Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/voPpvUhYA9uBF56LzLLTobi0Y3c.roa
File:                     voPpvUhYA9uBF56LzLLTobi0Y3c.roa (raw, json)
Hash identifier:          HD8q/RzuYOId7EfQDLow7iCOdsC24uH4GH7P2EfBWT0=
Subject key identifier:   BE:83:E9:BD:48:58:03:DB:81:17:9E:8B:CC:B2:D3:A1:B8:B4:63:77
Certificate issuer:       /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial:       01856CE63A09EF86A901FBE7810770F36276
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/voPpvUhYA9uBF56LzLLTobi0Y3c.roa
Signing time:             Sun 01 Jan 2023 10:35:05 +0000
ROA not before:           Sun 01 Jan 2023 10:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48303
IP address blocks:        91.216.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:3a:09:ef:86:a9:01:fb:e7:81:07:70:f3:62:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
        Validity
            Not Before: Jan  1 10:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be83e9bd485803db81179e8bccb2d3a1b8b46377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:d6:28:ed:53:cc:7c:db:13:ae:af:71:a9:
                    01:25:e6:01:d6:d0:f1:2b:20:dd:63:8c:9e:d2:91:
                    a7:97:fa:c8:ad:a7:89:9c:9c:46:0f:30:46:b4:f2:
                    d0:47:0e:ce:47:2c:08:28:bc:c4:78:9d:af:28:f8:
                    ce:df:f6:9d:f1:98:9b:6a:50:26:69:f4:e1:4a:b3:
                    d2:5e:af:ab:26:33:75:63:62:d6:91:69:b8:4c:10:
                    8c:c8:46:0f:b3:c7:ec:78:05:66:27:a0:33:04:60:
                    ea:0d:cb:c5:14:71:af:1c:6c:6e:71:9d:12:91:4e:
                    75:38:48:f8:f6:e7:cd:b3:ea:48:97:eb:18:17:85:
                    47:1d:3b:84:6c:2f:0e:18:07:d1:cd:b2:4b:bb:83:
                    28:18:f4:21:42:d6:57:f4:dc:da:42:1b:e1:88:43:
                    a3:5d:b9:4c:d1:51:71:5d:09:fd:ca:52:e1:9a:fe:
                    fc:41:46:0b:9d:f3:d3:65:00:98:55:20:a7:b4:c6:
                    2e:51:ed:6d:7d:2e:87:68:11:49:66:11:85:db:a0:
                    85:17:f6:ec:00:38:d2:66:aa:37:ab:f9:fb:71:56:
                    fe:48:48:37:3e:25:6a:df:e8:4e:b7:8d:3c:b3:95:
                    0b:c4:21:63:82:76:48:6f:ea:8e:54:50:64:d8:02:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:83:E9:BD:48:58:03:DB:81:17:9E:8B:CC:B2:D3:A1:B8:B4:63:77
            X509v3 Authority Key Identifier:
                keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/voPpvUhYA9uBF56LzLLTobi0Y3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:a1:6a:94:88:c9:ee:f2:7f:ca:f0:a1:80:cd:aa:b3:4d:
         de:ec:d2:c4:3e:0f:6a:f3:35:d4:16:5b:35:fa:83:15:ed:f7:
         a6:4c:16:52:bd:9f:e8:4b:f7:f2:d1:25:ed:16:73:23:11:f2:
         f1:7e:7b:4c:80:96:b9:ac:a3:5d:f2:c6:36:e2:7f:09:eb:15:
         1e:79:7d:02:f3:45:90:8c:29:e4:93:24:81:f9:3b:90:4b:a7:
         ec:a1:6e:c3:69:c0:1a:f9:80:ef:6d:e8:21:41:e1:b7:e2:9c:
         ac:52:cd:1a:da:dd:cf:77:3d:1a:08:84:38:0d:0d:47:2f:b6:
         02:a4:4f:db:f6:a9:b8:9f:e6:53:41:78:8a:01:5d:99:96:52:
         cf:4b:a6:42:cd:61:c2:7d:13:bb:6d:8b:0b:31:0a:46:53:3b:
         35:4b:83:67:78:c5:8c:23:85:4c:44:85:6c:37:d8:3b:f1:da:
         03:27:ff:5b:5e:65:1d:f4:3d:53:ac:7b:f8:b6:f1:ed:ce:ed:
         fc:f8:ef:62:f0:ed:9b:a6:34:9e:cd:de:ac:3b:2f:e8:d3:32:
         01:82:fc:db:ca:74:61:f0:f5:51:bd:5f:34:5a:8d:43:6a:aa:
         88:e5:fa:fe:a6:36:d1:cb:60:56:a5:b4:a4:a8:12:9d:b6:33:
         53:be:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org