Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/k_qAOefTt4IGtwkJ5NhZgXJq59A.roa
File:                     k_qAOefTt4IGtwkJ5NhZgXJq59A.roa (raw, json)
Hash identifier:          cjoe0McNwiRrDrDw5hJsOWIvyQg0OOfn1HbviD7xFa4=
Subject key identifier:   93:FA:80:39:E7:D3:B7:82:06:B7:09:09:E4:D8:59:81:72:6A:E7:D0
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       0188959C95482E456C203C8EC803B24542F6
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/k_qAOefTt4IGtwkJ5NhZgXJq59A.roa
Signing time:             Wed 07 Jun 2023 11:27:26 +0000
ROA not before:           Wed 07 Jun 2023 11:27:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        91.193.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:9c:95:48:2e:45:6c:20:3c:8e:c8:03:b2:45:42:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Jun  7 11:27:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93fa8039e7d3b78206b70909e4d85981726ae7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:e8:b0:23:29:90:1e:9a:52:c4:b8:a9:22:
                    2b:dd:fc:d0:16:71:a1:d9:12:e0:1a:36:f0:83:b5:
                    4f:85:89:93:e1:14:33:1e:46:81:88:43:2c:0a:0b:
                    c1:16:3c:05:2d:5d:91:49:46:5c:17:bb:19:40:3c:
                    e2:8c:4d:d6:45:ac:7d:88:7b:4b:57:a9:f5:b6:c3:
                    58:a3:37:f1:4c:5f:0d:51:5c:00:0f:14:0b:2c:20:
                    4d:04:f5:02:dc:85:c8:52:18:00:0f:0a:86:2b:8c:
                    c3:c2:2b:f5:f8:36:b9:3c:36:b7:4f:19:31:4a:00:
                    d0:25:21:a7:3f:80:de:4a:36:66:59:56:0c:e9:a2:
                    18:0b:ba:de:40:fa:42:00:02:4a:f6:1e:2f:0e:d2:
                    af:35:dc:44:b3:77:dc:d4:ef:b6:61:b4:28:cd:de:
                    3f:ec:ee:41:d7:67:60:31:31:c2:48:7f:a2:8f:5e:
                    0f:9a:90:a2:28:6e:73:2c:96:de:5c:eb:31:0a:3f:
                    ea:f3:ec:57:3b:f7:0f:15:c9:8d:84:a8:02:dd:2e:
                    61:77:3f:38:b1:b0:cb:68:66:92:aa:f8:2a:29:63:
                    61:54:a1:ff:65:2c:8c:87:5a:c6:74:39:26:3c:c3:
                    70:88:a9:ea:60:74:20:33:65:1b:46:78:de:0a:d5:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FA:80:39:E7:D3:B7:82:06:B7:09:09:E4:D8:59:81:72:6A:E7:D0
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/k_qAOefTt4IGtwkJ5NhZgXJq59A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:07:5d:13:f5:8c:c9:dc:f2:fa:b7:4e:0d:fc:28:b8:f7:28:
         f3:54:ae:3f:7d:6b:1b:ce:b5:f7:4e:55:f5:73:6e:86:c3:cc:
         0c:e9:3d:33:7f:7a:e0:03:a6:c4:98:f5:dd:34:db:35:29:52:
         21:74:80:45:40:96:d5:20:f5:d3:76:98:a5:37:d4:fd:8e:0c:
         f6:d7:3b:86:2a:e8:46:12:27:32:03:6d:7b:d3:f7:cd:b4:55:
         5c:f0:59:12:b2:6a:d7:b4:73:44:19:28:3c:39:a8:ab:37:88:
         73:2c:4e:b1:9d:0d:58:8b:42:99:1a:4f:d8:ee:a2:53:e3:36:
         99:86:50:ec:89:8b:96:ed:31:4f:d1:e3:ae:01:da:fb:40:67:
         8d:6b:1e:3f:2e:5a:1b:39:d9:3e:3b:55:8a:e0:ec:84:cd:b2:
         27:48:a6:26:66:7c:59:8f:06:f5:da:e7:a5:49:40:0c:05:04:
         28:46:35:34:a1:1d:bb:3f:68:aa:cd:a3:75:83:2e:1b:80:a6:
         96:ad:ee:a6:90:fa:d1:6f:68:a9:b7:4b:d7:cd:dc:cd:a5:2f:
         50:39:8a:a0:fa:61:69:2a:7a:e4:94:b4:9b:8d:09:d8:fa:07:
         78:3b:2f:ec:27:81:5e:32:ac:1c:82:7f:00:f9:41:24:c4:ef:
         8e:31:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org