Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/vMyfn3coPQO9LCsCPaguB460_4M.roa
File:                     vMyfn3coPQO9LCsCPaguB460_4M.roa (raw, json)
Hash identifier:          kvYA2lBGBXxY/HDSKhBBrGzoIbBDaHR3Xgyxu2JFBNg=
Subject key identifier:   BC:CC:9F:9F:77:28:3D:03:BD:2C:2B:02:3D:A8:2E:07:8E:B4:FF:83
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01895E1979C240F4EF489687A1BD49F4C0A8
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/vMyfn3coPQO9LCsCPaguB460_4M.roa
Signing time:             Sun 16 Jul 2023 09:47:55 +0000
ROA not before:           Sun 16 Jul 2023 09:47:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211826
IP address blocks:        91.244.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Sep 2023 07:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:5e:19:79:c2:40:f4:ef:48:96:87:a1:bd:49:f4:c0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jul 16 09:47:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bccc9f9f77283d03bd2c2b023da82e078eb4ff83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:5f:90:fa:e2:8a:f3:72:66:f6:c8:35:bb:
                    40:ce:9a:28:1a:8a:1b:24:64:1a:db:47:b4:93:cd:
                    d3:5b:d2:73:aa:4a:83:9a:cb:cf:a3:1e:46:81:71:
                    af:7f:47:0f:0c:0d:ce:b4:98:39:18:9a:aa:c2:04:
                    9d:99:9c:0d:3a:73:b8:5a:6d:f1:65:af:72:cf:21:
                    36:5d:9c:ac:c8:d6:04:f6:a3:45:9f:14:c9:9b:f8:
                    bb:af:da:93:51:bb:d1:b5:3d:70:09:69:d3:b9:aa:
                    43:a7:af:3b:3d:4c:a9:9e:a5:7c:1e:5a:af:9f:08:
                    d6:ed:d1:a9:7d:94:ab:f8:e9:cf:21:bf:89:27:13:
                    c4:fe:ee:dc:c3:af:6e:57:34:f4:02:24:26:e0:92:
                    fe:9a:60:92:91:3d:fe:e4:b6:63:28:61:17:8e:2d:
                    9d:17:14:ee:5c:34:ac:9b:d6:8f:2d:1e:23:69:57:
                    76:a2:b4:ab:4e:da:61:64:f0:68:88:e4:96:8b:ff:
                    35:b9:5a:a1:0e:8a:d5:b1:3b:98:17:1a:0b:4e:51:
                    0b:04:81:be:4d:09:1a:fe:26:a1:59:12:6b:52:b6:
                    19:0d:35:1b:c8:f3:69:96:91:18:c4:c6:35:0a:6e:
                    3f:c4:7c:77:ab:29:4b:8a:67:90:9e:52:38:3a:d2:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:9F:9F:77:28:3D:03:BD:2C:2B:02:3D:A8:2E:07:8E:B4:FF:83
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/vMyfn3coPQO9LCsCPaguB460_4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:76:12:c2:94:ce:14:d6:51:c3:89:f2:fa:f5:f9:17:96:fc:
         61:39:d1:0a:61:fc:16:67:26:c3:f9:0f:6c:87:79:02:81:da:
         f7:9d:64:10:f6:f9:9e:e4:f7:c6:ae:c4:83:a9:e4:ad:64:ac:
         6d:99:9d:8d:80:7d:35:c3:59:03:06:86:fd:46:cc:a0:aa:b3:
         c6:8b:6d:b9:43:e2:4d:44:9f:9e:e7:77:ba:75:fc:0a:e1:5b:
         f7:d6:9c:db:08:cf:b6:b9:25:54:54:1e:86:ab:dd:b8:8f:f7:
         53:e4:30:0d:36:f2:95:be:f0:24:83:fa:c7:09:fb:ba:d9:5b:
         e9:06:32:e1:64:c6:4b:7e:3a:7a:d1:8b:5b:b1:2e:0c:60:95:
         b9:0f:d8:8d:d0:9b:14:1b:2d:dd:39:59:08:93:79:e9:54:77:
         2e:38:1c:94:a2:ba:1d:f4:9a:94:8f:9b:7e:6c:51:91:46:52:
         a7:87:cb:e9:3b:f8:87:2a:86:b1:89:b9:39:e8:8c:fc:1d:9d:
         8f:2a:5a:9a:72:00:22:8d:2d:af:f9:4d:17:4b:55:67:07:22:
         04:e6:a6:57:97:10:cf:e1:5d:a8:23:6d:4c:e3:2c:11:a1:1b:
         3f:2f:ed:19:ac:0c:29:06:0b:58:af:3d:84:12:8c:03:06:db:
         d6:50:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org