Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/8VLL_VMrjsIODLfsE5tbaD5XbV4.roa
File:                     8VLL_VMrjsIODLfsE5tbaD5XbV4.roa (raw, json)
Hash identifier:          ADEPga1aePWBW6RQpWWkkczcGmRD2eM88SyLl73M7GQ=
Subject key identifier:   F1:52:CB:FD:53:2B:8E:C2:0E:0C:B7:EC:13:9B:5B:68:3E:57:6D:5E
Certificate issuer:       /CN=e7dcdf80f30734bd2162a57c1354ae5b1e746ee6
Certificate serial:       018606233E704DEA376F9077B4308970252F
Authority key identifier: E7:DC:DF:80:F3:07:34:BD:21:62:A5:7C:13:54:AE:5B:1E:74:6E:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/8VLL_VMrjsIODLfsE5tbaD5XbV4.roa
Signing time:             Tue 31 Jan 2023 04:43:38 +0000
ROA not before:           Tue 31 Jan 2023 04:43:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     196688
IP address blocks:        91.215.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:06:23:3e:70:4d:ea:37:6f:90:77:b4:30:89:70:25:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7dcdf80f30734bd2162a57c1354ae5b1e746ee6
        Validity
            Not Before: Jan 31 04:43:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f152cbfd532b8ec20e0cb7ec139b5b683e576d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:e9:a8:32:46:2a:b3:3c:ab:e8:42:02:bd:
                    75:26:64:ff:4c:20:33:1d:12:44:05:ad:8b:fb:f1:
                    ae:6f:a3:61:ec:9a:22:d2:d6:cc:9e:46:50:1b:b5:
                    b9:28:6e:9e:0a:3d:c7:f4:23:4f:d1:6c:ac:bc:bf:
                    0f:0e:0c:53:ed:f9:c4:b3:f2:55:80:27:bd:48:e6:
                    1c:0d:72:84:4e:3c:cb:86:ae:e7:c0:7f:08:1b:7f:
                    60:2b:5f:72:30:39:fb:60:a2:cf:9e:16:00:87:a2:
                    d3:81:09:4a:0a:56:72:9b:fa:de:f3:86:62:1c:14:
                    ee:f8:3f:14:b2:15:d7:3a:24:8f:f6:36:51:8f:f0:
                    64:70:3b:67:c2:4e:17:c2:d4:b7:b2:a3:a8:ca:d0:
                    63:f6:b5:2e:53:bd:cc:58:42:c8:8e:f0:1a:d6:72:
                    fa:4d:a0:f4:41:74:3d:b9:3d:31:15:49:45:86:23:
                    41:38:15:89:37:49:c8:ff:b1:51:0c:8c:e7:cd:25:
                    2b:02:b6:73:2c:d0:78:35:10:80:03:2a:a5:c7:62:
                    f4:73:d7:68:a0:48:5f:01:4f:0d:1f:d5:f3:ce:c9:
                    69:64:b6:67:ff:df:d7:24:01:d9:cb:21:6d:45:c0:
                    87:db:0e:75:5d:56:bd:37:3c:b2:c3:ef:b4:7e:1e:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:CB:FD:53:2B:8E:C2:0E:0C:B7:EC:13:9B:5B:68:3E:57:6D:5E
            X509v3 Authority Key Identifier:
                keyid:E7:DC:DF:80:F3:07:34:BD:21:62:A5:7C:13:54:AE:5B:1E:74:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59zfgPMHNL0hYqV8E1SuWx50buY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/8VLL_VMrjsIODLfsE5tbaD5XbV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/830639-bdde-47b6-b558-04d6274bf1d0/1/59zfgPMHNL0hYqV8E1SuWx50buY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.215.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:97:16:d7:26:a6:67:10:d0:30:81:18:47:20:24:44:ad:
         41:5c:03:2d:8e:22:39:66:ac:2b:31:69:ad:f4:93:0b:af:db:
         20:b3:ed:53:5a:5e:c3:74:63:3d:c1:ac:d6:cf:b6:42:00:aa:
         9f:b4:b8:46:0f:63:bf:8f:69:c5:4b:0d:52:3a:63:4c:93:f9:
         e6:9a:04:aa:de:6e:fe:9f:39:51:42:bb:a3:b3:e2:b3:d5:42:
         65:4d:23:f3:48:6f:6c:24:02:68:be:34:92:2e:c3:ab:94:7b:
         e0:20:45:21:7d:59:9b:1f:a7:f1:04:63:9a:ee:6c:a2:4d:4a:
         46:d3:64:91:06:db:34:d7:e0:d6:ba:32:b2:db:2d:f2:97:18:
         5b:f8:d6:95:b7:c1:2a:7d:50:81:ac:74:1e:5e:fb:19:77:1d:
         9c:a0:59:ac:a5:3f:be:c6:df:f0:56:6d:fd:e2:d0:58:e4:5e:
         07:39:c6:d4:23:a9:54:80:6e:65:e4:62:2f:7e:29:da:99:2f:
         75:62:7e:da:be:34:06:6d:34:46:23:df:86:40:ff:19:2f:df:
         82:5c:37:93:1d:6a:46:b2:e4:65:52:41:74:83:57:43:51:80:
         9c:b7:05:dd:48:11:9e:75:1e:0c:75:7d:55:0d:de:ad:9b:78:
         ff:a2:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:12 2024 by rpki-client on console-fra.rpki-client.org