Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qZj8Kkc8jENHUPs7FqyYj3xjdec.roa
File:                     qZj8Kkc8jENHUPs7FqyYj3xjdec.roa (raw, json)
Hash identifier:          vR1wf5g5WbyHL/eD+ZGHQ4Oi5noGXPwUxC1Ma//leCI=
Subject key identifier:   A9:98:FC:2A:47:3C:8C:43:47:50:FB:3B:16:AC:98:8F:7C:63:75:E7
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018809DFEA1ED8725F8B82F55F468FCCC70A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qZj8Kkc8jENHUPs7FqyYj3xjdec.roa
Signing time:             Thu 11 May 2023 08:14:09 +0000
ROA not before:           Thu 11 May 2023 08:14:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25446
IP address blocks:        91.103.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jul 2023 19:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:09:df:ea:1e:d8:72:5f:8b:82:f5:5f:46:8f:cc:c7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: May 11 08:14:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a998fc2a473c8c434750fb3b16ac988f7c6375e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:35:b1:39:7e:f5:a2:ee:08:e2:62:66:f8:
                    cc:8c:58:81:46:66:11:72:8c:e8:9f:fe:66:c9:55:
                    9a:86:6f:c3:7e:a3:4a:20:17:38:65:dc:5d:39:c0:
                    67:7d:03:7e:e3:5d:97:02:95:6c:f2:43:fe:94:e1:
                    1d:aa:6d:f5:75:d1:75:16:64:3b:a0:40:20:ca:0a:
                    a1:14:17:98:bb:5e:dd:74:27:92:b3:fd:68:fb:33:
                    3b:80:f2:a1:f2:3e:36:26:15:a1:98:ed:16:b0:87:
                    4e:59:37:6e:a2:b4:ef:1a:86:0a:a1:31:d9:4a:21:
                    6e:ff:df:df:5e:bd:e2:3f:98:c1:27:49:ac:78:66:
                    bb:93:bf:c2:59:fe:be:db:b1:7d:61:dc:15:c1:73:
                    73:f9:26:55:30:0b:a8:f6:50:79:24:ac:22:e7:25:
                    c6:1b:07:f3:70:14:b8:6c:42:54:25:f6:57:57:44:
                    d8:f4:c0:e6:4d:cb:6a:69:e9:a1:35:e1:9f:0a:53:
                    de:22:a0:5a:25:9f:8a:ac:8b:cb:2a:3d:bd:f7:9a:
                    e2:c5:10:22:95:40:a2:bb:38:95:d5:2d:72:7e:77:
                    e2:20:d4:6f:cc:77:ca:6e:90:fe:80:13:97:7a:5a:
                    e9:ac:d8:f0:89:1d:81:e4:48:0a:0f:6a:b9:01:ff:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:98:FC:2A:47:3C:8C:43:47:50:FB:3B:16:AC:98:8F:7C:63:75:E7
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/qZj8Kkc8jENHUPs7FqyYj3xjdec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:3f:82:5f:14:80:5e:1d:e3:8a:10:8e:7b:d0:10:13:68:
         4d:24:54:4e:6b:4f:27:e4:1f:5b:c9:77:bb:0e:81:2c:47:c1:
         0d:b6:f7:08:d9:fc:31:e7:26:c6:a6:22:1f:5f:fc:84:a2:3b:
         90:ef:35:87:ec:bc:ed:ab:0b:24:ab:b3:97:31:13:bb:1b:38:
         c4:0a:d8:25:0a:c1:ce:b4:d2:c2:54:b6:80:9f:01:d2:3b:b4:
         9e:5f:23:3a:46:68:1f:d1:56:26:bb:53:25:0e:d5:c4:15:29:
         81:fa:0d:cf:3f:d3:5e:62:bf:6a:3f:79:93:1c:19:ac:e4:d7:
         ba:b6:b7:b4:b0:7b:d5:ae:13:c9:ff:92:b2:4d:07:83:40:5c:
         fe:93:75:49:96:45:16:cf:7f:19:7b:bd:7a:ba:06:bf:12:6b:
         ee:5d:f3:93:1f:b7:b1:ca:45:7b:87:01:9c:b5:66:9d:09:aa:
         a6:54:af:f1:3b:a6:ed:47:e5:62:18:0d:cc:52:81:47:14:9e:
         07:24:3e:9a:5c:0b:11:ba:1c:36:5b:04:45:8f:6a:73:ba:ce:
         5f:2a:2e:e8:27:33:b1:08:78:79:e3:4e:f1:bb:c3:59:af:7b:
         05:70:d9:1b:ef:73:75:b3:e1:a4:b2:0b:2b:b2:96:3d:21:d4:
         7b:95:7a:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgJ3+oe2HJfi4L1X0aPzMcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwNTExMDgxNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTk4ZmMyYTQ3M2M4YzQzNDc1MGZiM2IxNmFjOTg4ZjdjNjM3NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HU1sTl+9aLuCOJiZvjMjFiBRmYR
cozon/5myVWahm/DfqNKIBc4ZdxdOcBnfQN+412XApVs8kP+lOEdqm31ddF1FmQ7
oEAgygqhFBeYu17ddCeSs/1o+zM7gPKh8j42JhWhmO0WsIdOWTduorTvGoYKoTHZ
SiFu/9/fXr3iP5jBJ0mseGa7k7/CWf6+27F9YdwVwXNz+SZVMAuo9lB5JKwi5yXG
GwfzcBS4bEJUJfZXV0TY9MDmTctqaemhNeGfClPeIqBaJZ+KrIvLKj2995rixRAi
lUCiuziV1S1yfnfiINRvzHfKbpD+gBOXelrprNjwiR2B5EgKD2q5Af/7gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmY/CpHPIxDR1D7OxasmI98Y3XnMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvcVpqOEtrYzhqRU5IVVBzN0ZxeVlqM3hqZGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2f9MA0G
CSqGSIb3DQEBCwUAA4IBAQCUuT+CXxSAXh3jihCOe9AQE2hNJFROa08n5B9byXe7
DoEsR8ENtvcI2fwx5ybGpiIfX/yEojuQ7zWH7Lztqwskq7OXMRO7GzjECtglCsHO
tNLCVLaAnwHSO7SeXyM6Rmgf0VYmu1MlDtXEFSmB+g3PP9NeYr9qP3mTHBms5Ne6
tre0sHvVrhPJ/5KyTQeDQFz+k3VJlkUWz38Ze716uga/EmvuXfOTH7exykV7hwGc
tWadCaqmVK/xO6btR+ViGA3MUoFHFJ4HJD6aXAsRuhw2WwRFj2pzus5fKi7oJzOx
CHh5407xu8NZr3sFcNkb73N1s+GksgsrspY9IdR7lXoo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org