Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/bF8JDnFc84hFc91OTuvl3q7McTU.roa
File:                     bF8JDnFc84hFc91OTuvl3q7McTU.roa (raw, json)
Hash identifier:          FzuVSpGUPDWvGikcfEUZDpSBEms6Fo0Rffvk6Dfyhls=
Subject key identifier:   6C:5F:09:0E:71:5C:F3:88:45:73:DD:4E:4E:EB:E5:DE:AE:CC:71:35
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       018BBE304956B88828669973BB2CA3540511
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/bF8JDnFc84hFc91OTuvl3q7McTU.roa
Signing time:             Sat 11 Nov 2023 11:41:57 +0000
ROA not before:           Sat 11 Nov 2023 11:41:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60542
IP address blocks:        91.243.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 Nov 2023 12:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:be:30:49:56:b8:88:28:66:99:73:bb:2c:a3:54:05:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Nov 11 11:41:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c5f090e715cf3884573dd4e4eebe5deaecc7135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:7e:84:18:17:b1:89:9f:f7:ed:92:b5:05:
                    14:0d:57:2f:a2:09:ff:05:f4:f4:13:8d:75:a7:cd:
                    4f:d7:13:c8:89:16:7f:28:da:43:c3:4c:00:58:17:
                    1d:48:c6:16:be:26:75:e6:48:74:05:e1:ed:59:bf:
                    f3:77:eb:47:41:17:02:7a:2c:12:c8:72:01:58:fd:
                    7c:64:ce:c0:09:fb:17:86:39:df:43:88:d4:29:17:
                    d4:5a:5b:9d:ef:95:d2:13:42:c6:a4:6d:de:1e:aa:
                    e6:69:86:90:1d:32:0e:8a:c1:08:75:cd:64:e6:52:
                    6d:19:95:31:03:14:43:8d:4c:86:c1:76:c6:d1:52:
                    c9:2a:96:f0:f8:c7:8c:87:2d:5d:9f:a7:1d:01:f0:
                    6c:6b:e4:44:dc:7a:d8:42:da:cc:41:ed:df:55:e5:
                    fd:db:0a:0e:33:fe:87:c5:2c:4f:f1:20:71:92:3a:
                    74:7e:7e:42:36:dd:9d:1b:88:f7:59:f9:6a:4a:38:
                    03:cb:b2:67:e0:2e:bf:a1:25:eb:5a:62:b2:b0:8a:
                    94:06:3b:f3:74:18:ab:13:e3:49:e9:b3:5d:35:de:
                    fa:14:b9:7f:5c:4f:ae:6f:ef:af:56:d9:d1:1c:39:
                    18:1e:66:91:42:07:5a:c2:6b:3b:6a:aa:1b:88:50:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5F:09:0E:71:5C:F3:88:45:73:DD:4E:4E:EB:E5:DE:AE:CC:71:35
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/bF8JDnFc84hFc91OTuvl3q7McTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.243.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:62:22:73:13:f2:1e:ed:03:f5:32:ac:db:2c:2c:bf:48:3e:
         e4:83:17:a0:cc:0b:41:4e:83:0e:28:22:cd:74:f8:c5:f5:c0:
         52:9f:2d:7e:f4:c1:aa:c3:b7:e4:be:69:ab:42:4b:e7:1a:cf:
         b6:14:6e:e4:c0:df:99:bf:a0:66:b9:0d:be:28:e5:08:75:d4:
         df:de:63:6d:36:cd:b1:a8:f7:09:82:ae:2f:28:c9:fc:51:71:
         6d:d9:08:a0:9d:59:e3:ee:27:91:f3:06:98:ba:d2:5d:89:26:
         c0:91:0a:8c:46:9a:35:25:77:a8:99:45:8a:7f:a8:69:f9:ad:
         11:e3:58:9a:01:0f:ef:ba:56:43:ec:48:7d:43:32:7f:93:ce:
         50:80:a2:00:cd:9a:7b:50:1b:c3:b9:6c:98:76:4e:69:09:6f:
         34:cb:76:45:7f:18:ed:b2:3e:7f:c3:a2:d3:75:31:f9:ab:4a:
         5a:b6:60:e2:06:ee:eb:c1:3d:34:94:4c:be:2d:94:23:30:f0:
         c9:d8:f1:70:28:82:91:b2:e7:a3:7d:d3:a4:57:47:4c:62:4a:
         f7:05:0b:8f:a4:af:45:07:95:09:da:93:da:e1:20:aa:8e:08:
         c3:a4:06:5b:14:57:b0:d2:10:f5:d4:95:02:ce:49:ba:76:73:
         34:dd:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org