Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dWBBwlAijsBTn3uCLBV9mfWzceo.roa
File:                     dWBBwlAijsBTn3uCLBV9mfWzceo.roa (raw, json)
Hash identifier:          9GyCxiRvYBniI4o3RxhzEkQp3teyJMeycxcgGcQcGHY=
Subject key identifier:   75:60:41:C2:50:22:8E:C0:53:9F:7B:82:2C:15:7D:99:F5:B3:71:EA
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       0189833AF78724E1F54F5D277D46C1A26871
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dWBBwlAijsBTn3uCLBV9mfWzceo.roa
Signing time:             Sun 23 Jul 2023 14:50:27 +0000
ROA not before:           Sun 23 Jul 2023 14:50:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57271
IP address blocks:        185.238.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:83:3a:f7:87:24:e1:f5:4f:5d:27:7d:46:c1:a2:68:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Jul 23 14:50:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=756041c250228ec0539f7b822c157d99f5b371ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:ec:cd:b2:36:a4:cb:e4:b3:d6:d6:53:d2:
                    66:1b:c9:18:50:42:28:bc:c0:72:1a:8c:56:f7:f8:
                    9f:e7:6d:44:17:45:94:43:7d:50:21:fd:c9:e4:48:
                    2f:2d:aa:7d:bb:8c:60:05:62:be:8f:14:bc:70:56:
                    c7:ad:68:3a:13:d9:c5:ef:de:d8:84:7b:24:a6:0f:
                    43:6f:19:8e:65:8a:19:85:68:fd:48:e6:af:6a:8b:
                    ff:eb:97:0a:1e:ca:52:79:3f:3b:53:4f:3f:77:40:
                    c3:27:ae:51:0a:73:d8:4c:2e:db:a9:28:b8:99:10:
                    f7:a9:ab:82:0e:9d:a8:0c:ce:65:1c:00:aa:71:9e:
                    f0:3e:70:40:fc:ba:21:1e:5b:56:2d:71:f0:61:b9:
                    00:fb:83:4b:5d:3d:3d:cb:2c:be:f6:77:7d:a9:ff:
                    50:58:5b:89:ad:50:00:8e:89:05:89:e9:0f:00:6f:
                    d9:0c:38:78:b8:a0:15:ee:ea:7f:21:ff:eb:53:ba:
                    2d:15:0f:a7:87:e9:64:3e:80:59:c8:77:82:7e:95:
                    cf:6c:46:d6:f3:ab:85:8d:fb:9d:5d:43:63:ae:3e:
                    65:92:44:53:a9:71:8e:7f:61:80:37:7a:c1:1a:d9:
                    56:ba:8e:9e:8b:dc:19:e9:b8:a7:de:b5:21:eb:1d:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:41:C2:50:22:8E:C0:53:9F:7B:82:2C:15:7D:99:F5:B3:71:EA
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dWBBwlAijsBTn3uCLBV9mfWzceo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.238.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:1f:c5:51:0e:f6:e0:83:d9:57:fc:a2:69:9f:3f:65:a5:98:
         27:d5:12:70:a8:9b:2e:5e:44:14:64:ac:71:9e:db:0a:8e:e4:
         b4:a0:2c:c8:d3:12:2d:c7:be:82:b5:5b:62:22:28:f3:ff:85:
         de:bd:76:68:73:17:3f:2c:25:db:ce:ec:62:91:d3:4e:d7:2c:
         53:6e:6c:35:a7:19:33:ab:69:88:82:f9:71:33:58:14:e2:1b:
         db:05:89:fc:d1:aa:54:5d:e8:3d:8a:36:69:e2:87:99:12:7e:
         ee:64:c8:67:1c:b8:52:fd:0e:71:32:27:30:48:92:40:94:51:
         a5:2a:eb:8f:7f:7b:47:fe:52:ba:e9:f7:61:1b:66:3d:58:40:
         bf:21:b2:d6:5a:b6:9c:d3:46:5a:14:65:c0:8d:17:f9:db:f5:
         a5:67:2d:ff:5f:01:f7:f2:b6:3c:8f:2c:b5:83:24:9c:e9:f2:
         54:47:bc:b2:7b:7d:f4:fd:82:5f:e9:35:a0:ff:a2:95:54:59:
         0f:25:ea:fa:48:f0:33:e7:1f:5f:42:7e:07:4d:73:53:21:51:
         c0:10:6b:ba:f3:bb:20:b3:51:30:e6:f1:bd:76:84:96:c8:4b:
         b2:f0:a7:3f:3c:83:0e:d5:ce:5d:b6:e7:1e:dd:6b:4d:cb:15:
         58:d1:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org