Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/ANMDdIIi8ODa6_p0QIXdmeb51u8.roa
File:                     ANMDdIIi8ODa6_p0QIXdmeb51u8.roa (raw, json)
Hash identifier:          h1Zk6zkpmTW8TkpE6jUEZQBhutdzCoyJMAQoFJMb9xY=
Subject key identifier:   00:D3:03:74:82:22:F0:E0:DA:EB:FA:74:40:85:DD:99:E6:F9:D6:EF
Certificate issuer:       /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial:       0190345528B64E8644DE8A4D797CC23C43B9
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/ANMDdIIi8ODa6_p0QIXdmeb51u8.roa
Signing time:             Thu 20 Jun 2024 06:28:34 +0000
ROA not before:           Thu 20 Jun 2024 06:28:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214798
IP address blocks:        185.169.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 10:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:55:28:b6:4e:86:44:de:8a:4d:79:7c:c2:3c:43:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
        Validity
            Not Before: Jun 20 06:28:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=00d303748222f0e0daebfa744085dd99e6f9d6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:3b:1b:e5:ec:82:2b:3a:82:23:1b:d4:92:
                    4c:92:c1:ab:17:01:40:92:e8:ac:22:bf:ef:dd:2c:
                    65:f2:19:ba:93:d5:1d:3e:3b:26:88:78:f9:0b:15:
                    79:b4:5e:cf:03:4c:1c:56:ff:76:b7:8c:33:1b:6b:
                    d7:13:a3:40:2b:29:03:54:36:81:80:83:25:79:23:
                    79:13:3d:6f:9c:51:48:d4:70:13:1e:a4:84:34:2e:
                    eb:ad:90:98:d4:68:e8:30:d3:9c:c7:76:57:47:7a:
                    3f:26:e3:16:6b:c1:cc:ae:a3:74:bf:58:5d:b6:c6:
                    5f:58:25:f7:82:23:46:7a:a7:81:45:86:aa:2d:4e:
                    07:19:c3:45:44:5e:28:11:18:69:a7:18:ef:2f:b8:
                    f9:2e:a4:6f:90:74:e6:9b:a0:35:1d:71:6f:f5:08:
                    1e:44:1b:77:31:cd:f8:35:9a:a2:58:a7:fd:f9:9b:
                    e2:57:f6:bd:a7:d0:89:84:1a:03:b1:33:d0:f8:5e:
                    a5:78:33:1d:7f:2a:b9:2a:45:7f:22:a2:94:87:b6:
                    a7:57:42:12:83:dd:db:a5:5d:b4:99:e5:43:87:01:
                    46:6a:ba:8a:c8:18:48:df:4f:8a:f6:0f:6f:fa:0b:
                    92:f0:47:2b:18:5e:ea:10:dc:89:e0:e1:fa:bf:a7:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:03:74:82:22:F0:E0:DA:EB:FA:74:40:85:DD:99:E6:F9:D6:EF
            X509v3 Authority Key Identifier:
                keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/ANMDdIIi8ODa6_p0QIXdmeb51u8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:d3:3e:62:4c:09:d0:46:2e:ce:aa:49:a8:88:a9:13:94:
         2c:8e:20:62:bb:54:fe:ad:81:47:fc:ee:8d:c0:43:f6:4f:8c:
         d9:dd:fe:40:5f:12:03:d0:9e:66:74:a1:fb:c6:b5:ba:7a:45:
         2d:ea:4e:c9:15:68:c5:e2:f1:5a:f1:20:28:0d:4b:67:3d:c1:
         66:c9:49:d5:c2:f1:3f:e7:09:5c:78:8c:cd:ef:85:dc:d0:69:
         e2:f9:71:6f:a9:88:4c:dc:91:ac:2f:7a:1c:e3:3a:75:de:04:
         76:68:d4:f8:36:dc:b3:a0:ef:7a:37:76:da:d2:36:1c:42:41:
         85:6e:ee:30:6e:06:3b:20:a6:e7:63:26:42:f0:71:5a:28:4a:
         85:37:7c:7b:83:eb:79:0b:66:07:40:e9:dd:e9:d8:a7:49:4d:
         85:c1:10:35:e4:23:e8:c5:21:cc:ca:59:d5:9a:8e:df:b8:c9:
         3f:b3:37:9b:03:1b:ef:a8:c6:96:17:c9:f2:57:23:49:7d:61:
         b2:4a:96:08:f6:46:1f:e5:3c:ce:5b:c9:b2:ee:66:d3:6b:5a:
         c6:7e:29:ab:c6:06:d6:8f:f5:7e:ba:c4:eb:3e:fa:9c:35:09:
         e8:ca:f7:f1:d4:ef:04:43:44:50:8b:ad:57:f9:c0:59:35:39:
         aa:37:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 13:15:28 2024 by rpki-client on console-fra.rpki-client.org