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41887
IP address blocks:        91.227.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:17:65:0f:6e:57:df:a9:53:08:b7:75:4a:41:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Jan  1 13:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f049a2889501958729d6deb102078eeea0a3a596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:e2:6c:33:52:cf:a6:2a:20:c5:87:be:02:
                    0f:16:e9:84:5c:92:d5:c9:cb:08:48:94:3b:bf:fd:
                    50:31:6c:a9:90:41:83:e3:57:de:aa:85:36:60:db:
                    77:fd:e2:0b:d1:28:41:dd:e0:cb:67:c8:a1:79:62:
                    58:a2:e4:df:f4:5c:44:2b:2a:8c:11:4b:4d:59:9b:
                    04:fd:5e:e1:e4:58:46:19:b6:6d:4c:3f:f2:06:4c:
                    0a:93:20:dd:8e:94:68:ad:a6:34:81:ca:2e:82:53:
                    80:97:6e:ea:5c:e0:32:be:06:93:8c:2d:74:60:bc:
                    5c:ab:66:d8:1d:b7:c7:bd:3d:5f:b5:e9:bb:d1:18:
                    e8:ec:d8:15:04:64:f7:97:53:98:25:c4:37:ca:87:
                    a9:c1:76:87:64:df:2d:6a:d9:be:cc:2a:e1:6e:4a:
                    d8:bb:e4:43:f8:7f:e8:58:1d:f9:de:ef:3f:23:4a:
                    b1:39:5e:18:0c:e5:db:50:91:ec:62:21:3c:e8:d2:
                    f0:30:85:1b:61:e2:20:a4:0d:b8:34:36:20:09:35:
                    9f:cf:78:3e:42:c1:e7:e6:32:a1:59:47:73:f1:cb:
                    89:80:05:97:0d:33:9f:74:e4:5b:de:fb:c7:08:0b:
                    9f:68:f5:9c:47:40:5e:2f:fb:1a:9a:f4:7d:58:e5:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:49:A2:88:95:01:95:87:29:D6:DE:B1:02:07:8E:EE:A0:A3:A5:96
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/8EmiiJUBlYcp1t6xAgeO7qCjpZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:63:5c:70:a3:bb:aa:60:95:42:ed:e7:2e:73:e3:8b:b4:a6:
         57:25:a8:a6:63:4b:c4:d8:b7:7a:d2:70:93:3a:a0:ca:83:a2:
         d9:39:37:7a:cf:e9:5c:47:40:db:6c:74:56:98:4b:53:cf:e6:
         00:8a:41:dd:4c:a6:11:cc:cd:54:d3:a4:f0:be:c7:02:90:9f:
         b0:fa:0b:ee:ce:5b:a7:c3:9a:c2:b6:38:b6:93:1d:b7:60:20:
         11:9d:90:37:ad:f8:c9:1d:47:1e:85:55:c5:bc:b4:e2:71:91:
         b3:6c:bb:c2:ae:fd:e5:ca:fb:e4:03:f6:e8:d7:15:54:82:c8:
         6e:32:63:d3:f3:5f:30:9a:a7:16:13:d6:f7:53:95:2a:01:1d:
         89:be:fc:2b:d9:29:f2:5f:1d:7b:ff:25:b4:36:dc:a9:ee:8d:
         11:f2:0d:5d:17:e3:78:c7:12:24:a0:bc:30:eb:03:3b:e9:eb:
         d9:9b:bc:0c:b1:0d:20:2b:b7:01:13:39:85:f6:d9:76:00:04:
         78:12:46:3e:3b:fd:c6:20:e0:ee:3a:00:99:fb:8f:35:66:c9:
         13:4d:cc:13:97:b6:1d:e5:8f:24:f1:5f:25:0a:a8:cb:81:30:
         98:19:8f:9f:90:91:20:13:18:3f:0a:59:ce:ab:7d:4b:41:b5:
         50:c9:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:48 2024 by rpki-client on console-ams.rpki-client.org