Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5oqPLdWmbGZ9MNJEyLlb14mX9LY.roa
File:                     5oqPLdWmbGZ9MNJEyLlb14mX9LY.roa (raw, json)
Hash identifier:          8Ve1dFqBfhe5J4CQP2yba+p0vNLinI6vjFNVk6AGj78=
Subject key identifier:   E6:8A:8F:2D:D5:A6:6C:66:7D:30:D2:44:C8:B9:5B:D7:89:97:F4:B6
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       01894481027C310C49AC9A20579AD8D0F4E8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5oqPLdWmbGZ9MNJEyLlb14mX9LY.roa
Signing time:             Tue 11 Jul 2023 10:30:52 +0000
ROA not before:           Tue 11 Jul 2023 10:30:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59878
IP address blocks:        91.132.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:44:81:02:7c:31:0c:49:ac:9a:20:57:9a:d8:d0:f4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jul 11 10:30:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e68a8f2dd5a66c667d30d244c8b95bd78997f4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:2f:90:b9:53:16:be:bb:fe:f6:2f:19:11:
                    20:d7:bc:89:f1:89:06:07:25:87:ea:f9:ca:42:0e:
                    4b:a2:92:01:96:a1:05:96:f3:f6:c0:ae:d8:c7:2e:
                    08:8d:21:ba:50:75:9f:d9:dd:2e:0f:88:7f:92:65:
                    a8:6a:3c:d8:50:24:0d:4e:7e:26:02:ca:ed:f5:ac:
                    24:1b:da:f6:2e:47:39:4a:0c:02:93:57:3e:59:89:
                    f5:f7:d7:6a:a6:58:03:80:35:82:15:c1:b2:56:36:
                    d5:73:2c:c4:6b:4f:49:d3:12:21:05:fc:13:78:a9:
                    70:d5:1f:2b:6a:86:1f:dd:27:d0:91:fe:a7:1b:e6:
                    16:fd:ea:57:b5:10:24:35:75:eb:74:9e:db:11:64:
                    f7:57:3c:1a:64:b6:c8:92:72:95:70:22:0b:a6:21:
                    42:99:f4:3d:31:0f:e6:0d:8d:b0:06:7c:de:fa:c8:
                    fa:b9:08:12:cd:3f:05:db:72:d4:c9:c8:79:11:e0:
                    86:67:b1:4a:17:57:3f:2e:8d:8f:a3:49:68:ea:dd:
                    a8:3f:54:c5:6b:3c:4d:4f:04:cc:d3:54:41:78:7a:
                    ac:59:ef:b5:d3:41:36:ec:83:9e:86:f2:50:a5:e3:
                    79:5b:38:f7:bd:fd:0d:1a:b6:69:8c:46:65:9b:86:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:8F:2D:D5:A6:6C:66:7D:30:D2:44:C8:B9:5B:D7:89:97:F4:B6
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5oqPLdWmbGZ9MNJEyLlb14mX9LY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.132.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:15:ca:73:9e:06:83:37:ba:01:43:92:fb:c9:dc:12:fd:a4:
         d8:2c:1f:ef:4e:07:54:c1:85:54:bb:da:5f:a0:0b:e3:ff:3b:
         40:53:e0:c8:36:e8:c3:f7:0b:53:8b:d7:41:db:9c:17:9c:ae:
         d3:60:0c:35:ec:eb:0c:c0:6e:7c:79:36:2f:e1:15:1a:89:80:
         85:22:7d:0b:3d:78:98:78:52:e7:2d:e6:63:81:3c:93:25:f0:
         64:11:5c:28:6c:d7:a2:10:c5:f8:57:81:ee:07:0b:52:b1:09:
         7b:ab:0e:b5:46:5c:48:9a:5c:69:64:c2:4c:40:a0:72:21:a8:
         06:6a:8b:34:88:74:99:8c:3c:8a:df:1b:8b:6b:ca:86:50:59:
         dd:ed:e0:a0:c2:c5:aa:34:0c:22:e8:36:b3:56:11:58:bf:09:
         ce:3b:a9:62:06:7d:b6:3b:5f:84:bd:cb:3d:21:54:30:44:36:
         d8:b1:b3:87:b9:57:2f:7e:20:13:6e:02:f9:13:1f:82:4d:62:
         34:6a:96:b4:72:ef:65:3c:4e:f1:96:88:7d:d1:d5:a5:6c:35:
         bb:7e:14:26:46:36:1d:36:2a:e5:01:22:1b:8f:56:1d:ff:19:
         f0:6e:d1:6d:be:f5:bb:75:1e:fc:5b:9c:52:07:70:31:00:a4:
         93:9d:f1:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlEgQJ8MQxJrJogV5rY0PToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNzExMTAzMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjhhOGYyZGQ1YTY2YzY2N2QzMGQyNDRjOGI5NWJkNzg5OTdmNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9AvkLlTFr67/vYvGREg17yJ8YkG
ByWH6vnKQg5LopIBlqEFlvP2wK7Yxy4IjSG6UHWf2d0uD4h/kmWoajzYUCQNTn4m
Asrt9awkG9r2Lkc5SgwCk1c+WYn199dqplgDgDWCFcGyVjbVcyzEa09J0xIhBfwT
eKlw1R8raoYf3SfQkf6nG+YW/epXtRAkNXXrdJ7bEWT3VzwaZLbIknKVcCILpiFC
mfQ9MQ/mDY2wBnze+sj6uQgSzT8F23LUych5EeCGZ7FKF1c/Lo2Po0lo6t2oP1TF
azxNTwTM01RBeHqsWe+100E27IOehvJQpeN5Wzj3vf0NGrZpjEZlm4Z6IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaKjy3VpmxmfTDSRMi5W9eJl/S2MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNW9xUExkV21iR1o5TU5KRXlMbGIxNG1YOUxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4QwMA0G
CSqGSIb3DQEBCwUAA4IBAQAMFcpzngaDN7oBQ5L7ydwS/aTYLB/vTgdUwYVUu9pf
oAvj/ztAU+DINujD9wtTi9dB25wXnK7TYAw17OsMwG58eTYv4RUaiYCFIn0LPXiY
eFLnLeZjgTyTJfBkEVwobNeiEMX4V4HuBwtSsQl7qw61RlxImlxpZMJMQKByIagG
aos0iHSZjDyK3xuLa8qGUFnd7eCgwsWqNAwi6DazVhFYvwnOO6liBn22O1+Evcs9
IVQwRDbYsbOHuVcvfiATbgL5Ex+CTWI0apa0cu9lPE7xloh90dWlbDW7fhQmRjYd
NirlASIbj1Yd/xnwbtFtvvW7dR78W5xSB3AxAKSTnfHR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org