Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/g5KNMFD-hhgjzqMQ_ZdLSmDdWXA.roa
File:                     g5KNMFD-hhgjzqMQ_ZdLSmDdWXA.roa (raw, json)
Hash identifier:          y6mH8mO86/BNxQOpe49hk4pnXYlcGtfeH+7OQdLLVo0=
Subject key identifier:   83:92:8D:30:50:FE:86:18:23:CE:A3:10:FD:97:4B:4A:60:DD:59:70
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       0189D97211CE5B0283D5649D3816EABAEAF4
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/g5KNMFD-hhgjzqMQ_ZdLSmDdWXA.roa
Signing time:             Wed 09 Aug 2023 08:37:58 +0000
ROA not before:           Wed 09 Aug 2023 08:37:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.179.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 11:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d9:72:11:ce:5b:02:83:d5:64:9d:38:16:ea:ba:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Aug  9 08:37:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=83928d3050fe861823cea310fd974b4a60dd5970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:55:2b:3f:17:04:b4:dc:fc:9e:2d:f6:8d:
                    fc:86:6d:f2:42:19:e3:20:30:2d:0a:c8:bc:a8:f9:
                    74:49:c2:78:b1:fd:7d:ad:59:77:46:60:35:fa:bb:
                    d2:18:13:75:56:50:17:a6:67:c4:a5:46:6c:01:d4:
                    13:ba:7e:64:d3:16:29:40:19:ca:a8:eb:35:d7:f4:
                    d2:e5:da:12:42:50:2d:ae:6d:d9:3f:87:cd:a6:9d:
                    04:93:04:7a:87:33:28:1d:a2:5a:34:57:d8:b1:80:
                    46:f7:0e:48:32:6a:ad:25:5f:b4:a4:c1:b5:63:9a:
                    18:07:f4:3d:ae:ba:0a:6b:52:6f:b5:3a:57:98:be:
                    d7:96:85:6a:d3:4b:27:a5:6a:d0:fb:24:df:86:38:
                    b8:c6:8f:c0:23:e6:8d:9d:35:87:ed:75:f6:e4:af:
                    ff:b6:1c:a0:46:a8:fe:38:0c:c6:4a:63:ae:33:f0:
                    4b:9d:74:0f:e1:d3:e5:a5:b5:f4:4f:da:f2:c2:94:
                    b3:a5:d9:e0:c2:15:54:23:d4:7e:4f:ab:3c:cf:18:
                    10:6b:74:5f:df:a8:9a:55:b3:05:ec:67:25:29:d6:
                    f9:69:a5:69:e6:0e:9f:1a:ff:5a:18:59:0c:97:3e:
                    c9:94:44:ca:ba:0b:8a:a6:88:8a:dc:bd:82:01:56:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:8D:30:50:FE:86:18:23:CE:A3:10:FD:97:4B:4A:60:DD:59:70
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/g5KNMFD-hhgjzqMQ_ZdLSmDdWXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:4b:ee:bf:4d:29:86:1d:61:18:85:f8:ad:34:8d:7c:ea:
         92:8b:e3:5b:8c:30:80:34:10:81:39:47:08:cb:d4:70:21:f5:
         b2:fe:11:51:d9:7f:0d:22:79:ac:fb:2b:cc:02:e1:df:d2:23:
         74:c3:f8:e3:6c:87:28:46:3d:5c:75:55:bf:87:d3:60:0d:d0:
         bb:9d:02:3c:fa:cf:ed:ac:bf:dd:28:1d:dc:35:30:04:80:9d:
         19:f5:19:85:bd:53:e6:b2:ad:77:33:51:6a:48:75:dd:1a:bb:
         9b:65:f3:b6:06:ff:2a:1b:e6:0b:57:90:dc:7d:80:c2:82:50:
         87:10:b9:57:73:12:d0:df:78:71:85:14:5b:e2:ca:ba:ad:a9:
         e2:72:97:c3:7a:50:8b:53:02:33:41:39:9f:9c:33:fa:b2:d6:
         d2:d7:bd:85:d4:1f:48:a8:95:d5:16:be:e5:64:8b:f2:ed:22:
         54:6d:d2:e4:cf:79:cd:d4:7d:d4:5a:e1:61:e2:62:5a:7a:0c:
         a2:6c:ed:50:6c:4d:03:f8:02:85:c0:43:75:38:1d:a5:2d:d8:
         aa:53:46:66:12:ec:87:ee:5c:18:10:8a:f4:0a:15:0d:1d:6c:
         43:62:c9:2d:67:08:f8:bc:36:3e:47:d8:0d:0c:d3:b0:8c:5e:
         e1:59:94:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnZchHOWwKD1WSdOBbquur0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjMwODA5MDgzNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzkyOGQzMDUwZmU4NjE4MjNjZWEzMTBmZDk3NGI0YTYwZGQ1OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTxVKz8XBLTc/J4t9o38hm3yQhnj
IDAtCsi8qPl0ScJ4sf19rVl3RmA1+rvSGBN1VlAXpmfEpUZsAdQTun5k0xYpQBnK
qOs11/TS5doSQlAtrm3ZP4fNpp0EkwR6hzMoHaJaNFfYsYBG9w5IMmqtJV+0pMG1
Y5oYB/Q9rroKa1JvtTpXmL7XloVq00snpWrQ+yTfhji4xo/AI+aNnTWH7XX25K//
thygRqj+OAzGSmOuM/BLnXQP4dPlpbX0T9rywpSzpdngwhVUI9R+T6s8zxgQa3Rf
36iaVbMF7GclKdb5aaVp5g6fGv9aGFkMlz7JlETKuguKpoiK3L2CAVYqqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIOSjTBQ/oYYI86jEP2XS0pg3VlwMB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvZzVLTk1GRC1oaGdqenFNUV9aZExTbURkV1hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNbMA0G
CSqGSIb3DQEBCwUAA4IBAQBfA0vuv00phh1hGIX4rTSNfOqSi+NbjDCANBCBOUcI
y9RwIfWy/hFR2X8NInms+yvMAuHf0iN0w/jjbIcoRj1cdVW/h9NgDdC7nQI8+s/t
rL/dKB3cNTAEgJ0Z9RmFvVPmsq13M1FqSHXdGrubZfO2Bv8qG+YLV5DcfYDCglCH
ELlXcxLQ33hxhRRb4sq6ranicpfDelCLUwIzQTmfnDP6stbS172F1B9IqJXVFr7l
ZIvy7SJUbdLkz3nN1H3UWuFh4mJaegyibO1QbE0D+AKFwEN1OB2lLdiqU0ZmEuyH
7lwYEIr0ChUNHWxDYsktZwj4vDY+R9gNDNOwjF7hWZQc
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:42 2024 by rpki-client on console-ams.rpki-client.org