Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/YSuq_2x1UTW4mCTpxFdBNE9d69Y.roa
File:                     YSuq_2x1UTW4mCTpxFdBNE9d69Y.roa (raw, json)
Hash identifier:          bdbtZ29ZPz4hlhXm6LAMMW5ygI5vzBGZ5ko69UPaS04=
Subject key identifier:   61:2B:AA:FF:6C:75:51:35:B8:98:24:E9:C4:57:41:34:4F:5D:EB:D6
Certificate issuer:       /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial:       018C81F80CE5C7A4839ACF8214E3F1352FAB
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/YSuq_2x1UTW4mCTpxFdBNE9d69Y.roa
Signing time:             Tue 19 Dec 2023 12:06:06 +0000
ROA not before:           Tue 19 Dec 2023 12:06:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31367
IP address blocks:        91.216.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:f8:0c:e5:c7:a4:83:9a:cf:82:14:e3:f1:35:2f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
        Validity
            Not Before: Dec 19 12:06:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=612baaff6c755135b89824e9c45741344f5debd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:d0:11:8c:70:7b:83:9d:fd:41:f2:33:48:
                    1c:79:8d:43:a5:87:ae:e3:26:91:2e:b1:98:81:b6:
                    d1:54:1b:8a:69:4f:57:27:90:b4:15:3c:4d:ec:77:
                    55:41:ab:c5:2a:89:71:77:0a:75:1c:8a:d5:fe:c9:
                    6e:41:c8:ff:21:7d:c7:48:46:d2:63:a0:88:58:58:
                    a5:a8:33:77:9f:62:f8:21:b7:d6:91:e4:c7:e2:fd:
                    bb:d9:a8:32:89:96:70:07:22:06:6c:c3:b0:c2:47:
                    16:57:a9:b7:49:8f:40:98:81:e4:b4:30:11:24:37:
                    95:68:54:bd:be:b4:4d:08:cb:5b:a0:a8:30:ed:99:
                    2c:9e:0f:24:44:5d:92:e1:b4:c2:49:76:00:2d:91:
                    fd:c4:c0:46:52:67:7e:16:4f:5f:e2:61:54:15:b1:
                    1b:9d:fb:32:d6:46:05:6d:67:1f:b5:af:9e:cb:62:
                    bb:c7:64:28:53:25:2d:84:5b:7c:47:95:3d:34:f3:
                    4d:61:1d:92:39:49:34:ab:68:68:5f:6d:d8:98:98:
                    17:52:87:96:5d:bb:1c:c1:45:9c:54:c0:02:38:ac:
                    75:93:81:0e:56:97:c1:67:da:f1:2f:1f:b6:86:5c:
                    a3:ca:c7:aa:c8:0d:b1:c6:3b:40:dd:67:45:6b:bf:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2B:AA:FF:6C:75:51:35:B8:98:24:E9:C4:57:41:34:4F:5D:EB:D6
            X509v3 Authority Key Identifier:
                keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/YSuq_2x1UTW4mCTpxFdBNE9d69Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:62:ff:63:10:40:61:c4:2f:aa:5c:e3:3a:e6:f4:02:07:de:
         6b:39:24:cf:8b:0e:21:3b:36:10:cf:2f:20:b8:01:1c:b2:77:
         52:a1:20:f2:83:f5:9c:b9:b0:a6:7e:1d:b0:76:4a:8b:95:2f:
         ec:d2:c8:1c:6a:81:2b:c7:22:c8:67:ed:4d:ff:4c:37:1c:a1:
         67:e9:d3:a1:f3:68:7f:97:50:f5:a2:9a:3e:d7:c3:c8:d6:dc:
         52:fa:71:41:0c:1e:08:a6:34:1f:b2:5e:62:76:b1:de:e7:72:
         86:6e:28:32:30:21:50:b6:61:8a:4e:f7:da:94:7a:19:b0:13:
         4c:11:97:e4:34:a2:95:99:29:58:26:75:de:9c:c4:83:41:3d:
         2a:1f:8b:59:aa:a7:f8:e9:32:4d:8c:ba:22:1c:e9:39:bd:e8:
         a5:65:54:9c:57:1e:bc:6b:67:00:2a:c6:38:47:a2:58:06:83:
         5d:66:33:dd:a5:41:a4:e8:98:d9:e1:5a:ba:63:2a:f8:52:d9:
         36:ed:1d:7f:e2:ee:50:d6:77:c5:06:c2:df:16:4e:44:46:48:
         70:2a:f0:cb:04:35:77:5f:6f:d0:c1:c0:53:55:d0:5b:ca:f5:
         08:fd:bf:7b:eb:22:e1:d9:ce:d2:57:4b:87:66:ad:71:e8:18:
         85:3d:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org