Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa
File:                     OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa (raw, json)
Hash identifier:          v3M9MXjXOEYTBQmbXAthEb1NEs5vGV4Bc/2bnDPq2L0=
Subject key identifier:   39:43:D3:9B:FD:01:E9:6A:69:FE:D2:D6:45:43:F5:11:64:CE:D9:5A
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       01856D9D38079E182893BB57EDCB9F610871
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa
Signing time:             Sun 01 Jan 2023 13:54:58 +0000
ROA not before:           Sun 01 Jan 2023 13:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30058
IP address blocks:        91.213.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 May 2023 05:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:38:07:9e:18:28:93:bb:57:ed:cb:9f:61:08:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan  1 13:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3943d39bfd01e96a69fed2d64543f51164ced95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:c2:9c:52:bf:97:55:34:c3:a8:f1:7e:2b:
                    de:d7:1d:04:b6:9b:a6:12:e6:fa:ab:d5:2e:fd:2e:
                    b9:4d:02:bf:e4:f3:eb:ba:d5:86:2e:30:73:9d:19:
                    1b:c5:f6:62:3f:c2:bd:2f:23:df:df:7d:5b:7b:72:
                    ed:b3:a6:2d:a6:95:11:62:f3:54:01:79:13:3b:d0:
                    e1:2e:8b:33:80:d9:42:ca:9e:a3:55:4c:6b:9e:bb:
                    b5:58:aa:cd:7c:00:a8:c8:3c:84:c9:b6:51:e5:23:
                    7d:7b:22:e6:68:8f:9f:98:8d:0e:8b:81:ff:e3:6e:
                    b3:85:46:ea:06:1f:78:4c:c9:2f:66:b9:81:9f:fc:
                    54:f7:8b:34:83:a5:e8:03:35:14:fe:45:dc:93:ce:
                    b4:51:ab:36:5c:5d:c6:b4:96:c3:c5:e4:27:b9:25:
                    c7:61:a1:85:c9:f4:fc:c2:6d:f6:f8:d3:c4:24:b4:
                    89:19:31:fe:71:00:dc:c0:97:a1:86:82:48:3e:a4:
                    ea:e8:8a:17:6e:12:86:c2:a1:83:a2:1c:21:8d:45:
                    72:71:22:25:7c:94:f2:48:41:b7:8d:cc:45:83:52:
                    49:96:ce:4d:62:44:01:ca:67:39:d8:71:f7:16:c2:
                    74:16:65:35:bf:cf:2d:e4:26:7d:e8:08:91:57:d5:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:43:D3:9B:FD:01:E9:6A:69:FE:D2:D6:45:43:F5:11:64:CE:D9:5A
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:6c:ba:b0:d2:19:4f:13:cc:76:7d:78:4e:eb:80:b7:50:
         06:8f:e4:11:8b:cb:3a:0e:90:ad:c4:ae:c5:58:de:e8:f3:34:
         83:73:18:6d:7a:67:8a:a6:90:e8:64:0c:e6:c1:8b:6a:bb:ca:
         02:7c:53:09:3d:b6:ce:dc:49:6a:11:3a:2e:e0:76:a0:b7:cd:
         91:be:b8:5c:39:d1:4e:9f:4f:e2:b5:10:ec:c3:ab:1c:35:4d:
         a6:34:79:4a:32:c4:53:26:11:19:78:2b:f8:39:cb:0b:8b:f7:
         94:34:85:91:6a:1d:e3:de:0c:4f:6b:27:bf:43:0d:dd:18:7b:
         45:c2:af:d3:a8:14:e0:1f:2e:82:37:92:ad:d7:64:de:10:a8:
         67:52:7d:e3:7c:1f:b5:95:f7:80:b4:a3:8d:42:f3:95:f8:38:
         3b:f5:fd:c9:64:7d:fb:d3:50:1b:1e:b1:43:49:31:40:e5:7e:
         94:5b:72:5b:6c:bf:ee:88:89:02:4a:c1:66:09:c7:0f:da:76:
         bd:d2:2d:87:a0:12:09:07:21:54:61:ae:29:0a:8d:0c:bf:19:
         01:79:1b:c1:09:9e:b8:76:7c:65:43:f0:11:e3:36:cf:d1:77:
         8e:00:36:d9:dc:e9:c7:40:33:12:34:3b:79:ea:01:a1:24:28:
         1e:4d:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org