Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/SWRISjOyF4MMLa6__z_wDERKX1o.roa
File:                     SWRISjOyF4MMLa6__z_wDERKX1o.roa (raw, json)
Hash identifier:          +9Qz7/rwZCNSkarKkVps5It8X5Zg4c3cC7xVSowrZtw=
Subject key identifier:   49:64:48:4A:33:B2:17:83:0C:2D:AE:BF:FF:3F:F0:0C:44:4A:5F:5A
Certificate issuer:       /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial:       018BB997FC4BED28EE0DEA4C774B6FC3C7F7
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/SWRISjOyF4MMLa6__z_wDERKX1o.roa
Signing time:             Fri 10 Nov 2023 14:17:07 +0000
ROA not before:           Fri 10 Nov 2023 14:17:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57752
IP address blocks:        91.236.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:97:fc:4b:ed:28:ee:0d:ea:4c:77:4b:6f:c3:c7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
        Validity
            Not Before: Nov 10 14:17:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4964484a33b217830c2daebfff3ff00c444a5f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:12:74:12:6a:6a:46:78:59:35:5d:b5:eb:
                    ba:b6:91:ec:76:19:c3:f4:95:7e:ea:80:82:95:20:
                    8a:9a:02:8d:5e:77:ea:44:90:df:50:e6:1e:c3:89:
                    8b:5c:10:55:ca:52:4d:a0:29:43:1c:87:9c:12:65:
                    a9:92:f8:86:b2:6c:65:35:63:31:e6:6c:a3:b4:21:
                    ab:c1:e1:c1:31:01:b1:92:e5:d6:29:bd:da:d5:df:
                    36:9d:21:27:a7:c8:9e:fc:cc:95:89:08:61:0b:e8:
                    0c:f1:29:72:2f:cd:b8:55:bd:a7:a4:32:1d:35:a8:
                    e6:59:78:77:31:46:6c:00:ea:55:18:5e:ed:78:d5:
                    bd:06:b1:cb:47:c1:ac:3d:68:64:1e:25:23:31:bb:
                    6c:67:56:59:92:fe:eb:90:ef:14:e2:48:5e:e5:f8:
                    ea:df:5b:0a:3f:04:aa:a0:b3:19:32:8e:b6:d4:36:
                    0d:34:ec:b9:b2:fc:47:c8:d0:e3:79:c8:57:3d:a3:
                    1c:25:0e:9d:7b:1a:eb:8f:3a:be:de:58:2e:94:a8:
                    6f:06:5e:ad:00:54:a4:0c:4b:c5:b0:2d:21:09:62:
                    d2:8a:d1:1f:0f:0e:ea:72:0e:71:25:de:af:bf:bc:
                    eb:a8:04:82:39:a6:af:0f:e0:da:78:ae:c5:de:3f:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:64:48:4A:33:B2:17:83:0C:2D:AE:BF:FF:3F:F0:0C:44:4A:5F:5A
            X509v3 Authority Key Identifier:
                keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/SWRISjOyF4MMLa6__z_wDERKX1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:88:b4:1d:50:d6:de:f2:8d:70:f3:ad:a0:8a:c0:51:a5:eb:
         66:5f:93:01:73:88:29:c6:ae:0c:ac:fe:f6:3e:90:9d:1d:44:
         f1:48:e1:77:3c:f3:23:33:e4:4e:f1:ba:77:bc:d7:3b:0d:0a:
         7b:46:69:63:e2:85:b6:11:ce:49:11:3b:ad:7e:3b:b7:f5:73:
         6f:26:3c:9d:b0:0e:39:3f:95:5d:67:1d:fd:99:0a:57:23:31:
         eb:d5:f6:80:b2:a4:04:96:ac:2d:33:d0:34:eb:1b:9e:36:bb:
         8f:33:0e:23:65:cc:10:d3:1f:0a:d6:a5:5f:a3:a6:bf:eb:1b:
         ac:a5:c7:e2:50:85:c1:c6:50:be:2e:a1:81:5c:12:56:ac:d0:
         80:ee:6d:e1:d1:6e:9b:02:30:66:e9:f9:a1:9c:82:b9:75:40:
         a0:7a:78:05:e1:5d:b5:4f:f9:f7:dd:7c:3e:ba:a6:bd:22:43:
         05:eb:38:4e:b5:12:cd:36:65:61:3b:df:e6:50:36:63:1e:6c:
         86:fe:e6:24:20:fe:00:b6:c0:a6:9e:76:18:14:4c:9b:f7:19:
         17:4e:d4:85:f6:b7:6f:0e:a2:09:99:39:d9:0d:43:d5:27:2b:
         c5:5d:dc:b5:5f:0b:89:b0:e5:94:62:f9:e8:f5:f2:46:cf:a4:
         d1:57:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:47 2024 by rpki-client on console-ams.rpki-client.org