Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/WWQcAxJ-7LqPyzBGK54EIVh1pRU.roa
File:                     WWQcAxJ-7LqPyzBGK54EIVh1pRU.roa (raw, json)
Hash identifier:          BAodvh/1M9To4LJyJ1BNmnNpDaZOj991dYJv90U8UOM=
Subject key identifier:   59:64:1C:03:12:7E:EC:BA:8F:CB:30:46:2B:9E:04:21:58:75:A5:15
Certificate issuer:       /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial:       018E10784483AE01A57C2BC304C01D9D6BE8
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/WWQcAxJ-7LqPyzBGK54EIVh1pRU.roa
Signing time:             Tue 05 Mar 2024 21:15:01 +0000
ROA not before:           Tue 05 Mar 2024 21:15:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48031
IP address blocks:        91.210.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 18:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:10:78:44:83:ae:01:a5:7c:2b:c3:04:c0:1d:9d:6b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
        Validity
            Not Before: Mar  5 21:15:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=59641c03127eecba8fcb30462b9e04215875a515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:24:43:29:4d:0e:40:b0:02:24:89:37:ad:
                    50:80:f8:eb:c4:6f:9f:de:89:ea:75:77:aa:4a:86:
                    5e:32:d4:fd:7a:27:07:5b:ff:99:23:ee:21:b5:1b:
                    d2:0e:a2:51:3a:c6:04:4b:20:67:31:ef:ae:e4:9f:
                    01:35:1b:a4:9f:ac:35:b4:c7:7a:9a:62:d7:63:ba:
                    76:15:91:ac:ce:6a:cc:97:b1:2f:ce:49:30:54:26:
                    cd:fa:8b:f7:5f:cd:4a:b5:c8:8e:a7:18:46:b1:b2:
                    d0:86:8b:37:75:d1:47:d5:4d:e5:f7:48:b2:27:91:
                    c2:c6:5b:a5:29:53:b8:e2:79:ee:14:bf:bd:fa:20:
                    0c:ca:4d:c1:fd:64:24:72:bb:85:3f:01:d2:2c:a2:
                    14:e1:39:09:2f:cb:68:ed:61:08:49:5d:a6:9b:9e:
                    95:18:c1:dc:a8:7e:3e:bf:5c:2c:85:be:fd:bd:fa:
                    a1:c7:61:d2:aa:86:21:db:92:2a:1e:f8:2f:18:b5:
                    0f:ff:e5:c8:99:27:ef:cc:50:d2:8b:2d:a6:4c:7f:
                    0d:77:74:ec:4c:62:08:12:28:a9:3d:55:9b:e3:17:
                    be:60:b0:cd:15:7a:60:cf:60:f1:76:c6:ea:e9:6b:
                    01:e4:b7:ea:7a:9c:8f:29:2a:9b:b4:be:ab:fc:80:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:1C:03:12:7E:EC:BA:8F:CB:30:46:2B:9E:04:21:58:75:A5:15
            X509v3 Authority Key Identifier:
                keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/WWQcAxJ-7LqPyzBGK54EIVh1pRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:69:6c:3e:10:0f:c6:46:61:86:6b:81:3a:9b:3c:ef:d7:
         f2:9d:19:dc:4a:c1:8c:a3:85:da:94:a5:89:79:0d:f1:a2:0c:
         9c:54:ee:cf:7e:da:fa:b6:cf:a1:cf:07:45:68:88:70:d1:94:
         64:67:63:98:c2:4f:d4:1c:6d:e8:3e:a1:5f:ec:3e:d8:fd:4c:
         ee:66:5c:53:6d:d5:08:3e:01:57:37:e2:7b:e7:15:f4:6d:1d:
         4c:3b:fd:a0:06:00:ff:f0:0d:85:63:86:91:18:7e:9e:74:8c:
         9e:06:29:f8:e6:b3:99:81:2a:12:82:12:1c:22:d1:11:80:d7:
         e2:af:c0:0a:ef:03:3d:c9:5c:b7:00:c9:6b:c8:84:04:d5:58:
         39:22:b4:b2:b6:94:6c:ee:f9:4c:67:ff:08:f3:13:58:5a:1c:
         54:29:d2:d1:23:7b:22:f0:f9:c5:79:d2:8d:82:45:81:79:db:
         b5:bb:42:30:f0:88:f7:9d:83:bb:1a:3b:f8:26:38:4a:7d:49:
         18:83:13:d7:79:42:5a:0f:04:e4:d7:83:98:87:c1:6d:1a:2a:
         2f:f9:d1:76:96:f4:8d:8c:ff:c5:45:cd:b7:5a:a7:d3:87:6b:
         d1:a0:f8:bc:f1:de:40:28:fd:b7:8c:51:a6:ab:11:e1:a6:65:
         6b:7f:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org