Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/AGytniVR5FgxXkRtcwAjsuUxaZk.roa
File:                     AGytniVR5FgxXkRtcwAjsuUxaZk.roa (raw, json)
Hash identifier:          Kf26VQ2F7Z1DX+iX9X0yCi61tzpsTfcJU2wOKVdhYaU=
Subject key identifier:   00:6C:AD:9E:25:51:E4:58:31:5E:44:6D:73:00:23:B2:E5:31:69:99
Certificate issuer:       /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial:       01879A065F06038D44DF609986873E8E0129
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/AGytniVR5FgxXkRtcwAjsuUxaZk.roa
Signing time:             Wed 19 Apr 2023 14:58:41 +0000
ROA not before:           Wed 19 Apr 2023 14:58:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60759
IP address blocks:        188.95.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9a:06:5f:06:03:8d:44:df:60:99:86:87:3e:8e:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
        Validity
            Not Before: Apr 19 14:58:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=006cad9e2551e458315e446d730023b2e5316999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:6f:aa:84:ef:65:59:61:da:18:ce:eb:6b:
                    0e:90:ea:f9:72:78:fe:be:ec:73:bf:d0:30:3b:2c:
                    33:b4:3a:c6:2f:81:e1:91:65:d0:53:65:8f:6c:bd:
                    26:3a:a4:6f:54:05:dc:ca:7a:b8:72:91:10:e5:16:
                    f3:c5:cc:02:c3:7f:a4:16:66:69:9b:f2:85:25:8c:
                    98:95:29:1a:5c:fe:5e:52:f8:2e:c9:08:09:16:6a:
                    22:52:7c:fc:2c:25:6c:c1:c9:f7:04:db:01:30:95:
                    17:c2:d2:40:92:72:fa:7d:af:31:9a:2e:a0:d1:ec:
                    90:b9:ed:d2:cc:61:ec:c6:10:a9:e3:f7:a8:cc:44:
                    36:bb:b3:e5:4d:69:84:4b:73:ff:f1:14:1a:f5:23:
                    67:ff:20:f6:41:f6:7e:8f:08:40:ba:aa:40:79:4b:
                    01:79:64:3e:b0:4b:6d:af:53:4a:76:e8:f4:3c:1f:
                    d2:34:24:23:e7:a2:3f:62:ac:bf:aa:96:17:33:45:
                    10:40:2e:81:38:a7:60:5b:f3:4c:20:b5:e6:e4:a7:
                    a7:b7:f3:a8:6e:d5:e1:ed:c1:c6:01:aa:44:9d:f1:
                    dd:c2:35:fc:ee:df:74:88:9e:8f:80:3f:9b:3b:0d:
                    f7:15:0b:ef:28:49:79:71:29:d7:d7:5b:7b:91:fe:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6C:AD:9E:25:51:E4:58:31:5E:44:6D:73:00:23:B2:E5:31:69:99
            X509v3 Authority Key Identifier:
                keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/AGytniVR5FgxXkRtcwAjsuUxaZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a7:1c:30:37:8d:75:26:56:e1:b5:ee:8c:6a:f0:a1:61:32:
         68:be:69:75:4c:00:2e:bc:25:70:a2:91:bb:d8:40:b0:12:18:
         e4:93:88:fc:8c:3c:ad:cb:3c:03:da:78:dc:3a:8c:ab:eb:22:
         a2:76:cb:cf:39:9b:22:3f:39:a9:39:ee:f6:63:d6:be:36:af:
         c5:e2:3c:e1:e5:c0:c2:59:b6:66:88:6a:fb:2d:34:bc:83:ed:
         9f:01:fa:cd:38:cb:ad:f7:c6:8b:4a:f5:8e:1e:72:61:8e:75:
         3c:ff:c6:10:04:44:55:89:11:bc:7c:d2:9c:6c:c9:02:e0:6b:
         9c:e2:49:19:e3:e2:1f:12:b9:92:db:d4:41:db:c0:88:cc:ac:
         07:40:55:b5:f5:25:6c:2c:cd:34:b6:a0:e8:9f:05:cc:82:33:
         5e:d3:ec:4c:90:96:6c:4e:51:32:d7:c1:70:c5:73:f1:ac:b1:
         17:d6:63:a1:6d:46:45:5c:be:1c:c3:9a:0a:eb:36:b9:12:2c:
         60:43:fe:3a:91:9e:37:42:9e:0b:44:6e:90:d6:6a:4c:3d:b5:
         4c:3b:6b:4a:e4:d6:f0:e4:d3:6d:03:4e:84:5e:5b:93:0a:d2:
         4c:2f:b7:19:0f:32:40:1e:04:1c:d0:63:ec:98:a7:25:2b:76:
         c7:20:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:45 2024 by rpki-client on console-ams.rpki-client.org