Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/zBwIt_suBTZlNMt3TWoRFmGI8LE.roa
File:                     zBwIt_suBTZlNMt3TWoRFmGI8LE.roa (raw, json)
Hash identifier:          JUTwez3JtnQ1r5FY/DRZ6kbvpsOqwCeB6+MKLdUehPA=
Subject key identifier:   CC:1C:08:B7:FB:2E:05:36:65:34:CB:77:4D:6A:11:16:61:88:F0:B1
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       01906C65A2ECC48AD1B835A6C9ACEBA4AAED
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/zBwIt_suBTZlNMt3TWoRFmGI8LE.roa
Signing time:             Mon 01 Jul 2024 03:45:18 +0000
ROA not before:           Mon 01 Jul 2024 03:45:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        91.190.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 16:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:65:a2:ec:c4:8a:d1:b8:35:a6:c9:ac:eb:a4:aa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Jul  1 03:45:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cc1c08b7fb2e05366534cb774d6a11166188f0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:ee:d8:93:54:5f:a1:d6:75:b4:bd:2c:6c:
                    25:9a:56:b9:e0:03:b4:bc:26:d4:40:94:94:18:16:
                    09:58:63:c9:d9:d3:06:93:34:89:c9:67:05:7e:be:
                    a3:61:ea:5d:58:6e:38:2a:db:c2:56:04:1b:ef:eb:
                    99:fd:80:a5:49:64:23:78:c9:a9:67:ae:73:b6:50:
                    65:6b:ff:65:07:25:b6:5a:36:0c:68:4d:bf:e9:fd:
                    7d:aa:40:9e:96:fd:b5:f4:12:25:b5:fb:4f:04:8b:
                    10:37:86:46:4a:1a:9e:ae:a3:95:9e:05:48:de:97:
                    fe:bf:f6:30:73:d2:c3:16:18:3f:ab:1a:e5:b9:f8:
                    8b:e3:fa:93:c6:f2:af:77:5d:eb:e0:e2:1f:eb:b4:
                    52:7d:b3:1c:f0:0d:03:b7:a2:a0:3c:bf:96:f8:8b:
                    0e:e3:14:2c:47:fa:03:33:9d:9d:ce:50:de:98:55:
                    f6:d3:88:29:29:40:5b:e8:18:23:76:29:13:ab:13:
                    02:b7:cd:a1:87:5f:55:55:67:44:9c:67:d2:4e:cf:
                    20:5c:1a:5d:17:6c:3f:cf:88:1a:84:2e:ec:e8:de:
                    4b:d6:64:f6:45:29:f3:d1:34:b6:26:60:62:64:ee:
                    07:8e:32:15:60:a4:01:4c:e5:e5:b2:33:97:4b:29:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:08:B7:FB:2E:05:36:65:34:CB:77:4D:6A:11:16:61:88:F0:B1
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/zBwIt_suBTZlNMt3TWoRFmGI8LE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:ec:ac:41:78:99:54:e5:f1:d1:97:99:54:61:d8:3b:61:
         f7:86:83:56:19:62:fb:f7:5d:f2:9b:2a:b3:e6:28:50:03:16:
         cf:07:bc:ce:2d:57:bf:f9:73:7a:2d:ce:8e:05:1a:43:0e:9f:
         02:15:0d:0d:51:ca:94:16:ae:f3:e1:ba:b4:64:db:0f:54:d9:
         bd:8e:e9:d9:94:ee:a8:5f:3d:8a:bd:57:11:37:b8:3c:e3:5d:
         d6:29:96:41:a8:20:af:43:44:fb:67:71:76:01:02:05:f6:c9:
         de:be:aa:99:7e:40:90:0b:b0:94:11:1a:c1:75:f3:92:0d:15:
         72:49:74:33:1b:08:55:26:1a:71:ff:d1:d3:7a:f7:61:2b:7f:
         d9:82:74:ea:d9:a3:93:99:6d:66:f0:c5:cf:bd:17:aa:86:71:
         5c:92:9e:6b:1e:c3:5f:ce:b3:6f:39:c4:75:bd:ee:bd:43:87:
         f8:ce:34:b2:24:e8:df:97:9f:2f:23:46:7a:ab:0f:a3:ff:ce:
         a3:98:0b:ce:6a:2d:61:92:c1:72:57:2f:31:bd:ed:7f:23:16:
         61:96:13:48:35:32:cd:d3:63:d3:e5:2a:b0:46:73:bf:ff:11:
         de:79:94:ea:0c:c7:a9:33:13:38:f3:fb:dd:94:fc:43:46:26:
         e8:f5:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 17:49:27 2024 by rpki-client on console-fra.rpki-client.org