Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/lhI3quMYcX-0VuN9RWptOOuqy4k.roa
File:                     lhI3quMYcX-0VuN9RWptOOuqy4k.roa (raw, json)
Hash identifier:          S293Y/uOccPafvWTf0fjJb28oC6v1s+qSNCJPdy7hOk=
Subject key identifier:   96:12:37:AA:E3:18:71:7F:B4:56:E3:7D:45:6A:6D:38:EB:AA:CB:89
Certificate issuer:       /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial:       018CC3B68B738AE5E728112823166FFE3FDD
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/lhI3quMYcX-0VuN9RWptOOuqy4k.roa
Signing time:             Mon 01 Jan 2024 06:29:29 +0000
ROA not before:           Mon 01 Jan 2024 06:29:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51162
IP address blocks:        91.216.178.0/24 maxlen: 24
                          91.103.107.0/24 maxlen: 24
                          91.103.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 10:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:8b:73:8a:e5:e7:28:11:28:23:16:6f:fe:3f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
        Validity
            Not Before: Jan  1 06:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=961237aae318717fb456e37d456a6d38ebaacb89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:37:ff:7b:c4:3c:33:41:10:b9:fc:0c:da:
                    06:b9:56:3d:a9:9b:7a:91:73:7f:38:5f:ca:64:41:
                    b2:49:31:86:a9:a2:0b:05:38:55:69:a6:4e:c9:3a:
                    5f:07:16:69:ac:fd:35:06:86:c6:c1:cd:b7:6a:22:
                    72:a4:6b:3a:7c:f7:97:48:c7:8d:7b:f5:2b:7a:61:
                    1d:f4:b5:ef:00:2d:62:89:ce:9f:83:79:8f:45:e3:
                    74:0a:2e:0c:5f:0d:62:5f:7f:cf:46:3a:b7:50:4f:
                    04:e6:ff:cc:94:45:97:a8:5e:cd:68:e7:ee:c5:ec:
                    77:4e:9c:bc:9e:34:32:b6:13:fc:28:9a:b0:e3:b3:
                    5e:69:61:14:c8:09:94:cf:71:ba:45:c6:b1:8e:9d:
                    c0:90:fa:9d:3a:40:68:05:c2:82:39:65:61:4f:32:
                    57:4c:c5:d5:2d:85:30:2f:2a:35:61:f0:1d:ef:7a:
                    a2:7d:b7:69:9f:8f:e4:ae:34:a9:88:01:bc:35:04:
                    7b:47:aa:5f:dc:b1:24:aa:ba:e4:af:67:fd:74:de:
                    1e:05:7e:d7:99:2d:d3:6c:40:0b:91:95:b9:5e:61:
                    29:46:9d:32:83:ef:a2:6e:db:22:b6:fc:bb:b6:41:
                    79:22:54:33:e7:87:2c:af:ea:4d:36:15:14:83:5f:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:12:37:AA:E3:18:71:7F:B4:56:E3:7D:45:6A:6D:38:EB:AA:CB:89
            X509v3 Authority Key Identifier:
                keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/lhI3quMYcX-0VuN9RWptOOuqy4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.106.0/23
                  91.216.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:cb:ff:c7:4e:f4:b2:64:39:d0:e2:91:fd:c9:8c:65:5a:c9:
         97:75:74:be:4f:81:7e:68:18:cf:f4:a8:85:27:d8:93:cc:f2:
         89:e1:28:83:45:8e:4f:a1:b3:4a:4e:d7:03:43:8d:ac:b2:7b:
         5d:1e:47:f1:0d:6c:8e:40:ca:59:0f:4f:85:b4:0c:7e:d7:49:
         b8:74:25:76:50:eb:74:d8:8c:df:89:e8:13:11:42:72:7d:4a:
         df:80:70:64:17:dd:3e:fc:07:a0:f4:e1:3d:c1:4f:6d:12:3e:
         d0:fc:6f:4a:ed:a2:e0:ba:b5:91:c4:70:07:64:31:fc:50:4a:
         a0:a9:6f:db:9c:00:fa:cb:cd:ad:7b:93:ab:96:56:5e:b9:61:
         11:ed:35:9a:04:68:7c:b6:14:92:d1:ee:d8:88:6d:58:39:5a:
         d1:19:b1:66:1f:93:41:59:02:e9:c8:b7:f7:e2:b7:a8:ad:db:
         50:a5:41:b6:47:b2:fc:fb:c4:66:0f:63:a1:af:ca:24:29:70:
         4e:d1:36:cd:99:7a:7b:4d:04:57:d3:e9:47:c7:ed:10:07:27:
         04:c9:83:6a:82:cd:5e:c3:44:6e:94:77:d9:cb:40:50:4d:11:
         22:d1:dd:68:f7:85:b5:a5:d6:48:48:22:23:89:0a:a1:75:e0:
         c5:c2:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:53 2024 by rpki-client on console-fra.rpki-client.org