Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/LjdLfS_ODJ2L8AzCgoxtKt8X3Ow.roa
File:                     LjdLfS_ODJ2L8AzCgoxtKt8X3Ow.roa (raw, json)
Hash identifier:          xy5GZlGwp3jlmetC9p3RfMsLDjNDDELovzGTIZvJQhY=
Subject key identifier:   2E:37:4B:7D:2F:CE:0C:9D:8B:F0:0C:C2:82:8C:6D:2A:DF:17:DC:EC
Certificate issuer:       /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial:       0185729ECC43B6B0D17E5C64C1815864696B
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/LjdLfS_ODJ2L8AzCgoxtKt8X3Ow.roa
Signing time:             Mon 02 Jan 2023 13:14:47 +0000
ROA not before:           Mon 02 Jan 2023 13:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39918
IP address blocks:        91.192.179.0/24 maxlen: 24
                          91.192.176.0/24 maxlen: 24
                          91.192.178.0/24 maxlen: 24
                          91.192.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:cc:43:b6:b0:d1:7e:5c:64:c1:81:58:64:69:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
        Validity
            Not Before: Jan  2 13:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e374b7d2fce0c9d8bf00cc2828c6d2adf17dcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:80:85:24:5a:61:21:e8:de:ca:b7:ce:69:
                    9b:48:78:af:09:5c:57:ce:74:98:94:a0:de:57:04:
                    c0:ec:1c:3e:00:d9:59:66:77:df:15:1f:3a:f1:70:
                    24:04:92:a1:a0:a4:43:5e:6e:d1:8a:ed:6f:56:a1:
                    8b:b8:9c:13:00:d6:e4:6d:71:28:ad:6d:f3:e6:99:
                    7e:2b:db:8e:17:91:44:85:57:33:a4:7e:7a:48:da:
                    8f:13:6b:df:82:aa:d8:f2:3d:84:0c:6d:8e:db:59:
                    0b:47:48:b9:d1:a2:a2:8d:85:a3:7b:f6:db:c2:4b:
                    38:15:0c:f9:51:1a:51:a6:1f:18:0c:9b:a1:27:ed:
                    f9:a6:4e:11:75:36:e1:53:24:00:b6:4f:cd:d1:ca:
                    b0:83:89:bd:a3:91:6f:2d:88:bf:81:7b:9b:93:6d:
                    25:17:c4:04:0d:1b:ce:4e:83:5f:6c:94:f0:fb:4c:
                    0e:59:47:83:7f:52:ab:18:a4:62:d1:4e:ae:d4:6a:
                    51:6d:92:8f:d1:7c:1d:b9:e6:77:05:f1:cc:34:35:
                    22:08:af:97:3f:53:38:9e:5b:a9:d5:fb:b4:2b:8b:
                    02:2e:f9:ed:7c:6d:b9:25:b3:be:5b:97:58:f0:1c:
                    db:a2:d3:83:20:0d:b7:1f:e4:e7:83:0f:0e:14:10:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:37:4B:7D:2F:CE:0C:9D:8B:F0:0C:C2:82:8C:6D:2A:DF:17:DC:EC
            X509v3 Authority Key Identifier:
                keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/LjdLfS_ODJ2L8AzCgoxtKt8X3Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:73:62:6a:aa:ba:6f:9a:bb:86:ae:83:f3:08:c7:49:35:
         40:02:f4:1c:a3:98:ba:ec:86:c3:90:dc:33:8f:77:7f:d1:32:
         8e:23:45:9a:8f:2a:ac:04:bc:86:5d:d1:81:75:0c:7c:0d:7a:
         cd:14:e3:ce:0c:6b:22:5f:e6:21:e9:35:af:a9:7b:f9:43:67:
         68:cc:d6:93:8d:7c:d2:95:96:eb:f5:13:6a:44:87:8c:5e:b8:
         f8:bc:25:87:f8:da:55:5b:73:2e:f2:50:f7:9d:81:a9:ff:9e:
         bf:9b:35:33:4c:e5:1c:3c:d3:ce:72:98:9f:e5:e0:60:78:cf:
         ad:2a:cd:41:99:74:f7:51:79:92:9d:41:e7:4e:56:0a:34:fc:
         39:e8:9e:3a:f2:15:cb:b5:70:c6:3e:fd:20:0e:ca:a1:8b:21:
         3b:66:fd:a0:b3:d4:ea:4e:ba:a6:99:49:6b:46:81:52:25:80:
         85:55:eb:b8:08:4a:c9:b1:d1:62:e9:80:7f:0d:99:68:68:8a:
         bb:ab:16:d7:56:b9:c8:0f:08:5e:c1:76:1a:dd:31:e7:fe:a4:
         31:1a:ca:b7:2b:88:e9:a0:be:58:c4:ff:83:e9:1e:87:77:6e:
         13:fc:96:f5:75:58:e2:df:cd:5b:25:2b:19:21:71:ad:f3:f7:
         a9:b6:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org