Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EyFe5ac1BnLWL2v4IXUB3NVyG-Y.roa
File:                     EyFe5ac1BnLWL2v4IXUB3NVyG-Y.roa (raw, json)
Hash identifier:          uTWOOq1mNgh421qsk294s+0IT3UkqPGOiII5Eb90VDc=
Subject key identifier:   13:21:5E:E5:A7:35:06:72:D6:2F:6B:F8:21:75:01:DC:D5:72:1B:E6
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0186740F7CBD2FDF34DCB5DA574A6A3FF789
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EyFe5ac1BnLWL2v4IXUB3NVyG-Y.roa
Signing time:             Tue 21 Feb 2023 13:00:17 +0000
ROA not before:           Tue 21 Feb 2023 13:00:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        91.193.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Mar 2023 15:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:74:0f:7c:bd:2f:df:34:dc:b5:da:57:4a:6a:3f:f7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Feb 21 13:00:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13215ee5a7350672d62f6bf8217501dcd5721be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:d7:88:18:3c:e7:69:19:44:2f:66:ce:48:
                    fe:33:d0:c5:f1:63:8c:5f:29:0b:cf:78:e7:27:78:
                    6c:14:62:c3:94:54:37:a7:c7:ac:18:ec:57:e0:29:
                    6e:d2:2e:3d:79:81:e0:3c:92:e8:40:59:3b:fe:a0:
                    a8:4b:38:12:6b:92:17:6e:93:2b:f1:af:67:1c:9f:
                    18:1c:c0:95:2b:33:34:0b:68:30:71:4a:fb:1e:24:
                    f1:5f:41:c3:9d:21:39:54:7e:1e:c9:6e:06:40:3d:
                    52:e6:83:64:32:24:f2:b0:4d:47:da:1c:f0:38:6c:
                    61:e9:e5:de:c0:56:21:c6:c9:38:c7:d5:cf:3d:87:
                    6a:f5:ae:8a:6a:ae:e1:6a:6a:df:6c:f8:7c:d9:00:
                    6e:06:82:8d:25:fa:b7:fd:c7:91:f0:f8:e2:9f:04:
                    cf:8f:ff:07:6e:c4:8a:33:f2:b7:85:eb:2e:77:d5:
                    46:a6:7d:ab:69:bd:cf:01:a2:31:5c:f9:97:c5:40:
                    d5:9a:11:46:ec:a6:1c:62:98:bf:11:fc:a8:57:3d:
                    71:dd:05:9e:d3:87:2c:66:bc:6e:49:45:4c:e6:a0:
                    30:81:b7:08:5b:29:b8:fa:ef:45:fe:14:b9:74:a5:
                    58:cb:18:64:2c:fb:87:97:25:b2:86:e6:85:26:33:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:5E:E5:A7:35:06:72:D6:2F:6B:F8:21:75:01:DC:D5:72:1B:E6
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EyFe5ac1BnLWL2v4IXUB3NVyG-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fe:23:57:72:06:61:68:85:5d:52:d2:f2:87:0c:fa:33:2e:
         ad:b5:51:92:00:9a:e8:2e:67:22:57:54:93:75:db:d0:cf:d7:
         0f:18:01:d2:cf:6d:55:9f:bb:f9:86:cb:d1:9f:27:56:bb:8d:
         2e:45:d9:36:bb:77:3e:5e:3b:5d:3d:80:27:c9:3f:06:8d:c8:
         b3:6d:0f:1c:56:85:9c:b8:2a:8f:1b:00:4c:20:e2:5e:47:e6:
         47:8c:fe:62:b1:3d:01:31:19:f0:d0:93:df:c6:94:6f:64:19:
         52:73:d6:5a:b6:ac:57:8e:67:04:24:70:1b:60:c7:81:36:dc:
         ae:09:5b:e9:2d:1f:33:8e:b6:31:05:ae:52:b2:f4:c2:de:a7:
         86:2c:68:c5:55:62:7e:99:fa:dc:ee:12:8f:91:a7:e8:31:eb:
         04:35:25:28:0f:16:7b:a1:4f:65:41:60:87:d2:e7:96:02:06:
         bc:ab:46:d0:06:b6:ef:f9:94:4b:31:b0:df:50:7c:cd:82:f4:
         18:5d:99:9b:60:c3:1d:cb:ab:e4:f8:48:99:29:83:d8:8e:22:
         d1:0a:86:50:c1:e7:09:01:31:60:6b:e0:96:77:68:6c:88:e4:
         f3:f8:75:5f:85:f6:76:c2:a3:9f:00:bb:55:54:5e:70:a8:26:
         91:70:e2:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ0D3y9L9803LXaV0pqP/eJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwMjIxMTMwMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzIxNWVlNWE3MzUwNjcyZDYyZjZiZjgyMTc1MDFkY2Q1NzIxYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbXXiBg852kZRC9mzkj+M9DF8WOM
XykLz3jnJ3hsFGLDlFQ3p8esGOxX4Clu0i49eYHgPJLoQFk7/qCoSzgSa5IXbpMr
8a9nHJ8YHMCVKzM0C2gwcUr7HiTxX0HDnSE5VH4eyW4GQD1S5oNkMiTysE1H2hzw
OGxh6eXewFYhxsk4x9XPPYdq9a6Kaq7hamrfbPh82QBuBoKNJfq3/ceR8PjinwTP
j/8HbsSKM/K3hesud9VGpn2rab3PAaIxXPmXxUDVmhFG7KYcYpi/EfyoVz1x3QWe
04csZrxuSUVM5qAwgbcIWym4+u9F/hS5dKVYyxhkLPuHlyWyhuaFJjPc9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMhXuWnNQZy1i9r+CF1AdzVchvmMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvRXlGZTVhYzFCbkxXTDJ2NElYVUIzTlZ5Ry1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8H9MA0G
CSqGSIb3DQEBCwUAA4IBAQB8/iNXcgZhaIVdUtLyhwz6My6ttVGSAJroLmciV1ST
ddvQz9cPGAHSz21Vn7v5hsvRnydWu40uRdk2u3c+XjtdPYAnyT8GjcizbQ8cVoWc
uCqPGwBMIOJeR+ZHjP5isT0BMRnw0JPfxpRvZBlSc9ZatqxXjmcEJHAbYMeBNtyu
CVvpLR8zjrYxBa5SsvTC3qeGLGjFVWJ+mfrc7hKPkafoMesENSUoDxZ7oU9lQWCH
0ueWAga8q0bQBrbv+ZRLMbDfUHzNgvQYXZmbYMMdy6vk+EiZKYPYjiLRCoZQwecJ
ATFga+CWd2hsiOTz+HVfhfZ2wqOfALtVVF5wqCaRcOII
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org