Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/MsenBxRqRnikF5DDq3xH00JphWI.roa
File:                     MsenBxRqRnikF5DDq3xH00JphWI.roa (raw, json)
Hash identifier:          win/bj8Pn/zHUPL2Ps+r2ne82vS4RYedofGIphFdHpA=
Subject key identifier:   32:C7:A7:07:14:6A:46:78:A4:17:90:C3:AB:7C:47:D3:42:69:85:62
Certificate issuer:       /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial:       0187E23A95B7A748D41179E0264197001F78
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/MsenBxRqRnikF5DDq3xH00JphWI.roa
Signing time:             Wed 03 May 2023 15:28:22 +0000
ROA not before:           Wed 03 May 2023 15:28:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142111
IP address blocks:        80.91.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e2:3a:95:b7:a7:48:d4:11:79:e0:26:41:97:00:1f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
        Validity
            Not Before: May  3 15:28:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=32c7a707146a4678a41790c3ab7c47d342698562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:1b:5e:a5:ba:89:d2:d3:2f:e9:3f:8f:4d:
                    21:49:8c:1f:fa:7e:ac:13:b7:c7:02:c1:16:85:b6:
                    0d:ba:0a:5a:03:64:ed:f6:64:56:76:2b:63:24:37:
                    02:cb:93:f4:34:c2:1d:00:ad:51:1c:cc:48:1f:b7:
                    f3:cd:4c:21:5a:ba:2e:53:b4:2d:54:ae:ea:9a:f6:
                    42:67:b4:e1:e4:16:10:cc:3f:2a:4e:2c:40:0a:59:
                    77:3a:b4:26:58:67:6f:cb:68:c5:ee:af:5b:de:1c:
                    5d:ff:69:49:be:a2:4c:cc:c4:7d:d4:ae:92:10:72:
                    3a:3a:3f:94:ae:94:04:45:6f:d2:f3:11:cd:d9:f4:
                    f8:50:58:10:93:eb:79:39:ec:cb:dc:bf:05:06:51:
                    bd:56:ab:9c:ff:a2:92:cf:90:ca:8a:f2:85:49:22:
                    19:c3:20:dd:3b:6b:74:4e:91:1b:19:90:df:db:fb:
                    e4:db:59:e2:93:0c:42:6b:47:8d:3c:1c:bd:71:5a:
                    8b:62:7c:f4:27:b8:51:21:ad:80:c0:82:48:77:8f:
                    a1:2e:8e:0f:36:75:67:61:4b:41:b1:49:ad:52:f6:
                    35:04:33:31:55:b6:94:f8:0f:ad:70:01:73:2d:bc:
                    f4:73:7d:46:a3:dd:fe:9c:46:83:aa:49:7b:59:66:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:A7:07:14:6A:46:78:A4:17:90:C3:AB:7C:47:D3:42:69:85:62
            X509v3 Authority Key Identifier:
                keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/MsenBxRqRnikF5DDq3xH00JphWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:6f:40:de:94:75:81:0b:5c:c4:81:4f:53:e9:e6:da:da:
         c3:d8:99:0f:39:c3:9e:cb:a8:bc:fc:26:c0:fe:1f:ee:67:12:
         15:39:4e:bf:b7:00:d7:0d:95:51:c2:06:f2:84:f4:29:08:1f:
         5d:10:7e:61:35:1b:35:50:45:70:61:ab:f5:a2:12:39:35:98:
         9f:fa:1c:80:ea:3e:c0:db:36:38:37:30:05:ed:e6:41:3c:9a:
         e1:2d:56:7c:a7:e8:ab:04:a4:46:03:56:28:a8:94:4a:05:e9:
         35:25:a9:95:89:d8:de:50:f7:1c:02:2f:49:31:84:86:3f:5b:
         92:9a:73:b4:5c:1f:03:4d:45:38:86:4d:ca:ea:d9:31:ae:4c:
         01:c9:b2:ad:3b:9b:0c:fe:fd:15:50:81:56:fe:88:7e:b5:62:
         92:fb:05:07:e3:41:f3:c7:4f:9c:de:22:43:df:45:21:d9:c7:
         3c:d2:c4:c4:f0:40:04:65:b3:fc:0d:56:b9:05:21:f2:57:bd:
         e2:1b:de:dc:a0:d8:58:7f:76:da:52:31:05:58:fd:af:11:bd:
         63:f1:72:4c:06:cb:7d:b9:63:bf:38:9f:60:d9:be:6c:26:aa:
         1d:71:43:22:64:35:5a:ce:0a:12:04:d0:aa:05:28:de:c4:be:
         e5:1a:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org