Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/doNdphOKuViXkxzSItnReM8Ynng.roa
File:                     doNdphOKuViXkxzSItnReM8Ynng.roa (raw, json)
Hash identifier:          7TevlbHhMZwz1zFMk5KoxjC/gVNmWDcXUBKFEuneRIc=
Subject key identifier:   76:83:5D:A6:13:8A:B9:58:97:93:1C:D2:22:D9:D1:78:CF:18:9E:78
Certificate issuer:       /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial:       01888B16DFE706982EAA9D860092EECD2A20
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/doNdphOKuViXkxzSItnReM8Ynng.roa
Signing time:             Mon 05 Jun 2023 10:25:11 +0000
ROA not before:           Mon 05 Jun 2023 10:25:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        91.240.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8b:16:df:e7:06:98:2e:aa:9d:86:00:92:ee:cd:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
        Validity
            Not Before: Jun  5 10:25:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76835da6138ab95897931cd222d9d178cf189e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:33:2c:8b:99:bf:03:65:b3:f4:f7:0f:c2:
                    33:83:eb:3c:99:d9:a6:cb:dd:87:58:6e:0a:fa:9c:
                    b0:59:0e:6c:39:05:61:0f:5a:4e:50:cc:f0:d4:62:
                    77:9f:2b:ab:fc:a9:76:ba:53:64:90:95:6a:b9:e8:
                    e3:7b:9f:91:75:1d:5e:ae:ef:3c:e2:2a:25:61:9f:
                    56:58:3c:6a:cc:9c:3b:c1:b5:19:6a:11:cd:46:22:
                    46:2f:7e:ab:fe:4a:ac:04:a3:c0:25:a5:a0:a2:95:
                    82:06:e9:ae:7b:74:1f:b3:d8:48:f0:a8:a8:73:59:
                    38:a2:81:0d:dc:e4:ae:f2:fa:f7:08:27:f0:5f:b5:
                    11:c8:53:20:f0:0d:f9:1f:4c:03:fb:c4:ff:e1:8a:
                    83:52:a3:12:47:dc:eb:51:16:24:f8:92:58:d3:1b:
                    96:3f:f9:40:5a:30:db:21:60:ed:2e:30:50:59:2e:
                    88:6f:96:af:40:3d:4b:bd:02:95:9f:7e:55:7e:50:
                    74:ea:f8:11:4d:8c:d6:1c:ac:26:36:2e:6d:35:84:
                    32:85:77:14:c8:cf:be:5e:6a:3d:94:c5:72:f9:31:
                    80:7c:eb:4b:5b:fd:7e:dd:d8:c9:4c:59:b6:88:d7:
                    4a:c2:df:a3:f4:fb:e8:40:7a:b2:e0:1a:7f:8c:d1:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:83:5D:A6:13:8A:B9:58:97:93:1C:D2:22:D9:D1:78:CF:18:9E:78
            X509v3 Authority Key Identifier:
                keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/doNdphOKuViXkxzSItnReM8Ynng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:14:81:de:c2:c8:3f:12:55:1e:4e:bc:80:fa:64:3f:dd:
         94:2e:c5:c3:a4:a7:4f:3c:33:0e:a5:f7:5c:46:d6:e9:f4:15:
         3a:fb:c8:5a:5e:12:27:cc:9a:13:d9:f7:fa:fa:99:45:57:aa:
         2c:97:4a:47:12:9a:af:c3:73:46:13:95:50:5f:8a:cb:6e:cc:
         1a:7e:73:9d:52:48:63:cd:e4:40:07:be:7f:87:f7:2e:be:ba:
         11:6f:08:1b:3f:6e:a0:78:e3:78:75:b8:7e:09:4e:ca:96:a1:
         83:34:a7:26:03:ac:26:a2:aa:79:72:7e:02:4a:c8:e0:e1:96:
         b1:56:ac:ab:e1:97:86:20:dc:af:a3:37:b8:d9:f4:05:84:4a:
         75:d2:af:d7:9d:74:7f:24:6e:1c:53:bb:3c:33:56:51:e4:64:
         c8:b9:2b:9a:ab:22:45:af:e7:a1:1b:67:8b:3b:b3:04:bd:87:
         e8:33:7c:21:66:ce:de:74:60:db:2d:08:0f:9f:f0:0b:8f:f4:
         89:a5:83:1e:02:0f:21:74:53:f1:eb:36:a6:73:7a:00:c6:79:
         74:13:c6:be:48:90:6b:3e:45:84:a0:fa:9f:ae:f4:76:33:d7:
         d7:3e:b9:37:22:cb:7c:3f:07:08:52:97:d1:52:8b:18:2e:5e:
         b1:b2:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:41 2024 by rpki-client on console-ams.rpki-client.org