Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/4YOUBo7XHje-6EoujFR3gwQngkM.roa
File:                     4YOUBo7XHje-6EoujFR3gwQngkM.roa (raw, json)
Hash identifier:          xiMsgpB6SR4yf7UUSGr70cWjiYKkM8LbCAbtIV+odPs=
Subject key identifier:   E1:83:94:06:8E:D7:1E:37:BE:E8:4A:2E:8C:54:77:83:04:27:82:43
Certificate issuer:       /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial:       0185707981E5F5CE04E0568AF211A594D009
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/4YOUBo7XHje-6EoujFR3gwQngkM.roa
Signing time:             Mon 02 Jan 2023 03:14:49 +0000
ROA not before:           Mon 02 Jan 2023 03:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49616
IP address blocks:        91.212.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:81:e5:f5:ce:04:e0:56:8a:f2:11:a5:94:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
        Validity
            Not Before: Jan  2 03:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e18394068ed71e37bee84a2e8c54778304278243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:2b:89:0c:12:65:62:2d:19:8f:92:fe:d3:
                    d9:b3:00:75:a2:ea:41:73:70:ef:f8:b8:d2:2f:a2:
                    1c:65:1d:22:13:86:ff:d5:fa:fb:30:f5:87:df:d3:
                    e4:21:d8:e9:7c:19:be:80:56:9c:74:e2:87:4d:b3:
                    07:2f:49:cf:f0:68:06:10:ca:4f:69:cd:29:ba:c3:
                    3f:a7:da:08:66:a1:7a:6c:98:05:12:da:ef:9f:cf:
                    05:f3:8e:56:b1:59:ec:ff:83:a6:7b:ef:ff:54:d1:
                    1a:25:2f:a3:fd:c9:7d:77:e0:6e:5d:86:93:bc:c2:
                    66:06:a5:54:cc:d4:29:ee:6a:bd:11:b3:2f:4b:44:
                    63:b4:51:29:ea:2f:31:fd:f2:21:bd:a5:cc:65:66:
                    11:d3:10:d0:a9:7b:d1:6a:6b:b2:a3:60:3e:84:9c:
                    f5:f8:bf:85:00:a5:05:16:ef:58:41:93:9e:64:8d:
                    05:86:e2:fd:ed:f7:ca:ea:16:5e:fb:f7:d6:8b:4a:
                    34:30:ff:b2:a9:04:dc:21:e1:9c:4d:bd:78:07:c9:
                    85:0c:d2:e8:5b:ed:20:c2:d3:ae:1f:57:e7:e2:ea:
                    d9:88:0b:25:54:2f:1d:ea:58:2a:4e:83:b0:1d:12:
                    35:9f:bd:d6:a7:01:2c:4f:da:fc:bb:cd:93:a2:e7:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:83:94:06:8E:D7:1E:37:BE:E8:4A:2E:8C:54:77:83:04:27:82:43
            X509v3 Authority Key Identifier:
                keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/4YOUBo7XHje-6EoujFR3gwQngkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:03:05:12:4b:1c:64:a9:14:9f:8e:cd:2f:a9:41:5d:44:06:
         c6:fd:eb:00:fa:44:5f:91:de:6c:9e:3d:ef:e7:67:b3:27:f1:
         fa:fe:bb:f2:f6:7c:9e:25:e1:25:e5:ae:79:9d:dc:bd:99:35:
         82:8a:12:a7:d5:54:1e:ca:00:70:15:a4:a8:e3:87:a0:dd:ca:
         0d:d7:3c:d7:9a:13:48:27:7e:f2:a7:0f:ad:e9:67:f7:ac:64:
         ce:9e:ec:7b:37:64:08:ba:09:6b:48:35:12:ae:98:4e:49:05:
         e2:f7:9b:3c:c4:7f:0d:15:a8:78:6e:d6:8d:91:c8:9e:5f:e6:
         ed:c2:54:a4:2f:14:88:24:df:8a:6b:91:66:0a:f1:c3:80:31:
         06:25:d9:d3:b1:ff:b1:3c:2a:cb:ca:e7:bd:2a:57:99:b8:01:
         74:e0:d5:d5:ca:a5:31:37:4d:37:c2:40:81:5b:9e:f4:e8:e3:
         70:6d:f9:02:94:f8:0e:ed:cd:75:68:05:8c:7e:20:59:ec:24:
         ef:34:95:c4:f5:9e:ae:b2:e7:21:a4:12:dd:02:ad:4c:e2:0c:
         25:67:ae:82:4a:f4:ff:39:61:75:81:ab:70:41:78:51:1b:11:
         e3:9a:79:c9:d7:2d:87:ad:94:92:66:84:cf:8c:7d:47:fc:41:
         bc:7c:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:13 2024 by rpki-client on console-ams.rpki-client.org