Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/pqXrQk-HpdBElS4nkDRk7LxR8Ps.roa
File:                     pqXrQk-HpdBElS4nkDRk7LxR8Ps.roa (raw, json)
Hash identifier:          8CbVdzWp60Dfg51as14rybIgtVYXYkSXYQXbxvq8UJc=
Subject key identifier:   A6:A5:EB:42:4F:87:A5:D0:44:95:2E:27:90:34:64:EC:BC:51:F0:FB
Certificate issuer:       /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial:       018FE92D3FB2BA6828B68E9EB6BAF0A490F1
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/pqXrQk-HpdBElS4nkDRk7LxR8Ps.roa
Signing time:             Wed 05 Jun 2024 16:13:27 +0000
ROA not before:           Wed 05 Jun 2024 16:13:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 12:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e9:2d:3f:b2:ba:68:28:b6:8e:9e:b6:ba:f0:a4:90:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
        Validity
            Not Before: Jun  5 16:13:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a6a5eb424f87a5d044952e27903464ecbc51f0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2f:3a:88:6f:82:c2:2b:b5:eb:19:9d:6d:59:
                    dc:83:88:d9:0e:e4:39:d0:ae:0d:24:df:8f:75:68:
                    bc:5d:13:da:0c:32:6c:12:90:2c:2c:00:b3:91:a3:
                    c5:cc:bd:37:55:9a:86:92:0e:73:28:33:3a:08:16:
                    e9:2a:2f:f9:5c:e1:29:a1:4d:7c:bf:09:96:ea:18:
                    f4:37:4b:21:db:d9:8f:13:bc:da:f7:00:52:0e:ea:
                    30:e5:10:91:5f:61:7a:2e:ea:77:5a:6c:62:2f:e1:
                    ee:f8:16:f4:21:07:41:a1:f6:6f:33:dd:2d:aa:a9:
                    6e:92:eb:0f:99:73:f0:72:1b:f8:65:86:8f:24:64:
                    e9:e1:c5:07:aa:ae:07:a9:30:ca:ae:84:b4:72:18:
                    be:4c:95:8c:14:43:20:f4:a1:cf:74:8a:cf:c7:fd:
                    6d:d7:a3:bf:35:6d:c4:69:76:4a:d2:64:63:71:1c:
                    95:88:0f:68:65:2d:d0:8d:c5:ab:ef:33:3b:29:cd:
                    75:8f:20:7d:87:23:a6:f8:c1:68:62:bf:b2:0a:09:
                    0e:a3:c8:aa:7f:41:0b:84:07:45:39:fb:96:ce:cf:
                    23:98:3e:8c:47:98:04:6d:8c:9c:97:e3:5f:7a:cc:
                    21:22:13:e5:8b:07:28:47:39:1b:80:60:74:da:04:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:EB:42:4F:87:A5:D0:44:95:2E:27:90:34:64:EC:BC:51:F0:FB
            X509v3 Authority Key Identifier:
                keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/pqXrQk-HpdBElS4nkDRk7LxR8Ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:1b:88:f1:70:93:46:07:b0:b5:4a:bc:df:1f:16:df:1e:
         f8:5a:e9:28:06:7a:1a:eb:94:17:74:9e:bc:77:8d:d0:9d:fe:
         bd:8d:f5:2d:e4:e1:32:37:ff:5a:71:22:a8:70:c6:ad:58:4a:
         63:2e:e1:88:aa:52:f4:53:fb:70:5b:42:df:f8:75:6a:09:7f:
         b1:03:56:28:b1:8a:c3:fe:5a:56:3e:ec:88:fc:2c:ee:f8:30:
         55:c1:1c:a7:67:ef:cb:45:72:d8:1c:d7:fd:fe:58:79:02:5c:
         63:14:9f:29:7f:48:e5:18:83:c8:d5:5d:d0:67:f4:a0:a1:6e:
         46:11:b1:b2:9c:e6:88:43:aa:37:6a:76:c9:d2:2b:56:8e:6a:
         b1:58:92:d4:82:bb:ca:5a:3f:5f:7a:db:94:b8:11:0a:c4:f4:
         e4:d9:96:3f:2a:80:b5:74:b6:e6:13:1d:08:7d:2a:9a:f7:db:
         8b:f3:ff:68:aa:73:23:1d:02:29:a8:28:48:24:6e:54:7a:5b:
         17:cd:f2:fb:3d:ba:ee:f4:00:a4:d0:5a:ac:9d:7e:38:70:72:
         cc:f2:a4:40:dc:cb:4a:f6:f8:43:9f:2d:73:6f:ce:09:71:e1:
         a8:5b:6c:fe:93:bc:ce:1f:15:65:fd:e7:69:79:d0:e5:24:a5:
         35:e4:91:be
-----BEGIN CERTIFICATE-----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 at Sun Jun 16 13:50:09 2024 by rpki-client on console-fra.rpki-client.org