Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/mEda8l1kwHcRqrVCGc6wsroyOJI.roa
File:                     mEda8l1kwHcRqrVCGc6wsroyOJI.roa (raw, json)
Hash identifier:          r5ZW0i91lgdzMo/v2XK2iP8BJpBdHq4/44uGPFICXyE=
Subject key identifier:   98:47:5A:F2:5D:64:C0:77:11:AA:B5:42:19:CE:B0:B2:BA:32:38:92
Certificate issuer:       /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial:       0185736856A2AC86F0ED382B36A67A76D43F
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/mEda8l1kwHcRqrVCGc6wsroyOJI.roa
Signing time:             Mon 02 Jan 2023 16:54:55 +0000
ROA not before:           Mon 02 Jan 2023 16:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41505
IP address blocks:        91.208.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:68:56:a2:ac:86:f0:ed:38:2b:36:a6:7a:76:d4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
        Validity
            Not Before: Jan  2 16:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98475af25d64c07711aab54219ceb0b2ba323892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:87:58:a8:20:8f:78:98:89:0e:e4:9f:c4:
                    75:75:70:aa:7e:3d:41:62:59:a8:8a:fa:bb:f1:a6:
                    68:10:2b:89:fe:f2:22:f9:e1:44:1c:00:60:96:98:
                    bc:89:56:26:da:ad:3d:b4:c8:92:9d:64:c3:a3:34:
                    58:0c:a5:3b:20:17:02:d1:a2:3f:54:8b:c0:29:d4:
                    59:18:0b:12:c8:05:06:0c:44:f1:ed:46:9e:7f:f3:
                    18:f6:d6:8d:3e:84:c1:60:6d:7f:4b:ff:7e:79:a9:
                    5d:64:68:99:21:b4:c3:66:29:d1:39:00:32:5d:7e:
                    cc:3b:8d:a8:12:fb:2a:58:72:ac:5e:88:73:8e:72:
                    c8:e6:14:66:79:b3:14:cb:5d:0e:34:18:b3:74:2d:
                    ee:51:42:38:0b:98:0b:51:fb:fc:bd:c9:5d:b8:64:
                    f0:2e:f9:fb:cd:5c:ce:7f:2e:af:7e:da:36:5b:d3:
                    21:ca:d1:b3:0e:f2:d4:8e:a1:1b:70:3d:5a:f3:de:
                    5a:d0:0b:5d:d2:2e:11:46:70:d2:5d:24:a7:40:aa:
                    76:c1:f2:91:0f:1c:c8:71:d2:7f:32:f4:62:80:5d:
                    b0:fe:35:da:45:08:07:06:a3:15:fc:40:47:f6:1b:
                    7e:ac:00:c9:9c:10:a7:9e:62:89:fd:c4:bd:92:d3:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:47:5A:F2:5D:64:C0:77:11:AA:B5:42:19:CE:B0:B2:BA:32:38:92
            X509v3 Authority Key Identifier:
                keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/mEda8l1kwHcRqrVCGc6wsroyOJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:46:03:58:e6:93:4c:78:bb:04:4b:d9:04:d9:69:35:85:dd:
         08:ca:c5:bc:51:97:4e:76:a6:05:3c:63:53:7f:83:40:db:cd:
         1c:64:b5:a1:b3:12:07:24:fd:6e:19:09:bd:9f:e7:69:55:0a:
         69:57:de:34:de:d9:df:fe:1d:1e:7b:a6:b8:32:38:fa:ee:e2:
         71:56:7f:55:e3:7a:28:4d:c8:e0:90:22:fc:3e:61:43:34:89:
         fa:74:95:1a:60:45:e6:8d:58:b9:66:2c:0f:8d:9f:5d:a5:13:
         0b:8a:8d:5e:8a:0c:8c:eb:fa:02:2b:47:8d:69:e3:cb:e0:08:
         c9:e7:e9:61:57:a3:4b:bf:b4:64:a0:4e:92:d0:f1:51:24:5f:
         7c:d3:c7:c4:17:68:ac:d0:3a:a9:11:1c:2d:cf:00:c4:5a:3e:
         ac:e5:be:2e:77:e6:b8:9b:54:2b:4a:e5:53:54:28:9e:60:a7:
         b3:59:71:ea:c8:ce:0c:95:9d:1d:8b:88:6a:7e:dc:5f:a8:d9:
         28:80:b7:56:3a:c8:80:c0:08:a0:97:b8:32:2b:21:e9:e8:39:
         50:9e:4b:c9:dd:d0:3e:cf:77:d6:cd:44:7e:24:b9:79:62:fa:
         e7:0d:82:c2:2c:e4:69:44:37:49:b1:18:7c:3f:b5:4f:21:c9:
         81:89:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:52 2024 by rpki-client on console-ams.rpki-client.org