Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/beG_XGxESv8_UQVwhfYJwNuJ5DE.roa
File:                     beG_XGxESv8_UQVwhfYJwNuJ5DE.roa (raw, json)
Hash identifier:          qGGpqrbcI7HnZYk0UfLR4Cl0Xm6gTp8ftilDHymI0UU=
Subject key identifier:   6D:E1:BF:5C:6C:44:4A:FF:3F:51:05:70:85:F6:09:C0:DB:89:E4:31
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       018ABD1FE000FD614792ECC4FFE57408F383
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/beG_XGxESv8_UQVwhfYJwNuJ5DE.roa
Signing time:             Fri 22 Sep 2023 13:41:37 +0000
ROA not before:           Fri 22 Sep 2023 13:41:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216394
IP address blocks:        91.190.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 05:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:bd:1f:e0:00:fd:61:47:92:ec:c4:ff:e5:74:08:f3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Sep 22 13:41:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6de1bf5c6c444aff3f51057085f609c0db89e431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:d8:76:e7:c0:83:03:1f:ff:7b:be:e4:5a:
                    17:e3:e7:38:98:0b:30:af:44:81:e9:aa:a6:36:88:
                    82:67:b0:aa:9a:3e:64:b4:5c:02:80:b5:77:d1:c0:
                    31:8c:23:28:02:3a:c8:a7:8e:cf:48:a4:4b:aa:0c:
                    dc:40:b3:e3:4e:c8:59:48:6c:08:11:48:55:58:99:
                    a3:d4:21:e7:97:6b:8b:8a:d6:18:b8:4f:18:ad:e2:
                    8e:d0:e9:24:0b:1d:72:52:b8:2f:62:e2:6f:e5:4f:
                    f8:44:eb:66:9a:eb:37:5e:f4:40:56:ef:92:09:0f:
                    71:8f:18:fe:67:d5:79:7a:9a:c5:b2:f0:be:2b:82:
                    f4:b2:1b:50:00:e0:f0:fd:35:c7:1e:f3:00:ea:3a:
                    c5:6c:01:16:df:01:25:f6:d8:88:ec:3c:0f:df:f1:
                    75:1c:fc:77:bc:4c:53:bd:e3:3b:7d:cc:22:44:db:
                    ff:e0:3e:37:45:b7:a6:78:68:9c:73:1f:92:17:b4:
                    6d:b2:8d:84:05:1b:b8:e3:3d:53:b9:a6:0a:a4:8f:
                    9d:e7:9b:04:ad:81:29:aa:03:28:fd:c7:15:1b:34:
                    86:95:8b:e9:af:75:ab:83:06:e2:e0:eb:7d:51:f8:
                    35:38:6c:ae:04:e6:2e:e3:df:46:22:66:32:d6:b0:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:BF:5C:6C:44:4A:FF:3F:51:05:70:85:F6:09:C0:DB:89:E4:31
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/beG_XGxESv8_UQVwhfYJwNuJ5DE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:36:89:b2:d3:f5:f0:18:dd:19:a8:06:b6:e7:50:ac:77:f5:
         1d:e1:14:c7:88:3f:0b:ec:3b:f2:50:52:a2:db:5e:d2:fe:29:
         68:f8:f3:06:bd:aa:0e:3a:c9:ec:1b:83:97:4b:42:bf:20:3c:
         d0:f9:8f:a1:b3:b0:37:a3:19:63:06:70:90:da:62:6e:49:99:
         11:c2:95:b9:cc:18:9d:de:71:5b:d8:50:5b:5a:87:c4:26:a0:
         a9:8c:26:21:38:7a:5e:36:fb:19:20:12:e0:19:88:9f:8a:20:
         ab:4c:b1:29:50:92:de:35:df:ae:5f:e3:3a:14:72:dd:02:b7:
         fb:0d:13:8b:f6:74:f5:6a:ec:5f:21:8e:5f:22:5f:d0:46:fc:
         cc:c5:e1:5a:0f:3a:4f:73:a9:6d:bf:63:23:34:74:79:fe:e5:
         ca:e7:b1:83:5e:8a:15:2e:d9:70:b7:85:a1:2e:d5:88:f0:29:
         d9:03:3c:e8:9d:28:86:05:8a:01:91:24:52:ce:57:82:f5:ea:
         c7:ee:8e:ca:45:1c:56:d9:cf:84:b1:3b:d2:01:a2:aa:50:48:
         fc:e7:ca:fb:3c:11:41:ae:e8:73:46:35:e6:81:02:71:f4:fc:
         e6:75:36:d5:4f:bc:ea:c1:67:29:ca:d4:ce:5c:16:57:b8:b3:
         19:56:96:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYq9H+AA/WFHkuzE/+V0CPODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjMwOTIyMTM0MTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGUxYmY1YzZjNDQ0YWZmM2Y1MTA1NzA4NWY2MDljMGRiODllNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV7YdufAgwMf/3u+5FoX4+c4mAsw
r0SB6aqmNoiCZ7Cqmj5ktFwCgLV30cAxjCMoAjrIp47PSKRLqgzcQLPjTshZSGwI
EUhVWJmj1CHnl2uLitYYuE8YreKO0OkkCx1yUrgvYuJv5U/4ROtmmus3XvRAVu+S
CQ9xjxj+Z9V5eprFsvC+K4L0shtQAODw/TXHHvMA6jrFbAEW3wEl9tiI7DwP3/F1
HPx3vExTveM7fcwiRNv/4D43RbemeGiccx+SF7Rtso2EBRu44z1TuaYKpI+d55sE
rYEpqgMo/ccVGzSGlYvpr3Wrgwbi4Ot9Ufg1OGyuBOYu499GImYy1rD27wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3hv1xsREr/P1EFcIX2CcDbieQxMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvYmVHX1hHeEVTdjhfVVFWd2hmWUp3TnVKNURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW767MA0G
CSqGSIb3DQEBCwUAA4IBAQCXNomy0/XwGN0ZqAa251Csd/Ud4RTHiD8L7DvyUFKi
217S/ilo+PMGvaoOOsnsG4OXS0K/IDzQ+Y+hs7A3oxljBnCQ2mJuSZkRwpW5zBid
3nFb2FBbWofEJqCpjCYhOHpeNvsZIBLgGYifiiCrTLEpUJLeNd+uX+M6FHLdArf7
DROL9nT1auxfIY5fIl/QRvzMxeFaDzpPc6ltv2MjNHR5/uXK57GDXooVLtlwt4Wh
LtWI8CnZAzzonSiGBYoBkSRSzleC9erH7o7KRRxW2c+EsTvSAaKqUEj858r7PBFB
ruhzRjXmgQJx9PzmdTbVT7zqwWcpytTOXBZXuLMZVpZc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org