Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/YHm8iCisTNPxhWDrV-tYpg0cxyc.roa
File:                     YHm8iCisTNPxhWDrV-tYpg0cxyc.roa (raw, json)
Hash identifier:          AL4y3nT5opDifXy0cjUPTwmcKG8uZgMUpbmibF7TaUI=
Subject key identifier:   60:79:BC:88:28:AC:4C:D3:F1:85:60:EB:57:EB:58:A6:0D:1C:C7:27
Certificate issuer:       /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial:       018A02569ABACF4A819517B94A156D938C87
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/YHm8iCisTNPxhWDrV-tYpg0cxyc.roa
Signing time:             Thu 17 Aug 2023 07:12:24 +0000
ROA not before:           Thu 17 Aug 2023 07:12:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60667
IP address blocks:        91.132.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:02:56:9a:ba:cf:4a:81:95:17:b9:4a:15:6d:93:8c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
        Validity
            Not Before: Aug 17 07:12:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6079bc8828ac4cd3f18560eb57eb58a60d1cc727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:e9:2f:1e:b5:83:04:ce:ad:20:f1:7e:75:
                    b3:16:38:d0:9d:00:11:96:dd:05:73:ce:d7:9f:d2:
                    de:4c:58:e7:cb:2e:23:5f:3c:e1:f9:24:17:5b:5d:
                    79:ac:9b:96:45:e8:fe:9d:24:9e:b5:aa:41:e7:d0:
                    88:bf:23:8d:3b:a6:26:5a:2f:e3:43:f3:79:b7:9d:
                    a4:f6:85:f9:dc:b0:ff:d2:f8:d2:11:55:46:03:26:
                    ca:c6:c9:3c:ad:d7:d6:7e:bb:a5:ba:2e:68:bd:15:
                    b1:88:36:19:e3:48:74:0a:4f:0b:ca:fd:be:e2:df:
                    c2:fe:0b:b5:af:c7:60:82:a0:d0:73:64:ab:d1:bc:
                    cd:e3:2a:fc:f7:2c:f3:c3:26:2e:b8:a4:5e:d8:d3:
                    36:69:c6:1e:af:48:61:58:b3:89:9f:c1:4c:e1:b9:
                    26:27:a2:a6:15:6b:d2:5f:7e:5b:58:54:23:d5:ba:
                    1d:9d:1d:54:13:3c:66:a1:3b:bd:bf:08:a8:4f:84:
                    2c:c0:69:ec:89:50:13:de:99:9c:d9:07:2c:9d:7a:
                    74:3b:ae:db:82:4f:06:11:17:11:15:cf:ff:e1:b9:
                    3d:d2:94:d2:1c:46:92:05:f0:e9:4f:12:3e:84:b0:
                    12:48:2a:90:f8:58:bc:34:70:e1:cc:ae:b6:21:4c:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:79:BC:88:28:AC:4C:D3:F1:85:60:EB:57:EB:58:A6:0D:1C:C7:27
            X509v3 Authority Key Identifier:
                keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/YHm8iCisTNPxhWDrV-tYpg0cxyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.132.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:9a:18:96:b5:e2:b9:34:b3:60:72:36:f9:98:1a:f7:0e:
         e7:72:32:a1:b4:fe:23:57:af:8a:1e:50:22:1f:47:e2:90:b9:
         fc:bf:30:80:e4:e0:e7:42:f4:92:e9:19:50:cd:d0:83:dc:1d:
         9d:e4:29:f8:93:7c:df:e1:f7:99:06:c7:b9:ba:e9:36:f6:7d:
         8d:10:49:71:58:b1:73:d7:51:f5:10:e1:c4:97:a2:fa:28:c8:
         50:f1:84:99:d3:66:3b:35:0b:e7:46:14:dd:29:0d:7a:8b:35:
         27:15:20:5e:0e:e6:7d:d6:e6:4e:67:36:29:a5:ee:d6:70:d8:
         c8:e9:3b:27:f3:43:a0:91:ac:ca:8e:65:8b:79:55:18:fb:c1:
         06:e3:1c:73:6a:6b:3b:ba:d0:f8:58:59:54:44:00:47:d4:a2:
         9b:fe:db:95:8b:a7:30:54:92:9e:37:82:09:ac:dc:29:08:32:
         76:67:af:ff:4a:a1:59:17:ca:ad:c1:21:b3:f7:e0:b5:d2:d0:
         8c:be:03:4d:f2:57:46:26:c1:5b:79:c0:6b:55:9e:43:b2:20:
         d5:52:29:a6:62:5c:e4:34:e5:3c:fd:5d:3b:94:86:60:a6:de:
         e5:14:1b:09:bf:52:cb:9e:3b:8e:75:92:74:c9:e9:c5:07:09:
         fc:a0:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:40 2024 by rpki-client on console-fra.rpki-client.org