Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/M598rs4wisVbVFBaTA0j7aZpQqU.roa
File:                     M598rs4wisVbVFBaTA0j7aZpQqU.roa (raw, json)
Hash identifier:          pjwEXEFdPKrrGZNbwNU1H3PC7PSfscJZJ3wGPNshTpw=
Subject key identifier:   33:9F:7C:AE:CE:30:8A:C5:5B:54:50:5A:4C:0D:23:ED:A6:69:42:A5
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       01887B6CDD30155B199E180D628F6F3ED555
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/M598rs4wisVbVFBaTA0j7aZpQqU.roa
Signing time:             Fri 02 Jun 2023 09:25:12 +0000
ROA not before:           Fri 02 Jun 2023 09:25:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49121
IP address blocks:        91.191.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:6c:dd:30:15:5b:19:9e:18:0d:62:8f:6f:3e:d5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jun  2 09:25:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=339f7caece308ac55b54505a4c0d23eda66942a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7e:35:c6:1c:1f:72:c1:ca:17:3b:f0:a6:3a:
                    65:68:0d:04:70:37:5f:b6:b0:6d:39:ec:bc:ef:73:
                    c1:bc:59:3d:12:bf:3e:bb:91:7e:2f:ae:68:e1:ca:
                    a1:d0:55:24:f8:71:66:c5:62:24:9b:39:ed:4f:b9:
                    ad:32:74:58:9a:77:fe:34:d5:91:5a:9d:84:60:b7:
                    d8:df:fe:e3:c5:51:66:5f:a0:7d:6a:a4:9c:89:91:
                    f6:d8:07:78:c8:b8:cf:11:a4:3a:0e:18:dd:77:2b:
                    bf:38:aa:31:8b:cd:f7:fb:4f:28:3d:69:27:7c:63:
                    be:90:8b:fe:b5:f4:43:4c:ae:06:7a:66:ff:08:e8:
                    61:89:e0:35:ca:63:ca:2d:e2:27:09:20:23:26:d6:
                    7c:bd:2e:36:14:0f:75:29:b1:d5:26:db:66:f5:8c:
                    46:b3:08:f9:c0:61:61:d2:0e:cb:c3:2f:54:1f:ca:
                    0a:58:a4:43:05:96:59:11:d6:23:fb:c2:94:12:a6:
                    27:34:80:a1:ce:5d:af:db:f1:2f:ac:38:fa:7e:69:
                    77:e8:32:98:3e:ad:dc:37:12:6e:69:8e:81:ff:af:
                    ad:d4:d8:ed:44:66:55:78:49:61:f3:5d:fb:0f:66:
                    e3:c2:fd:08:37:db:08:b7:3d:9a:d6:58:e5:b0:e5:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:7C:AE:CE:30:8A:C5:5B:54:50:5A:4C:0D:23:ED:A6:69:42:A5
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/M598rs4wisVbVFBaTA0j7aZpQqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:11:98:54:04:54:17:d7:20:8b:26:d9:2e:56:02:52:7a:
         f1:8a:92:3b:90:a3:36:13:b8:dc:27:f9:55:d7:6e:79:69:01:
         7d:f7:23:dd:6c:dc:a5:e2:1d:55:64:45:d8:11:8f:a1:5d:c7:
         29:67:9c:e7:43:16:90:44:bc:94:b6:09:14:32:e7:e7:b6:a9:
         d7:18:94:6b:bb:a3:63:aa:20:c2:42:7d:63:e2:0f:2c:bb:63:
         f1:ce:6c:39:f7:97:ee:bd:67:4c:04:44:b1:6a:e3:af:95:03:
         27:3a:af:ca:a8:e9:e2:cb:a3:10:d9:93:4c:9b:a1:b9:46:60:
         c2:28:aa:3f:c6:b2:92:49:fd:df:6e:b8:da:35:55:e9:25:35:
         49:75:90:42:5a:f7:5a:d6:4c:e5:66:48:e5:66:eb:28:74:0b:
         d3:b1:df:2b:fa:18:04:5d:a7:d9:e3:66:21:fa:e1:d7:ef:14:
         59:24:90:9b:a8:0f:60:36:dc:4d:3a:c8:23:d6:5e:85:dc:8b:
         43:98:cb:7d:f1:ae:5e:b8:da:16:90:c3:90:7d:e9:7f:32:2a:
         65:c0:44:dc:88:4e:2d:0e:92:84:a7:28:f7:e5:b9:0f:02:4b:
         16:0b:e1:87:9c:1e:ed:70:ed:67:54:1c:35:cc:57:28:05:60:
         a5:1e:79:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh7bN0wFVsZnhgNYo9vPtVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwNjAyMDkyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzlmN2NhZWNlMzA4YWM1NWI1NDUwNWE0YzBkMjNlZGE2Njk0MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin41xhwfcsHKFzvwpjplaA0EcDdf
trBtOey873PBvFk9Er8+u5F+L65o4cqh0FUk+HFmxWIkmzntT7mtMnRYmnf+NNWR
Wp2EYLfY3/7jxVFmX6B9aqSciZH22Ad4yLjPEaQ6Dhjddyu/OKoxi833+08oPWkn
fGO+kIv+tfRDTK4Gemb/COhhieA1ymPKLeInCSAjJtZ8vS42FA91KbHVJttm9YxG
swj5wGFh0g7Lwy9UH8oKWKRDBZZZEdYj+8KUEqYnNIChzl2v2/EvrDj6fml36DKY
Pq3cNxJuaY6B/6+t1NjtRGZVeElh8137D2bjwv0IN9sItz2a1ljlsOV0YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOffK7OMIrFW1RQWkwNI+2maUKlMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvTTU5OHJzNHdpc1ZiVkZCYVRBMGo3YVpwUXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7+5MA0G
CSqGSIb3DQEBCwUAA4IBAQBF2BGYVARUF9cgiybZLlYCUnrxipI7kKM2E7jcJ/lV
1255aQF99yPdbNyl4h1VZEXYEY+hXccpZ5znQxaQRLyUtgkUMufntqnXGJRru6Nj
qiDCQn1j4g8su2Pxzmw595fuvWdMBESxauOvlQMnOq/KqOniy6MQ2ZNMm6G5RmDC
KKo/xrKSSf3fbrjaNVXpJTVJdZBCWvda1kzlZkjlZusodAvTsd8r+hgEXafZ42Yh
+uHX7xRZJJCbqA9gNtxNOsgj1l6F3ItDmMt98a5euNoWkMOQfel/MiplwETciE4t
DpKEpyj35bkPAksWC+GHnB7tcO1nVBw1zFcoBWClHnkD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org