Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/7VG_szilxkDxwPRr2uk8sfYjmR8.roa
File:                     7VG_szilxkDxwPRr2uk8sfYjmR8.roa (raw, json)
Hash identifier:          Lf75tc6U4mLmom0pkaFFPfbSlkm0NmijY6PJUzwFfdM=
Subject key identifier:   ED:51:BF:B3:38:A5:C6:40:F1:C0:F4:6B:DA:E9:3C:B1:F6:23:99:1F
Certificate issuer:       /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial:       0185715554978395834E22971EF85DA1FCC2
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/7VG_szilxkDxwPRr2uk8sfYjmR8.roa
Signing time:             Mon 02 Jan 2023 07:14:55 +0000
ROA not before:           Mon 02 Jan 2023 07:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44264
IP address blocks:        91.199.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:54:97:83:95:83:4e:22:97:1e:f8:5d:a1:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
        Validity
            Not Before: Jan  2 07:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed51bfb338a5c640f1c0f46bdae93cb1f623991f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:7b:25:ec:5c:3f:92:94:ce:92:a3:cc:03:
                    ea:c6:c5:44:23:a9:68:0e:75:96:76:14:17:13:1a:
                    b2:10:06:e6:75:5c:9a:46:5c:a9:23:14:0e:5d:1d:
                    f7:08:c7:f2:90:3a:bb:f4:f8:fd:31:2d:74:5e:ff:
                    0d:14:7c:fc:d9:fd:57:a5:7b:46:2f:17:ec:fb:ba:
                    4f:a5:e4:18:a8:e7:cf:04:e8:70:b7:21:e4:b7:c0:
                    2e:88:67:91:cb:0e:27:59:5d:51:27:5f:59:8c:c1:
                    a1:4d:e4:bd:8c:c1:cc:52:15:00:b0:31:a1:df:b9:
                    c4:03:4f:0e:2e:b5:ae:57:2e:b0:1b:b5:56:cc:b2:
                    39:c6:1a:18:4e:5b:b7:23:26:c2:df:9d:b6:07:50:
                    dd:b4:f7:55:54:57:f2:7c:f6:84:f4:bc:d8:16:c6:
                    13:88:92:5a:05:54:21:e1:a8:d6:8b:38:ed:28:a3:
                    d7:06:69:bb:2f:4e:98:cc:27:b5:65:99:da:68:a4:
                    5c:34:9f:2b:2b:ee:52:3c:f3:9e:5d:fe:73:61:86:
                    87:ee:ea:9f:22:cc:f2:4e:d9:55:60:5b:5c:a1:9b:
                    75:11:a5:3b:e7:3e:8d:5e:ed:31:07:05:97:42:4c:
                    31:40:5e:13:39:0e:8e:6b:d7:7a:5e:0b:1d:d6:4f:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:BF:B3:38:A5:C6:40:F1:C0:F4:6B:DA:E9:3C:B1:F6:23:99:1F
            X509v3 Authority Key Identifier:
                keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/7VG_szilxkDxwPRr2uk8sfYjmR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:aa:ab:33:e0:20:10:c1:e3:46:4c:91:e2:37:e4:e2:7a:5d:
         96:87:e4:fe:6a:e3:59:d3:af:83:01:c1:bc:47:a5:da:1e:63:
         01:fc:e0:cb:7e:6e:93:e0:01:3c:b3:f8:77:c8:22:ea:f4:ae:
         e6:72:f8:5f:b6:44:89:1c:e1:8d:d4:6a:a0:7e:3e:ef:c8:59:
         65:ee:05:fe:47:c5:b7:ee:64:e6:1e:f8:f1:c7:a9:04:09:31:
         93:4c:e9:85:91:fb:71:68:0a:b9:a0:7c:45:cc:bd:43:d1:c9:
         84:5f:89:78:51:d0:da:0f:e3:09:27:fc:2b:72:9d:a7:47:cf:
         79:e0:22:0e:1a:ad:7e:79:e1:1e:67:84:dd:97:70:3f:76:00:
         00:30:ac:0a:cf:46:0e:ec:cc:b9:41:10:27:2b:0e:cf:93:59:
         c2:f0:61:ca:3f:92:8a:68:58:b8:10:25:de:d5:d7:a8:24:a4:
         fa:94:74:9c:18:0e:29:79:95:7b:e6:0c:14:75:85:93:ed:86:
         14:b1:aa:06:09:4a:b9:60:2c:8c:44:83:49:e5:c9:54:26:05:
         0b:53:74:2c:80:72:f9:77:dc:27:dc:4b:34:b1:09:d7:e2:be:
         88:f1:ac:a5:23:e6:d4:20:b2:77:f4:13:fa:4d:dc:8b:6c:f8:
         5c:c0:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org