Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Ei-0GJ2jr2a4VtB0t9a7TuL7bgM.roa
File:                     Ei-0GJ2jr2a4VtB0t9a7TuL7bgM.roa (raw, json)
Hash identifier:          0YKpUrshCI1w8jA0EBx7PWbsNdMTC5XJiDvxJiNZeoE=
Subject key identifier:   12:2F:B4:18:9D:A3:AF:66:B8:56:D0:74:B7:D6:BB:4E:E2:FB:6E:03
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01856C7856BE6A1B2C097E4C4DE2FF0DB916
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Ei-0GJ2jr2a4VtB0t9a7TuL7bgM.roa
Signing time:             Sun 01 Jan 2023 08:35:03 +0000
ROA not before:           Sun 01 Jan 2023 08:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        91.239.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Sep 2023 07:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:56:be:6a:1b:2c:09:7e:4c:4d:e2:ff:0d:b9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan  1 08:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=122fb4189da3af66b856d074b7d6bb4ee2fb6e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:6d:77:2f:b5:a7:b0:40:b9:46:ea:f7:4b:
                    0f:13:91:57:e1:14:1c:c9:eb:5d:66:db:04:33:2e:
                    21:ca:bc:20:82:b7:89:dd:21:4d:36:36:d4:c1:7d:
                    f2:4f:f6:ae:49:23:e0:3f:ff:5f:bc:3e:6f:48:ca:
                    90:a3:44:8f:15:d0:c8:c3:49:52:3b:7e:61:8c:c4:
                    65:9c:2e:fa:3b:2d:f9:46:84:0a:79:e9:a8:e6:67:
                    89:47:5f:74:96:d5:a0:13:82:51:11:d6:74:76:4c:
                    be:4b:13:57:1d:fc:04:6b:bb:fa:50:a8:be:01:d3:
                    11:ee:a3:4b:62:72:c1:23:45:57:57:ee:7c:a1:a7:
                    d3:08:59:dd:9b:c3:71:6d:83:b0:29:99:83:14:76:
                    c9:42:c4:78:f4:3a:3f:83:6c:92:0d:eb:09:24:c3:
                    68:2d:77:6f:08:fb:79:8f:9a:48:ff:04:87:d9:a2:
                    c4:47:a7:11:46:0e:ca:77:ba:0c:c9:ab:74:38:10:
                    93:5d:fa:24:a0:bc:c9:ae:d9:20:65:4b:69:06:38:
                    bd:64:b6:53:e7:58:f5:0d:9b:6a:5a:1e:7b:9a:28:
                    2e:a6:11:fe:9a:3d:a8:76:09:f3:c0:9b:6d:f6:19:
                    3e:91:b4:05:8d:c7:22:43:0d:51:24:6c:da:2e:c0:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:B4:18:9D:A3:AF:66:B8:56:D0:74:B7:D6:BB:4E:E2:FB:6E:03
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Ei-0GJ2jr2a4VtB0t9a7TuL7bgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:ac:69:a6:46:1f:48:07:b1:18:b5:c7:52:25:89:ef:74:
         4e:4a:53:86:4e:55:4e:21:4d:39:d8:2e:06:d1:ef:c7:00:17:
         de:2c:5d:31:25:dd:89:48:53:4f:62:34:d2:d3:2f:72:31:05:
         90:79:ee:8d:6d:0c:d5:28:e9:24:82:25:3e:00:c5:2a:93:6d:
         07:94:26:2a:31:67:6f:11:70:8a:57:db:a7:97:70:d7:29:c9:
         8e:33:c7:3c:b3:c5:b2:08:b9:2a:41:12:00:0b:26:01:f2:f9:
         8f:01:5b:62:28:b1:40:96:2c:30:36:b9:5c:cd:89:95:20:26:
         88:4b:37:44:db:90:0e:62:06:a8:2e:fa:a8:bb:27:c7:10:28:
         37:16:a6:90:9b:e5:3e:c3:58:7c:78:29:b5:9d:64:c9:80:5e:
         d8:2c:e6:b6:e2:66:b7:38:64:ee:30:df:ec:ec:c2:db:be:ac:
         90:86:bf:a4:dc:a2:c7:af:43:2c:89:e5:fd:2e:c4:44:80:d3:
         86:62:63:cb:4a:bf:1e:70:65:d5:91:d7:d9:39:f8:0e:7a:3d:
         be:05:73:54:5f:0b:23:01:95:a8:86:84:de:f0:6b:ff:c3:65:
         89:27:e8:07:f2:12:05:45:6a:7d:ae:d2:1d:c7:5e:43:69:c9:
         79:a2:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org