Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9REdd96Oz6Uwkd2Rglic2erAuZg.roa
File:                     9REdd96Oz6Uwkd2Rglic2erAuZg.roa (raw, json)
Hash identifier:          UUnIK3tbbkTy/Fzi/gmW1W5yFNmRGfAJXlDZBGQwMqA=
Subject key identifier:   F5:11:1D:77:DE:8E:CF:A5:30:91:DD:91:82:58:9C:D9:EA:C0:B9:98
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0186989E758B3CD0D7914333C7FFEC600FDF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9REdd96Oz6Uwkd2Rglic2erAuZg.roa
Signing time:             Tue 28 Feb 2023 15:22:46 +0000
ROA not before:           Tue 28 Feb 2023 15:22:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135752
IP address blocks:        185.47.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 08:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:98:9e:75:8b:3c:d0:d7:91:43:33:c7:ff:ec:60:0f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Feb 28 15:22:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5111d77de8ecfa53091dd9182589cd9eac0b998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:fc:ed:6c:0a:d2:78:66:9e:e4:11:97:34:
                    c5:3e:2b:d0:c5:3b:e2:de:b8:6c:4e:9e:42:81:0f:
                    ce:09:e4:61:a3:88:1e:77:3e:7b:47:e9:eb:9b:0b:
                    ac:81:5b:d0:f8:97:d9:d7:9c:08:76:22:11:c1:c7:
                    f1:de:6a:e8:d8:f7:6a:61:f7:b1:e9:f4:03:ed:fc:
                    83:f2:82:32:c5:80:e5:5f:c3:ad:49:c3:30:b1:17:
                    f1:66:07:d0:86:fe:98:c3:ed:fa:68:e9:4e:ad:d7:
                    ad:aa:97:f7:06:f3:53:dd:60:28:7a:29:83:5b:ef:
                    47:93:36:a9:8b:b6:88:40:cd:05:cf:30:6e:29:26:
                    b9:86:69:b9:5c:d6:0b:dc:aa:71:5f:07:a1:31:07:
                    af:f7:26:95:66:42:f1:c2:dd:c0:07:8b:1e:a0:b2:
                    fc:08:9b:67:56:27:ae:7e:9e:9b:93:aa:3d:e7:ff:
                    a7:2d:65:7c:0e:5f:65:84:f1:8d:32:13:ec:f9:d2:
                    4f:db:97:5e:b7:2f:1d:e3:29:24:1a:22:64:01:9c:
                    49:95:6c:94:ee:49:6d:ac:59:2a:0d:b0:11:4a:82:
                    c1:93:f0:e9:6a:75:83:dd:84:6d:3c:92:e3:a0:96:
                    96:6a:34:8b:bd:2b:da:e6:d7:65:67:4f:21:3c:ea:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:11:1D:77:DE:8E:CF:A5:30:91:DD:91:82:58:9C:D9:EA:C0:B9:98
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9REdd96Oz6Uwkd2Rglic2erAuZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.47.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:25:af:25:b1:13:17:dd:8e:64:b7:ff:91:34:83:f5:b3:20:
         8a:c0:df:91:b7:a7:52:c7:dd:73:dd:43:8a:f9:ce:eb:b7:ae:
         dc:b4:9d:d7:ee:3d:6a:9a:7c:38:a2:ba:40:07:96:e6:3a:06:
         03:28:79:37:ac:64:32:5a:a1:f2:51:31:7d:bf:a0:40:26:a2:
         20:4f:b0:fe:fa:48:e2:64:32:a4:13:8b:d8:06:9f:9e:d5:b1:
         7b:45:15:74:2a:df:29:77:1a:35:f4:02:f8:ca:73:f3:55:c0:
         be:a9:8b:7b:06:e9:1f:8a:4b:32:dd:4b:dc:86:28:63:ce:f9:
         d6:bb:bb:cd:b6:f7:d9:7b:90:5e:f6:5b:13:3c:f5:a7:1d:a1:
         20:5f:c4:af:4a:8a:94:8b:86:a5:42:d0:72:6a:ed:05:19:eb:
         7b:0b:c2:2b:13:a9:ef:8f:af:cb:01:5b:0d:f0:62:33:bc:80:
         fc:d2:0a:a5:29:60:5a:cf:8f:82:57:76:d6:0d:ea:8f:75:b1:
         b4:0f:9f:ff:6d:a9:93:bb:d2:56:28:f6:29:c1:3f:a6:b3:59:
         ad:69:54:0d:95:c0:40:82:ea:4c:d2:fd:d0:31:8b:2c:c5:db:
         41:7f:4e:29:c0:2a:35:ee:a0:6f:26:98:78:36:96:c0:84:93:
         63:06:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org