Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa
File:                     f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa (raw, json)
Hash identifier:          p0jwztMpMlNBLpr2CR3n/O15dab5lhIz9nNK+yna0Wc=
Subject key identifier:   7F:45:34:F9:6F:CF:E8:76:6E:D2:FB:E3:1B:32:35:B9:AF:27:CE:DE
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       0188D87D843547718CF65126C3C835741BD4
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa
Signing time:             Tue 20 Jun 2023 11:08:04 +0000
ROA not before:           Tue 20 Jun 2023 11:08:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31229
IP address blocks:        91.202.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 10:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d8:7d:84:35:47:71:8c:f6:51:26:c3:c8:35:74:1b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Jun 20 11:08:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f4534f96fcfe8766ed2fbe31b3235b9af27cede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:9d:a2:18:fc:fb:f7:8c:63:f7:78:80:c7:
                    5e:51:b4:fd:d3:57:ce:84:af:6f:15:66:82:b9:ca:
                    8e:23:87:31:b7:35:f8:53:bd:b2:b9:9a:b2:ba:43:
                    d0:6d:52:f6:88:66:bd:86:bf:fc:37:4f:0c:3e:f0:
                    46:7f:88:a3:09:c1:63:24:fc:13:29:f3:46:11:7d:
                    10:44:10:38:35:36:06:dd:7a:78:0e:33:1f:92:29:
                    b1:ca:d5:09:21:9a:13:10:72:30:d5:27:98:c0:1c:
                    ab:f9:6f:11:95:a9:90:04:e3:b1:44:1c:ef:97:e8:
                    1b:36:35:65:5f:e0:73:35:19:98:22:17:4e:eb:0e:
                    73:68:f4:93:ec:f0:62:42:ee:2a:9f:ce:24:99:d8:
                    63:9e:b4:fe:7a:26:82:af:88:30:2c:7d:97:01:02:
                    de:01:23:98:8a:49:6d:8a:2f:89:05:6b:ea:09:ef:
                    cf:e6:6e:35:70:59:f8:81:cf:64:2f:e8:68:d4:4e:
                    94:09:70:b5:5c:00:37:32:f7:38:b8:60:de:37:e6:
                    7a:60:e9:83:dc:6d:59:c3:2d:2c:61:86:5e:3d:30:
                    fa:35:f0:b2:c0:bb:1b:37:60:08:7e:36:65:13:94:
                    59:33:67:0b:f6:e8:a5:85:58:42:fd:40:0b:d1:4d:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:34:F9:6F:CF:E8:76:6E:D2:FB:E3:1B:32:35:B9:AF:27:CE:DE
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.202.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:eb:1f:82:9b:b8:44:9b:87:16:7b:6d:8a:b5:c4:bf:7a:
         57:1b:6a:9d:11:8e:5e:e2:e9:bb:85:22:33:f4:47:09:53:55:
         96:b7:79:1d:d9:f0:b2:3a:4b:db:c4:41:78:95:da:30:da:54:
         57:3a:c0:75:d3:8d:2a:cb:74:ac:cc:0f:88:16:b1:52:33:d5:
         f9:db:d9:03:05:fe:d9:87:ac:8c:90:c3:2d:1d:5e:67:40:47:
         7b:55:be:0f:64:21:37:7f:30:19:95:c6:0b:08:59:3d:c3:f3:
         4d:b5:0d:98:17:c7:1e:e8:57:c0:39:1b:36:f5:35:a4:63:ad:
         c3:b8:5d:ca:42:cf:a6:4b:9a:d7:02:ae:f2:8e:29:b8:dd:e6:
         8e:6f:00:51:2e:5b:22:f5:bc:3d:9d:f9:7d:5d:90:09:10:05:
         ee:c6:5c:e7:82:f0:82:a8:b1:e8:df:55:f5:10:6b:26:d4:32:
         52:5e:91:f9:9c:c4:79:65:09:b1:28:2c:5c:e4:e1:32:e0:ab:
         16:08:69:ee:27:ee:c2:0a:5d:b6:93:ec:63:e1:cd:92:1c:bf:
         10:6f:17:6e:97:d8:80:58:b0:23:d5:13:98:94:8b:e3:83:4c:
         76:00:13:ad:52:8c:f7:d3:04:42:dc:85:59:35:b5:73:a8:f8:
         6b:bb:dd:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjYfYQ1R3GM9lEmw8g1dBvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3
ZDJiN2EwHhcNMjMwNjIwMTEwODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjQ1MzRmOTZmY2ZlODc2NmVkMmZiZTMxYjMyMzViOWFmMjdjZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgSdohj8+/eMY/d4gMdeUbT901fO
hK9vFWaCucqOI4cxtzX4U72yuZqyukPQbVL2iGa9hr/8N08MPvBGf4ijCcFjJPwT
KfNGEX0QRBA4NTYG3Xp4DjMfkimxytUJIZoTEHIw1SeYwByr+W8RlamQBOOxRBzv
l+gbNjVlX+BzNRmYIhdO6w5zaPST7PBiQu4qn84kmdhjnrT+eiaCr4gwLH2XAQLe
ASOYikltii+JBWvqCe/P5m41cFn4gc9kL+ho1E6UCXC1XAA3Mvc4uGDeN+Z6YOmD
3G1Zwy0sYYZePTD6NfCywLsbN2AIfjZlE5RZM2cL9uilhVhC/UAL0U1rQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9FNPlvz+h2btL74xsyNbmvJ87eMB8GA1UdIwQY
MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt
NGZiNGVmOTFhODJmLzEvZjBVMC1XX1A2SFp1MHZ2akd6STF1YThuenQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm
LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8plMA0G
CSqGSIb3DQEBCwUAA4IBAQCalesfgpu4RJuHFnttirXEv3pXG2qdEY5e4um7hSIz
9EcJU1WWt3kd2fCyOkvbxEF4ldow2lRXOsB1040qy3SszA+IFrFSM9X529kDBf7Z
h6yMkMMtHV5nQEd7Vb4PZCE3fzAZlcYLCFk9w/NNtQ2YF8ce6FfAORs29TWkY63D
uF3KQs+mS5rXAq7yjim43eaObwBRLlsi9bw9nfl9XZAJEAXuxlzngvCCqLHo31X1
EGsm1DJSXpH5nMR5ZQmxKCxc5OEy4KsWCGnuJ+7CCl22k+xj4c2SHL8Qbxdul9iA
WLAj1ROYlIvjg0x2ABOtUoz30wRC3IVZNbVzqPhru93F
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org