Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6eKjh5J_L0LQWeAaHkXcR9lsv78.roa
File:                     6eKjh5J_L0LQWeAaHkXcR9lsv78.roa (raw, json)
Hash identifier:          gWLipCmBYEjS21vjcnRgB50gAdyu8jSYZn1U1hDvJug=
Subject key identifier:   E9:E2:A3:87:92:7F:2F:42:D0:59:E0:1A:1E:45:DC:47:D9:6C:BF:BF
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       0186E6CB8BDDD9CEF4DAD8067CA417188779
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6eKjh5J_L0LQWeAaHkXcR9lsv78.roa
Signing time:             Wed 15 Mar 2023 19:42:24 +0000
ROA not before:           Wed 15 Mar 2023 19:42:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26548
IP address blocks:        91.229.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e6:cb:8b:dd:d9:ce:f4:da:d8:06:7c:a4:17:18:87:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Mar 15 19:42:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9e2a387927f2f42d059e01a1e45dc47d96cbfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:87:b5:ea:01:17:7c:d3:3b:17:82:9f:bc:
                    4e:5b:68:7e:2b:b0:64:68:a6:87:68:21:fa:48:8e:
                    1c:ba:3d:19:8f:bf:36:4b:9f:ba:6d:da:e1:5d:d8:
                    6b:ce:3c:d5:d6:cf:d1:8b:c8:ba:ab:1b:c9:4c:0f:
                    1b:17:d8:b8:6c:78:65:23:c5:86:27:82:78:d6:6a:
                    9b:a4:a6:f9:70:c8:48:3f:8a:a9:d3:34:e9:79:88:
                    b3:27:55:f3:80:79:1c:02:9c:21:bb:25:89:3c:2d:
                    6e:da:c6:9f:9b:89:87:b9:39:1c:72:2e:81:7c:8e:
                    f4:f9:3c:60:2a:8a:cc:72:39:5f:45:14:6c:c0:42:
                    4c:44:7f:82:a3:3e:a4:36:af:5a:72:e3:6c:a7:7d:
                    9d:13:ff:9f:3d:39:03:4c:3f:b4:c6:3c:19:4c:71:
                    fb:d9:42:42:15:ad:ba:f2:4d:75:df:11:5f:5e:a9:
                    e7:82:3e:84:67:89:b1:b8:05:17:99:cf:eb:2e:d2:
                    d6:3a:5d:d1:00:9f:06:37:9c:3c:a3:a4:20:f2:c5:
                    89:f0:55:97:70:0f:fe:42:dc:3e:26:16:06:e7:64:
                    fd:e0:87:70:54:19:81:77:09:ed:49:30:a2:ea:e2:
                    f8:e1:3b:66:3b:a2:d7:d5:38:53:bd:54:21:7b:28:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:A3:87:92:7F:2F:42:D0:59:E0:1A:1E:45:DC:47:D9:6C:BF:BF
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6eKjh5J_L0LQWeAaHkXcR9lsv78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:67:93:00:bc:65:e4:66:42:59:45:61:7e:20:52:76:79:5d:
         a6:6c:34:d6:a3:22:ec:69:e9:94:4a:25:77:63:49:f0:6b:6a:
         46:fa:3a:70:62:66:14:31:04:ab:37:65:a5:89:3a:eb:ed:15:
         10:3d:98:17:d7:95:6c:c6:00:4d:10:53:a3:b3:a0:95:d7:03:
         be:01:35:e7:3f:89:0d:7b:fd:49:db:ae:88:69:78:96:f4:a8:
         04:5c:58:cd:37:d9:9c:41:a3:ff:81:c3:9f:32:c7:9b:6f:c5:
         4e:96:d7:0b:52:9f:6c:c1:fb:08:ec:c1:f0:3a:cf:8a:f4:d6:
         20:36:61:6b:2e:5f:63:0f:36:1b:ee:65:89:aa:81:04:dc:ff:
         0d:c8:1c:f1:4c:d4:dd:09:89:aa:b3:a1:fb:5c:5e:a2:9f:97:
         9a:cb:65:7c:38:0d:21:aa:89:de:02:ec:1a:93:cc:9a:56:31:
         6c:03:00:c5:28:ca:80:f3:e6:ad:d7:af:52:92:08:3b:0a:26:
         8c:6b:4f:0a:6c:1e:8d:86:19:bf:4a:b9:ea:6b:3e:96:8a:06:
         f8:9b:27:a0:d6:60:1a:0e:56:2d:35:98:3a:da:b0:84:69:4d:
         41:c6:09:4e:1a:22:ae:b5:aa:4a:7a:1e:d5:5e:87:6b:13:2c:
         17:87:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org