Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/33Pvsrww2U41xWTc7J8pc4pNxhM.roa
File:                     33Pvsrww2U41xWTc7J8pc4pNxhM.roa (raw, json)
Hash identifier:          ORWJYej07vO6RrVIONVICgxKQLKnLr8bn8TrAtRCzhs=
Subject key identifier:   DF:73:EF:B2:BC:30:D9:4E:35:C5:64:DC:EC:9F:29:73:8A:4D:C6:13
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0185708CDFAC13AA3ABE9915DD7290A185D5
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/33Pvsrww2U41xWTc7J8pc4pNxhM.roa
Signing time:             Mon 02 Jan 2023 03:35:58 +0000
ROA not before:           Mon 02 Jan 2023 03:35:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47216
IP address blocks:        91.186.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:df:ac:13:aa:3a:be:99:15:dd:72:90:a1:85:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan  2 03:35:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df73efb2bc30d94e35c564dcec9f29738a4dc613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:85:93:ca:16:8f:e5:05:a8:5b:47:a4:e6:
                    08:35:22:1c:dc:cf:02:1a:d0:f7:2d:ba:60:d3:b9:
                    72:16:b1:64:dc:ad:66:5e:31:f3:96:68:5e:57:b4:
                    eb:4b:de:45:73:dc:3d:02:f1:75:17:a8:c8:7f:72:
                    a8:c9:0f:8c:ce:cd:df:bb:16:ea:14:02:66:5b:b4:
                    6a:b3:a6:d0:91:0e:d0:22:66:9a:fa:55:93:18:c8:
                    ca:91:f4:78:80:36:68:7d:a1:5b:f2:81:fd:fd:58:
                    ed:c2:c8:fb:1f:73:0c:f3:9c:56:4d:e5:17:b2:bb:
                    77:b4:d4:ca:4c:cc:67:a2:17:f6:bc:5f:bb:5a:c3:
                    66:76:9d:d5:bb:9f:41:da:94:7e:5f:8e:be:c9:a7:
                    b7:7a:76:78:76:13:29:7c:42:ca:e2:f6:be:4a:51:
                    05:4a:99:37:88:04:0a:3d:a3:11:cb:d3:66:4d:8a:
                    11:98:f2:6e:89:52:e5:5b:fd:a8:f1:4a:4c:d7:f4:
                    52:32:07:3a:24:2e:1e:54:8d:e7:9a:a9:aa:a1:f1:
                    25:f5:63:fb:38:0b:33:0b:a3:07:e3:7c:4b:78:0b:
                    f5:01:e0:a3:c9:78:77:bb:8b:12:6e:d6:28:2f:f7:
                    91:0b:90:29:93:80:80:7b:1f:42:d5:5f:3a:75:a0:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:EF:B2:BC:30:D9:4E:35:C5:64:DC:EC:9F:29:73:8A:4D:C6:13
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/33Pvsrww2U41xWTc7J8pc4pNxhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.186.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:14:47:97:77:e4:a7:76:bf:02:f8:b2:99:a1:08:a8:20:7e:
         7e:2e:53:47:aa:94:b7:b6:e8:25:08:34:f6:08:9e:a6:3c:82:
         69:60:bc:04:87:a8:27:a4:fe:92:c2:76:77:9a:1f:74:f0:49:
         5c:63:4c:36:25:de:5e:de:14:cb:e1:89:5e:f6:71:c8:9f:10:
         b6:8f:b8:0f:af:5a:7c:2a:aa:6e:62:6d:51:02:4e:8f:71:c1:
         7d:bc:03:1d:c2:a0:eb:1e:f6:d4:dd:80:38:27:3d:2b:b6:0f:
         eb:16:de:d6:91:69:0b:f9:2b:a3:02:ef:85:c7:d0:c9:af:e4:
         b9:6b:fc:62:c9:fe:82:4e:4b:c5:6d:5c:c0:86:34:c7:79:8b:
         04:55:62:31:41:67:1f:06:3b:e3:f6:28:63:14:16:1c:93:19:
         27:d4:ad:29:3d:05:b0:4f:67:50:f7:61:61:6c:46:6a:54:1b:
         02:be:eb:d7:f8:01:b9:1e:48:26:83:97:e4:7a:1f:a3:1b:da:
         7c:e3:27:5e:c4:f0:1f:1e:1e:3b:84:38:1d:bf:ce:7a:bd:c3:
         08:a8:55:8b:51:ed:2d:fc:91:c6:b7:6a:55:df:be:95:0a:22:
         ae:b6:e2:df:1e:d4:eb:a6:21:c3:b8:6a:a0:6e:28:dd:ea:cb:
         3a:0a:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org