Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dSQt_C1EThclCO7eMkKkjwOcuOI.roa
File:                     dSQt_C1EThclCO7eMkKkjwOcuOI.roa (raw, json)
Hash identifier:          CythBh5gZPIa0M3lVRMDqQ2tXjtfwO5GW3oqdP+e+/Y=
Subject key identifier:   75:24:2D:FC:2D:44:4E:17:25:08:EE:DE:32:42:A4:8F:03:9C:B8:E2
Certificate issuer:       /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial:       018FF66C5C01A257032B2E23AA01A022A9E8
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dSQt_C1EThclCO7eMkKkjwOcuOI.roa
Signing time:             Sat 08 Jun 2024 05:57:27 +0000
ROA not before:           Sat 08 Jun 2024 05:57:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48147
IP address blocks:        91.227.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 07:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f6:6c:5c:01:a2:57:03:2b:2e:23:aa:01:a0:22:a9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
        Validity
            Not Before: Jun  8 05:57:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=75242dfc2d444e172508eede3242a48f039cb8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:c4:58:f0:5f:0d:66:64:a0:70:63:59:40:
                    5a:e4:6f:da:9a:54:f5:94:08:4b:77:3f:7c:00:7e:
                    cd:6b:19:70:ea:36:db:8b:6b:8e:fe:51:0a:ec:cb:
                    05:fe:ee:0f:41:31:ab:16:b3:15:40:9f:52:3f:41:
                    1d:f9:07:5c:82:ca:aa:ef:92:6b:59:83:3d:55:1e:
                    a8:b0:f1:5f:81:62:87:87:65:cb:26:86:59:ed:84:
                    06:e4:60:f5:e6:aa:13:b8:bb:25:b8:7c:f9:29:6d:
                    07:f6:db:d2:35:87:35:c3:18:31:02:78:ab:3b:63:
                    7a:a5:25:3b:3f:af:5c:7b:c8:20:2e:a4:3f:64:49:
                    04:a7:d4:3e:2c:9a:47:b7:fd:23:5c:38:95:3e:27:
                    9b:e2:f0:96:2c:df:4d:dd:a2:12:a3:2b:b0:40:50:
                    f3:63:0f:ed:03:f7:ef:95:d2:cc:6f:d9:9e:68:f9:
                    d8:7f:08:f8:83:08:31:26:8a:eb:d8:21:c1:85:9f:
                    5c:a2:56:5b:1d:d8:b4:db:b3:e6:a1:76:74:42:8d:
                    f7:e9:7c:35:0e:19:98:bc:8d:c9:6f:ee:a7:7f:cf:
                    65:b4:a5:1b:48:1f:79:1d:d4:3f:cc:d5:8d:0d:2c:
                    5a:40:6e:dc:d1:d7:98:81:33:bc:cd:15:2e:a2:ff:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:2D:FC:2D:44:4E:17:25:08:EE:DE:32:42:A4:8F:03:9C:B8:E2
            X509v3 Authority Key Identifier:
                keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dSQt_C1EThclCO7eMkKkjwOcuOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:28:45:b4:44:4b:f8:5a:2e:11:e2:42:37:2a:a2:87:2c:cf:
         95:ec:78:a3:92:68:b3:04:a6:dc:c0:3c:df:56:51:2e:67:b1:
         48:8f:19:5a:85:9d:cd:fe:7f:cb:b7:1d:d1:6b:be:b0:5c:74:
         44:ac:0a:cc:68:88:9d:70:5b:5d:d0:8a:1f:5f:5c:db:53:b3:
         36:3f:41:ef:c3:2f:71:32:cb:f8:f4:e2:92:58:3d:ce:e0:c2:
         5b:c9:df:a4:4c:29:49:63:12:50:97:f4:b4:47:de:73:b9:72:
         ab:55:a7:ae:a9:8a:13:50:f1:a9:97:c2:08:f6:35:f5:03:98:
         61:b8:e0:5d:7b:a9:30:3c:84:1d:bd:4c:16:91:9c:82:aa:1b:
         a9:48:e1:88:dd:95:ba:e4:6d:82:e6:33:8f:b0:22:e0:88:fd:
         ed:9f:0f:c7:82:a6:04:de:0b:09:39:70:f7:ff:6e:7c:4c:a7:
         41:42:e8:3e:90:da:15:b9:7d:2c:c4:59:a2:e3:6d:06:52:39:
         7f:34:42:bc:50:b4:be:3b:98:f3:8d:12:28:ca:91:b4:c7:cf:
         52:84:9a:d5:41:1a:dd:64:12:88:02:14:5c:d2:e2:52:c2:3d:
         e3:51:5f:6d:ad:8b:98:2c:8c:98:a5:9a:f1:29:ea:74:18:44:
         e4:ff:c4:18
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 22 08:27:36 2024 by rpki-client on console-fra.rpki-client.org