Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YsC2hZyRZBJ28NISt1GUl0HYKFA.roa
File:                     YsC2hZyRZBJ28NISt1GUl0HYKFA.roa (raw, json)
Hash identifier:          XkTWmGOyPQYUitAjjkhyreZ66KpGYrEjmT3Lo4+uY88=
Subject key identifier:   62:C0:B6:85:9C:91:64:12:76:F0:D2:12:B7:51:94:97:41:D8:28:50
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       01885123DD0805EDFDD2BD402A0B12A90C32
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YsC2hZyRZBJ28NISt1GUl0HYKFA.roa
Signing time:             Thu 25 May 2023 04:21:24 +0000
ROA not before:           Thu 25 May 2023 04:21:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        91.216.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 20:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:51:23:dd:08:05:ed:fd:d2:bd:40:2a:0b:12:a9:0c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: May 25 04:21:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62c0b6859c91641276f0d212b751949741d82850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:71:f0:e8:12:73:6c:18:b8:33:6e:d7:ca:
                    83:d6:73:13:ef:2c:48:6c:22:62:5a:fd:68:59:e9:
                    98:6e:77:3e:3a:b1:87:95:86:19:ae:b6:6a:18:04:
                    5f:41:fd:1f:e2:30:b2:54:d3:53:e1:45:6b:3c:4c:
                    f6:42:86:d3:81:e3:3c:23:f1:94:b7:71:ca:8e:4c:
                    d2:80:dc:70:fc:42:c7:2b:f6:5e:48:3a:5c:75:27:
                    d9:c1:a5:06:47:b3:96:fc:eb:3f:22:cc:0c:98:7c:
                    5b:f4:98:0e:d4:33:10:d4:16:53:ac:53:6c:fc:6c:
                    ae:37:d9:5d:15:bb:be:8f:7d:f8:17:c4:c7:11:d7:
                    51:76:44:3c:e0:46:81:5b:8c:4b:76:5b:5e:e0:20:
                    d2:92:7d:11:d0:52:8e:9f:2c:b6:29:48:d1:5d:d2:
                    cf:f9:23:f4:48:17:88:bc:1d:57:e5:71:e8:7f:77:
                    d4:1b:27:c6:de:fe:6a:65:fb:12:3e:ea:7f:6c:33:
                    32:88:28:94:bd:a8:2e:e3:88:28:6c:b4:c0:b4:8c:
                    d8:e8:32:1b:42:61:cb:66:0f:de:28:9d:46:09:7a:
                    f1:a6:82:02:a0:6c:e4:8e:b6:a2:6a:2c:7d:d2:37:
                    36:3a:99:c3:70:94:13:1b:c5:a0:a3:72:50:c3:37:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:B6:85:9C:91:64:12:76:F0:D2:12:B7:51:94:97:41:D8:28:50
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YsC2hZyRZBJ28NISt1GUl0HYKFA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:a6:7f:d6:bc:5e:c5:e7:5c:f6:31:67:32:04:5f:b9:83:
         d5:bf:c5:20:97:d4:fc:73:05:22:da:0a:8d:a1:85:2a:3c:30:
         7f:d2:83:4a:21:79:48:60:89:88:7d:21:9e:67:cb:70:06:05:
         57:a1:1e:09:03:b8:91:35:47:e2:2e:04:3c:ba:de:08:e5:2a:
         f1:9c:c7:5f:4c:c0:b6:f5:4b:8a:57:b0:05:c1:d0:f9:d2:5f:
         f9:5d:4c:8f:7f:59:d5:25:31:6e:12:fd:8b:8f:61:eb:8d:ca:
         af:ff:f9:57:24:e1:e3:25:70:96:9f:2d:c6:fa:9e:7e:6f:c4:
         01:00:96:0d:6b:eb:54:cd:00:fe:b2:e2:6f:cc:47:3c:0e:60:
         2e:13:15:2a:18:0b:a8:ba:f0:27:33:95:f3:d9:81:fd:7d:3f:
         03:78:e7:a4:74:2e:56:49:a5:ff:33:de:94:0f:15:6c:12:75:
         2f:25:4b:e6:71:c6:2b:50:b0:e1:a0:d2:a9:6b:c2:e7:a9:e4:
         00:ef:95:98:01:1d:f8:06:1d:41:7d:8a:0a:de:f6:53:bb:f7:
         49:b3:b3:33:d5:fe:cc:4d:8a:ec:7d:d3:96:04:8e:e3:b4:4c:
         af:1e:1d:3a:b3:22:b5:e3:6d:0a:1f:9e:80:da:ce:c0:5f:3a:
         a8:d7:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org