Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/PV9591VEhlZdPai6X8YL1QZ61EM.roa
File:                     PV9591VEhlZdPai6X8YL1QZ61EM.roa (raw, json)
Hash identifier:          woF1gMPH1jAGjhPqqoklDUTHdEBYv6WBCsVfFr6IhSY=
Subject key identifier:   3D:5F:79:F7:55:44:86:56:5D:3D:A8:BA:5F:C6:0B:D5:06:7A:D4:43
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       01880ABD79393DB5A6F0124455EE246BADFD
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/PV9591VEhlZdPai6X8YL1QZ61EM.roa
Signing time:             Thu 11 May 2023 12:16:09 +0000
ROA not before:           Thu 11 May 2023 12:16:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49367
IP address blocks:        94.198.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 May 2023 16:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0a:bd:79:39:3d:b5:a6:f0:12:44:55:ee:24:6b:ad:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: May 11 12:16:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d5f79f7554486565d3da8ba5fc60bd5067ad443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:92:a2:b9:f0:08:aa:7e:2d:ae:9a:36:e5:
                    b1:91:ae:42:91:60:44:27:fe:7c:08:a7:03:ce:d9:
                    79:48:af:26:e3:52:2a:7d:2a:8b:96:ae:4e:f0:7e:
                    fe:5b:ec:62:a3:1b:e5:e4:51:37:b6:29:4c:35:9b:
                    f6:09:77:ae:3e:fa:c5:31:e4:43:02:eb:d4:c4:dc:
                    ac:72:de:1d:2c:1e:a6:c2:78:e2:93:88:b5:03:d3:
                    8a:d8:f4:89:76:89:b8:be:15:7d:4e:aa:b5:eb:4d:
                    32:3d:74:8b:2c:ad:4b:af:74:96:99:1f:e1:77:a6:
                    39:92:a4:d7:52:3e:98:3d:af:c3:b8:5e:8b:9b:53:
                    a2:da:4c:e6:95:a2:c9:0c:9c:b0:7c:56:3a:ad:d1:
                    33:36:87:ff:8b:4d:e1:a9:f5:87:5a:e8:01:87:1f:
                    38:f7:99:84:13:90:62:58:ea:de:5d:58:b1:19:8e:
                    ae:10:c8:05:3d:21:7e:2a:81:81:02:59:4a:b3:5c:
                    1d:9b:64:4d:82:49:5f:3e:02:19:96:94:e8:1e:2e:
                    7e:9a:c3:fe:7a:77:af:80:b9:fa:31:a7:14:cb:5e:
                    9f:96:cc:63:5f:c5:66:b0:02:4d:7b:5c:17:8f:09:
                    ac:f9:57:02:2d:88:a1:ec:30:bd:ca:d9:2f:a1:a9:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5F:79:F7:55:44:86:56:5D:3D:A8:BA:5F:C6:0B:D5:06:7A:D4:43
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/PV9591VEhlZdPai6X8YL1QZ61EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.198.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b7:9f:07:cb:ad:49:b7:18:74:79:a3:f3:fa:b1:3d:9e:77:
         39:90:75:b9:a5:14:96:19:37:8a:00:23:6e:74:74:c3:4a:f6:
         b6:70:03:60:7e:00:6c:27:b7:d9:3d:28:a2:af:a0:96:1c:bc:
         72:71:01:fc:e7:83:9c:9d:bc:58:b3:cf:02:ab:27:ce:9f:ef:
         64:0c:83:3b:b6:8c:39:32:74:f9:0b:c5:04:37:be:d1:43:19:
         e9:25:78:01:13:1b:bc:41:78:ff:36:9b:6b:4a:e6:02:95:1b:
         e9:92:f5:8c:f1:7c:c7:d0:d1:87:bd:42:2e:50:b7:c1:c6:4c:
         b8:6b:1a:fd:80:7c:0a:83:45:e1:c1:d5:41:f4:c2:aa:3e:e9:
         50:81:a4:42:46:6b:60:7e:8e:26:fa:2c:64:ac:49:5b:54:85:
         68:03:99:07:0d:1b:18:dc:a6:57:0d:80:2d:7e:d9:4b:29:5c:
         2e:84:39:24:1b:f1:7b:81:d1:88:30:e7:91:7d:75:d2:b9:97:
         bb:d4:be:44:64:c9:81:c6:b6:1c:81:af:74:21:97:63:d3:20:
         cb:f3:33:14:67:7e:72:84:f6:50:ea:bf:5d:25:05:8c:38:67:
         c3:12:04:bc:aa:d6:8e:ce:95:ba:36:a4:80:8d:55:ce:91:59:
         58:ce:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org