Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/jOdGdpSP1niP4LvAc5VmSqpuxIk.roa
File:                     jOdGdpSP1niP4LvAc5VmSqpuxIk.roa (raw, json)
Hash identifier:          E7iRBO8xCnk1zFL5FVP5e+c3Cw5wsNqlVOSnni/E2X4=
Subject key identifier:   8C:E7:46:76:94:8F:D6:78:8F:E0:BB:C0:73:95:66:4A:AA:6E:C4:89
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       01898CCB17658BF3C90769DFA1EB19C73FBC
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/jOdGdpSP1niP4LvAc5VmSqpuxIk.roa
Signing time:             Tue 25 Jul 2023 11:24:27 +0000
ROA not before:           Tue 25 Jul 2023 11:24:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208324
IP address blocks:        91.192.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jul 2023 09:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:8c:cb:17:65:8b:f3:c9:07:69:df:a1:eb:19:c7:3f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Jul 25 11:24:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ce74676948fd6788fe0bbc07395664aaa6ec489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:dd:e5:dd:e5:88:12:8b:8a:67:06:38:62:
                    79:41:ec:3a:27:38:a8:1e:03:f3:8c:c3:ae:85:55:
                    d3:73:eb:43:13:9d:95:e7:41:f9:ac:93:f7:61:89:
                    6f:4c:a6:91:40:6e:fa:c4:38:77:19:8f:65:b1:f6:
                    c1:97:22:9a:b2:b8:03:4a:f3:73:25:af:d5:d8:6e:
                    91:fc:05:41:ac:f1:90:47:68:08:e8:10:82:31:bc:
                    06:00:21:84:37:7d:e8:aa:5a:20:0e:27:56:38:b7:
                    ff:27:da:dc:ff:9b:4a:b9:8a:93:85:ab:da:8f:6a:
                    81:f0:ab:5a:c0:87:2d:ea:92:cc:7e:93:bb:51:8a:
                    5a:c8:b8:5c:32:38:44:74:d6:a1:d5:d9:33:2c:6b:
                    4a:02:98:87:1a:78:0f:b3:84:cc:85:b7:66:16:5d:
                    d9:1c:21:c7:4d:2f:8c:5e:78:18:7c:72:af:34:a9:
                    59:22:1c:05:6f:de:43:6f:b3:5b:f6:59:1b:90:5c:
                    8a:6d:6e:a9:ec:8e:fc:2f:e7:b3:d9:8d:86:18:ac:
                    64:37:2a:ba:47:8b:d9:93:b6:c7:b4:4e:6b:0c:83:
                    30:f8:35:46:ce:1d:06:be:28:e2:0a:df:1f:53:ea:
                    d4:c1:b6:48:54:91:85:10:93:b1:04:55:54:bf:f8:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:46:76:94:8F:D6:78:8F:E0:BB:C0:73:95:66:4A:AA:6E:C4:89
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/jOdGdpSP1niP4LvAc5VmSqpuxIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:75:8c:cd:ab:38:a3:f0:f2:38:51:a6:f7:1e:79:1b:99:1d:
         fe:80:e6:0f:ae:f8:59:a7:83:db:bd:ea:51:f9:f2:c6:7d:69:
         62:45:7f:7f:ba:d1:ef:86:d6:ec:e0:cf:ac:80:68:3f:28:a2:
         24:43:3f:f2:fa:f8:a2:a6:99:6b:a7:5d:38:b5:d8:e4:d7:4d:
         be:c1:81:0f:27:f2:06:e8:e5:e4:c6:59:b0:44:b0:7b:9f:c6:
         c9:84:23:db:d5:86:8f:6e:d1:f8:b6:62:f3:63:ac:67:cd:9f:
         7e:73:03:1e:fe:00:84:b9:0e:b6:fa:bb:28:f5:81:a0:a9:c1:
         11:98:ea:dd:52:38:0d:cb:94:12:36:c9:bd:99:08:81:d9:0b:
         3d:c2:25:bf:83:7d:74:f8:2c:76:fe:37:fb:dc:88:15:b6:28:
         38:d2:2c:1f:2e:e8:7e:58:c9:14:4a:99:33:11:13:d0:67:1b:
         27:2e:4f:24:a6:d0:31:24:3c:8c:ed:16:a4:e3:90:b8:32:1a:
         26:86:f1:a3:ed:93:f3:4b:b1:c3:b6:ea:db:ec:81:26:a6:ad:
         d1:40:1b:62:97:b4:d6:25:72:b0:f6:f1:ca:b7:3a:3e:66:e9:
         99:0d:9a:83:e9:c1:75:75:c8:42:e3:57:ce:fd:63:6d:fc:f2:
         64:cc:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org