Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/iaopevWAihFf9KoIK217-hNsSEw.roa
File:                     iaopevWAihFf9KoIK217-hNsSEw.roa (raw, json)
Hash identifier:          Y/OZl7/yxrkFSb8xWDxv8j2jWK+T6ayUAhlGQ8wfhqA=
Subject key identifier:   89:AA:29:7A:F5:80:8A:11:5F:F4:AA:08:2B:6D:7B:FA:13:6C:48:4C
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       018B349279FA0C8399A36A3271D31C26F56A
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/iaopevWAihFf9KoIK217-hNsSEw.roa
Signing time:             Sun 15 Oct 2023 18:21:36 +0000
ROA not before:           Sun 15 Oct 2023 18:21:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205320
IP address blocks:        188.215.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Nov 2023 12:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:34:92:79:fa:0c:83:99:a3:6a:32:71:d3:1c:26:f5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Oct 15 18:21:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89aa297af5808a115ff4aa082b6d7bfa136c484c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:42:7f:67:82:e5:2e:39:7f:86:e6:48:b4:
                    62:92:a9:fe:a9:a8:44:79:70:65:aa:f9:1a:49:dd:
                    bc:b4:be:a0:72:bc:fb:1a:3d:98:52:b1:ed:6e:ad:
                    c0:e8:55:a9:ce:a1:9f:a6:56:19:f8:52:d2:f7:1b:
                    30:80:e8:17:b9:51:6b:02:df:0f:97:4f:19:60:dd:
                    1c:92:8f:54:3e:c2:94:da:9c:18:1d:75:95:0d:66:
                    7e:bd:d0:82:d4:9a:88:a0:62:35:ec:5a:91:be:63:
                    40:b2:78:85:6a:f8:e2:95:d0:44:67:9d:fd:ad:eb:
                    e5:36:87:60:f2:24:b9:15:d7:be:4a:3d:03:dd:6e:
                    34:76:ca:ce:7e:f2:ec:9e:06:de:84:77:20:b5:f2:
                    0a:38:b8:98:b5:7e:91:43:58:41:13:8c:9c:0d:e0:
                    9f:b0:68:1e:ad:41:4c:57:b7:e6:30:42:f6:52:4d:
                    94:2b:4f:7a:14:0a:1b:39:63:be:05:ec:19:31:2d:
                    b6:65:c3:c6:1c:f0:35:dc:ab:ad:4c:f6:3d:da:ea:
                    3f:ff:43:dc:0b:d5:e8:65:e3:82:bb:71:f0:bd:23:
                    5a:e3:b0:c6:26:8a:e5:b2:57:86:f5:1a:1d:7e:9f:
                    db:86:98:b5:9f:cf:56:83:fd:97:9a:64:ea:96:66:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:29:7A:F5:80:8A:11:5F:F4:AA:08:2B:6D:7B:FA:13:6C:48:4C
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/iaopevWAihFf9KoIK217-hNsSEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:37:fd:0a:73:d1:ef:3b:ae:0a:f5:fc:fb:15:c1:a6:f6:33:
         ba:e1:4d:77:22:cc:f8:a6:dc:32:82:1c:23:15:5f:56:c2:f1:
         ac:95:87:59:3d:25:e8:c7:71:af:0b:dc:36:fd:07:b5:bd:c0:
         fd:5e:f1:a0:a1:ed:35:12:42:19:cd:d0:b3:b7:61:c5:4a:0c:
         5a:b0:7f:65:d9:20:3b:65:5b:db:e5:3b:1e:af:89:cf:d0:1c:
         ad:db:ff:60:ac:3c:70:9f:16:25:3f:bb:24:cf:a6:83:a5:52:
         34:57:1b:aa:55:a1:d7:4b:68:f3:b9:07:73:b4:58:2f:23:0b:
         e2:ed:a0:a3:18:77:9e:fc:87:65:65:a1:31:9b:19:c2:f8:45:
         bf:74:45:b5:c2:24:9a:10:86:f8:d1:32:50:e1:89:a6:bf:24:
         6b:3c:42:9a:3e:15:8b:77:df:46:38:8b:3e:c1:22:0d:11:a8:
         13:55:8b:9a:d1:d2:5b:44:31:b4:76:0d:39:e0:7e:5e:45:71:
         2a:80:bb:fc:f2:42:32:25:93:e8:b8:f2:73:20:f8:10:a4:08:
         7f:b5:16:f7:3c:0b:89:98:de:d5:13:82:67:13:eb:0d:c5:c3:
         9c:56:89:4a:1f:b6:c7:b1:bd:6b:99:7a:fb:89:13:75:75:77:
         6e:e9:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:27 2024 by rpki-client on console-ams.rpki-client.org