Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/YmyhTmKj7Djb7MNR33-XtJG6eU4.roa
File:                     YmyhTmKj7Djb7MNR33-XtJG6eU4.roa (raw, json)
Hash identifier:          zxVWKW1Zx25COfpOAA98NlGZrzbvSuUX+AhqHNoEFu8=
Subject key identifier:   62:6C:A1:4E:62:A3:EC:38:DB:EC:C3:51:DF:7F:97:B4:91:BA:79:4E
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0188E2464801A820677FF065A7C5AD0342EE
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/YmyhTmKj7Djb7MNR33-XtJG6eU4.roa
Signing time:             Thu 22 Jun 2023 08:43:56 +0000
ROA not before:           Thu 22 Jun 2023 08:43:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54339
IP address blocks:        91.190.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Jun 2023 18:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:46:48:01:a8:20:67:7f:f0:65:a7:c5:ad:03:42:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jun 22 08:43:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=626ca14e62a3ec38dbecc351df7f97b491ba794e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:9d:aa:45:7e:2a:a3:8d:32:a6:41:bc:dc:
                    96:70:c2:2c:75:d0:f3:c2:59:25:bc:fa:5d:02:62:
                    32:c1:81:6b:07:e7:b7:29:04:91:5d:cb:e0:4e:2c:
                    78:ca:e5:03:19:6e:8c:88:ee:61:de:ef:c7:bf:7e:
                    58:0d:eb:18:7e:ac:18:bd:d5:50:93:04:a3:99:bc:
                    8c:10:a4:99:df:f9:7b:82:03:50:05:fe:ab:f6:c6:
                    cb:98:8b:f0:dc:b5:30:ec:80:ba:69:86:90:3b:43:
                    44:82:f0:90:f7:97:70:dc:73:a4:99:1a:d2:82:c8:
                    94:8d:d7:dd:4a:7e:c1:69:52:9b:0f:ec:49:c4:04:
                    39:28:28:94:0a:37:5d:53:af:6b:0b:4c:59:47:86:
                    de:d6:df:50:f8:e5:91:98:2b:c7:74:97:db:2c:e4:
                    5f:f7:cc:f2:e3:14:d6:e5:5e:ae:b4:f7:9e:3d:6d:
                    0b:07:85:40:de:47:8e:78:be:51:0e:4d:be:51:a6:
                    b5:e1:2b:1c:48:eb:f2:6f:32:8a:8e:b4:30:3f:8b:
                    c2:df:aa:34:81:a4:a0:95:87:04:b5:8a:2f:0a:99:
                    b3:71:27:37:ab:85:6c:07:9d:b9:23:b2:b8:7b:96:
                    d0:56:40:e8:0f:e7:78:bd:4c:c4:78:8f:91:c6:d1:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6C:A1:4E:62:A3:EC:38:DB:EC:C3:51:DF:7F:97:B4:91:BA:79:4E
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/YmyhTmKj7Djb7MNR33-XtJG6eU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:da:06:06:72:7d:19:a7:64:d5:86:ad:6f:b2:d9:21:bf:
         9f:a0:d3:eb:6f:7f:3d:96:ac:d9:cf:df:28:7b:33:cc:65:db:
         14:89:32:dc:ef:23:50:57:d8:5f:4b:23:9f:fa:8a:77:e6:ce:
         76:a0:90:29:97:75:21:c6:c1:41:ac:17:1c:8b:d3:bb:af:12:
         d8:74:9b:a0:49:ab:af:10:36:b9:2f:39:fd:3c:e8:a1:f2:40:
         3d:72:d3:c9:62:e6:31:e8:07:0f:90:b6:f6:bf:5c:21:a0:9b:
         ec:11:2c:2c:e1:36:9c:45:24:29:ee:8c:2c:17:d9:3c:da:f8:
         3e:55:e9:b1:7d:d4:77:38:bb:29:b8:40:84:8e:dd:dd:58:08:
         86:ef:7d:d5:25:7e:c0:1b:e4:35:a1:80:36:b9:e7:70:d2:da:
         21:3a:80:15:a1:6a:cb:43:0e:fc:d5:85:31:24:59:bc:e1:1f:
         ea:73:0c:c0:ae:cf:49:73:18:e9:49:1c:0f:51:15:83:99:36:
         29:2d:68:bb:d7:22:09:54:0a:b7:56:62:45:27:7d:77:13:82:
         0f:08:fe:83:21:c3:8b:2f:17:c9:36:71:87:c0:24:77:e8:94:
         95:09:1c:df:a8:3a:52:a3:1f:1e:fb:6a:51:62:72:f8:34:01:
         5b:23:7c:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjiRkgBqCBnf/Blp8WtA0LuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjMwNjIyMDg0MzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjZjYTE0ZTYyYTNlYzM4ZGJlY2MzNTFkZjdmOTdiNDkxYmE3OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltydqkV+KqONMqZBvNyWcMIsddDz
wlklvPpdAmIywYFrB+e3KQSRXcvgTix4yuUDGW6MiO5h3u/Hv35YDesYfqwYvdVQ
kwSjmbyMEKSZ3/l7ggNQBf6r9sbLmIvw3LUw7IC6aYaQO0NEgvCQ95dw3HOkmRrS
gsiUjdfdSn7BaVKbD+xJxAQ5KCiUCjddU69rC0xZR4be1t9Q+OWRmCvHdJfbLORf
98zy4xTW5V6utPeePW0LB4VA3keOeL5RDk2+Uaa14SscSOvybzKKjrQwP4vC36o0
gaSglYcEtYovCpmzcSc3q4VsB525I7K4e5bQVkDoD+d4vUzEeI+RxtESTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJsoU5io+w42+zDUd9/l7SRunlOMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvWW15aFRtS2o3RGpiN01OUjMzLVh0Skc2ZVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW765MA0G
CSqGSIb3DQEBCwUAA4IBAQCI19oGBnJ9Gadk1Yatb7LZIb+foNPrb389lqzZz98o
ezPMZdsUiTLc7yNQV9hfSyOf+op35s52oJApl3UhxsFBrBcci9O7rxLYdJugSauv
EDa5Lzn9POih8kA9ctPJYuYx6AcPkLb2v1whoJvsESws4TacRSQp7owsF9k82vg+
VemxfdR3OLspuECEjt3dWAiG733VJX7AG+Q1oYA2uedw0tohOoAVoWrLQw781YUx
JFm84R/qcwzArs9JcxjpSRwPURWDmTYpLWi71yIJVAq3VmJFJ313E4IPCP6DIcOL
LxfJNnGHwCR36JSVCRzfqDpSox8e+2pRYnL4NAFbI3wC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org