Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/sphGY1SfWAAxISMnjF8rTWqUEXI.roa
File:                     sphGY1SfWAAxISMnjF8rTWqUEXI.roa (raw, json)
Hash identifier:          o8Zd24sfW+nneMrvttKgcQoK0Y8/Tg7gi6Tgy160hD4=
Subject key identifier:   B2:98:46:63:54:9F:58:00:31:21:23:27:8C:5F:2B:4D:6A:94:11:72
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       0188679EDEA639961345E0DED16B86880998
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/sphGY1SfWAAxISMnjF8rTWqUEXI.roa
Signing time:             Mon 29 May 2023 13:07:24 +0000
ROA not before:           Mon 29 May 2023 13:07:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19318
IP address blocks:        91.199.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Jun 2023 13:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:67:9e:de:a6:39:96:13:45:e0:de:d1:6b:86:88:09:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: May 29 13:07:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2984663549f5800312123278c5f2b4d6a941172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:cf:38:8c:f9:54:b2:ad:82:bf:ee:1f:c4:
                    08:01:9a:be:f2:33:97:c9:e8:09:b8:a9:d3:e4:8d:
                    f5:10:8d:ca:4c:91:41:81:69:fd:4a:4b:b1:21:c6:
                    f5:f9:5c:fe:fb:e7:fb:b0:c2:84:08:0b:61:7f:5a:
                    9b:67:ee:d5:b8:1e:36:99:23:3f:00:43:c4:7d:61:
                    c1:d3:1b:b6:71:c9:de:67:3c:35:a8:47:3f:3a:34:
                    dc:23:81:84:a2:b5:c9:55:fd:65:8a:ce:d3:3d:5f:
                    b5:8d:0f:2d:26:fa:31:64:e1:61:4a:eb:b4:dc:45:
                    bf:8f:a0:4b:d7:18:69:b3:e3:03:d2:b4:18:ea:b7:
                    cd:dc:ec:02:34:f5:99:05:8d:f2:44:d4:17:7c:5d:
                    c0:c8:19:ac:1d:33:57:6a:e4:a5:d0:d1:2f:64:ea:
                    93:0e:d3:7f:0f:be:fd:95:e0:03:eb:f2:93:44:47:
                    f0:a1:67:f5:71:ef:db:21:01:30:64:08:c6:4a:1b:
                    e5:68:f1:47:2d:8e:22:f4:4b:23:15:9a:bc:8d:56:
                    7a:9f:95:2d:ee:98:df:41:8f:16:db:f1:59:80:01:
                    db:88:9b:80:d9:97:bd:88:59:ff:3f:a7:6b:31:8e:
                    88:5f:89:74:92:03:e9:4f:30:b1:ef:3b:25:ed:2c:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:98:46:63:54:9F:58:00:31:21:23:27:8C:5F:2B:4D:6A:94:11:72
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/sphGY1SfWAAxISMnjF8rTWqUEXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:73:e8:5a:76:1f:e4:18:08:1b:2e:df:0b:5f:bc:28:e8:
         e2:7c:a5:cc:6f:2c:85:42:5c:61:9f:9b:32:18:b8:85:22:d9:
         cd:88:70:38:15:c0:11:51:fb:59:c5:05:4c:f2:a6:a2:ea:9c:
         2c:25:3c:1e:b9:f6:50:8d:02:eb:04:a8:63:18:ec:f8:e8:f6:
         d9:25:d4:9e:7d:18:55:8c:d1:42:b0:34:f7:a6:dc:75:c3:53:
         a6:0d:80:39:3a:3b:d8:fd:b9:ab:a0:2a:c2:63:a7:f8:25:01:
         04:5d:d1:5a:c3:53:df:a9:65:68:4e:ac:2e:4f:b1:57:0c:86:
         66:f0:bd:0f:76:8d:eb:fb:f1:fc:50:65:b4:76:3e:1f:f7:29:
         e8:e9:ca:76:c3:cd:c2:ef:75:47:45:11:f5:c2:ed:4b:44:86:
         08:f4:a4:ff:9c:9d:75:8f:57:cd:af:99:37:32:d6:8b:7a:ce:
         b5:51:79:1b:47:8b:72:11:0d:00:24:76:0b:43:70:d9:83:d7:
         f6:bb:20:f7:ff:d4:19:fe:fb:23:08:12:07:90:9b:0d:d2:a0:
         86:cb:96:1d:ae:f8:75:de:e5:5c:30:6a:20:39:dc:7f:e2:f4:
         ba:b6:fd:00:64:cb:dc:c3:62:31:58:de:67:61:55:fc:9c:54:
         34:ea:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org