Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa
File:                     5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa (raw, json)
Hash identifier:          QFLy1dECVynFckQoyWug+3Ro7pH9uSy+VwWmMyzJo/g=
Subject key identifier:   E4:B4:FA:47:86:A3:F9:17:22:FE:8B:78:36:FC:1F:47:3A:18:F9:7C
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       018A8CA09ADD64C19A77F31330AE7E7AD223
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa
Signing time:             Wed 13 Sep 2023 03:40:50 +0000
ROA not before:           Wed 13 Sep 2023 03:40:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14445
IP address blocks:        91.237.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:a0:9a:dd:64:c1:9a:77:f3:13:30:ae:7e:7a:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Sep 13 03:40:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4b4fa4786a3f91722fe8b7836fc1f473a18f97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:32:ea:88:95:ab:71:2a:a4:65:31:3c:80:
                    9c:65:d4:27:09:58:6f:ca:13:45:bf:e1:b1:dc:90:
                    91:f0:6a:94:2c:c8:35:0a:00:55:55:cf:5b:e0:88:
                    c9:bd:70:1a:97:64:f7:83:51:c0:47:96:fa:21:4b:
                    8f:bf:b9:55:88:3d:96:cb:e3:05:e1:8e:71:a0:c3:
                    5c:9c:a3:91:7f:60:67:53:78:1c:fa:ad:3c:65:20:
                    4b:9c:a2:41:b1:5f:27:17:fc:17:bf:95:18:08:96:
                    d1:3d:7b:f9:75:1e:75:54:6b:7b:54:89:13:06:19:
                    db:91:fb:d3:c7:b1:63:bd:dd:af:ad:67:4c:23:83:
                    fa:5e:45:fc:09:97:33:2c:0a:6d:fa:ce:49:1f:5c:
                    13:03:2c:09:87:76:dc:8d:0b:4b:be:2b:0d:c4:f3:
                    db:c3:55:ab:70:d5:dc:19:f6:90:22:0c:41:fd:52:
                    b1:35:7c:64:87:c2:5d:7a:51:59:21:66:fb:65:4f:
                    f1:2b:ca:c7:5d:1a:d0:30:e7:8c:c8:1a:e1:b0:ba:
                    cc:82:9e:20:55:f2:b8:04:26:d6:5f:01:f9:bb:c6:
                    cf:9d:47:a0:68:9a:e4:bb:cd:8c:e2:30:ed:0d:4e:
                    3f:1d:d1:ff:ae:02:29:3a:98:07:fc:e5:b8:6e:7d:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:FA:47:86:A3:F9:17:22:FE:8B:78:36:FC:1F:47:3A:18:F9:7C
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:82:4a:b3:c2:47:b3:c4:a2:95:86:80:c7:1f:55:d9:47:7b:
         29:8a:8e:fc:99:ff:94:cb:d4:71:23:17:0f:df:a2:f3:36:ab:
         ad:da:26:13:25:06:54:b5:c4:3d:2c:bb:60:eb:14:1b:48:7f:
         4e:3e:2f:69:b7:65:f9:92:c4:1c:15:b3:0b:66:d2:dc:37:26:
         fd:22:03:bc:20:b5:a5:0e:e1:7e:bd:9b:8e:45:9e:d2:74:d5:
         49:9b:b3:b3:de:99:51:81:5f:d6:a6:4b:09:12:8b:d6:4e:3b:
         60:29:b5:3e:7a:ac:0c:d7:5e:e6:30:78:2f:35:e2:d3:28:6c:
         6f:fa:7d:ac:51:e7:bc:24:40:75:15:4b:c8:6c:18:df:61:d9:
         6b:86:86:84:bb:63:b7:e6:51:78:01:41:db:e3:3d:fc:bc:f6:
         f6:51:1b:69:6c:36:1e:74:93:38:ae:95:b1:07:df:99:f0:e9:
         6c:07:37:70:fb:50:2a:ce:f2:cf:fb:3c:21:cb:bc:23:0b:8e:
         6d:3a:97:d2:12:b9:f4:1b:af:81:ab:ae:19:27:67:3c:01:2c:
         bf:6a:e9:f6:60:7b:63:cb:72:ed:6a:4c:47:db:25:c1:2e:ee:
         b4:da:e5:6d:5a:c6:2d:10:ec:24:f8:f0:84:fb:bf:25:b2:29:
         21:db:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:48 2024 by rpki-client on console-ams.rpki-client.org