Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n91MgvElXpbXIC0Qs-6ZJRPQzwU.roa
File:                     n91MgvElXpbXIC0Qs-6ZJRPQzwU.roa (raw, json)
Hash identifier:          MOk63PYUzm96vfsCdeVdKPq4X2hYkfcsz4lqYNywHto=
Subject key identifier:   9F:DD:4C:82:F1:25:5E:96:D7:20:2D:10:B3:EE:99:25:13:D0:CF:05
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0191568285D526B7ED717677061F46CB02D4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n91MgvElXpbXIC0Qs-6ZJRPQzwU.roa
Signing time:             Thu 15 Aug 2024 14:48:00 +0000
ROA not before:           Thu 15 Aug 2024 14:48:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        45.88.12.0/24 maxlen: 24
                          45.88.14.0/24 maxlen: 24
                          45.88.15.0/24 maxlen: 24
                          62.192.152.0/24 maxlen: 24
                          77.81.182.0/24 maxlen: 24
                          79.110.227.0/24 maxlen: 24
                          85.204.18.0/24 maxlen: 24
                          89.34.106.0/24 maxlen: 24
                          89.35.129.0/24 maxlen: 24
                          89.37.192.0/24 maxlen: 24
                          89.40.36.0/24 maxlen: 24
                          89.40.215.0/24 maxlen: 24
                          89.45.35.0/24 maxlen: 24
                          89.47.36.0/24 maxlen: 24
                          93.115.106.0/24 maxlen: 24
                          93.115.107.0/24 maxlen: 24
                          93.115.203.0/24 maxlen: 24
                          93.118.36.0/24 maxlen: 24
                          93.119.154.0/24 maxlen: 24
                          94.198.171.0/24 maxlen: 24
                          128.0.41.0/24 maxlen: 24
                          176.223.188.0/24 maxlen: 24
                          185.198.233.0/24 maxlen: 24
                          185.212.119.0/24 maxlen: 24
                          188.212.121.0/24 maxlen: 24
                          188.215.31.0/24 maxlen: 24
                          188.241.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 10:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:56:82:85:d5:26:b7:ed:71:76:77:06:1f:46:cb:02:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Aug 15 14:48:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9fdd4c82f1255e96d7202d10b3ee992513d0cf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:4e:d0:fe:65:fe:04:ae:2d:7a:03:fe:b5:
                    c8:a1:91:fc:09:a8:d5:2c:e7:95:13:5e:ee:13:83:
                    b0:65:9f:e8:03:df:61:91:d6:72:de:4a:82:25:b9:
                    bf:aa:c4:01:9d:8b:f6:26:71:bc:a1:9b:3f:44:15:
                    6c:21:9e:5d:11:34:34:11:fb:67:5f:c9:23:2f:41:
                    75:99:5f:ec:04:94:fc:ce:ba:7b:1f:d6:c6:2c:61:
                    d1:26:25:42:ef:58:89:d6:c8:0f:44:7f:8c:24:23:
                    4d:d6:af:bb:c4:2a:03:18:f5:c7:5c:a8:e4:63:1e:
                    dc:b8:d4:c2:5e:bf:aa:66:36:65:9d:7e:74:69:e9:
                    26:97:89:12:41:55:84:60:0f:97:f4:9e:36:d4:89:
                    92:f0:d5:71:4b:36:0f:00:bd:d1:f0:b9:c3:dd:2a:
                    66:2e:b5:3c:9f:ff:f4:6c:72:0d:90:88:83:1e:0e:
                    54:64:c0:2a:66:4b:65:57:8d:3d:39:82:76:a0:1a:
                    53:41:17:03:cb:5f:1c:de:c5:16:15:3e:5a:dc:23:
                    56:e3:e7:e1:4c:e8:60:49:65:64:44:c7:62:ab:68:
                    71:da:d7:f5:6f:b0:bb:61:3d:bc:e9:1e:f6:7e:6f:
                    fd:c4:25:90:e3:04:54:c1:2f:6c:e5:24:04:f0:17:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DD:4C:82:F1:25:5E:96:D7:20:2D:10:B3:EE:99:25:13:D0:CF:05
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n91MgvElXpbXIC0Qs-6ZJRPQzwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.12.0/24
                  45.88.14.0/23
                  62.192.152.0/24
                  77.81.182.0/24
                  79.110.227.0/24
                  85.204.18.0/24
                  89.34.106.0/24
                  89.35.129.0/24
                  89.37.192.0/24
                  89.40.36.0/24
                  89.40.215.0/24
                  89.45.35.0/24
                  89.47.36.0/24
                  93.115.106.0/23
                  93.115.203.0/24
                  93.118.36.0/24
                  93.119.154.0/24
                  94.198.171.0/24
                  128.0.41.0/24
                  176.223.188.0/24
                  185.198.233.0/24
                  185.212.119.0/24
                  188.212.121.0/24
                  188.215.31.0/24
                  188.241.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ac:3e:8a:71:6c:26:a8:5e:2b:68:22:91:da:47:17:46:37:
         bd:9f:cf:b0:d6:72:6e:7a:be:6d:dc:c2:28:98:c3:78:33:dc:
         91:be:a8:4d:ee:65:a2:d6:69:d2:ea:32:56:35:70:74:f5:ca:
         2d:5d:f3:0d:8d:3a:aa:c7:84:6b:69:9f:43:14:37:65:0e:4d:
         27:bd:d2:0d:98:8c:bc:8d:51:dc:04:cf:98:b3:79:e8:68:d4:
         7a:cf:68:3d:b1:41:9a:9e:13:c8:44:a1:ef:20:d6:ba:6c:85:
         4b:3d:60:c8:c9:17:64:32:59:c3:a3:39:e0:3a:0d:04:8e:6f:
         a9:82:36:9a:46:3f:69:b8:a1:49:24:fe:3d:05:01:6c:6e:c3:
         e4:87:79:21:18:88:d0:04:c8:79:6b:6d:17:ba:b2:88:eb:ce:
         a0:53:0f:2b:1a:c2:61:85:fc:6d:a8:57:67:40:76:a7:7e:46:
         ab:25:82:b0:a6:89:fc:55:33:ea:3c:ea:3a:03:9c:fc:d5:23:
         7c:69:50:4c:14:1d:8a:7d:d7:2c:25:75:55:5c:da:8a:80:bb:
         71:10:cd:1b:03:5b:17:30:e0:59:c9:54:6b:51:18:fd:19:0e:
         b0:0d:a8:55:c8:46:02:79:f6:a6:13:d1:ff:74:95:48:f8:b0:
         af:32:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 13:24:22 2024 by rpki-client on console-fra.rpki-client.org