Route Origin Authorization

$ rpki-client -vvf rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          cHvXgLRHrELMLKeoe2LWKIwTaXYooQhCag4ef5SvUS4=
Subject key identifier:   0A:9D:42:BD:E6:20:70:71:C2:DB:38:03:02:2D:77:49:CF:36:C7:EE
Certificate issuer:       /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial:       6EB83CF887323FFE72D2D32641DAB0D36E292C1D
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access:      rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
Signing time:             Sat 10 Aug 2024 12:10:39 +0000
ROA not before:           Sat 10 Aug 2024 12:05:39 +0000
ROA not after:            Sat 09 Aug 2025 12:10:39 +0000
asID:                     208162
IP address blocks:        158.220.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 08:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b8:3c:f8:87:32:3f:fe:72:d2:d3:26:41:da:b0:d3:6e:29:2c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
        Validity
            Not Before: Aug 10 12:05:39 2024 GMT
            Not After : Aug  9 12:10:39 2025 GMT
        Subject: CN=0A9D42BDE6207071C2DB3803022D7749CF36C7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:25:4a:1b:9e:12:15:4e:f6:45:9d:73:5f:
                    db:d9:be:8f:59:7a:6e:d6:f4:93:fa:94:04:eb:8f:
                    17:e0:8c:2b:63:49:0b:76:4d:9a:06:df:d2:94:03:
                    35:45:ed:c5:ac:83:71:e3:81:d6:62:bf:ff:9c:9d:
                    e9:b8:b9:27:68:6b:78:4c:23:3c:ff:49:e6:0c:09:
                    0d:64:41:08:fd:c6:3f:f7:48:b8:8f:25:06:dc:94:
                    fd:af:3d:90:02:b6:8b:b6:1a:46:2a:06:3a:48:eb:
                    c9:53:86:a6:e5:e9:28:ec:11:90:20:cc:e8:3f:d5:
                    e4:92:40:3c:ad:c9:cf:65:67:56:7a:ea:87:f4:80:
                    c4:9f:a5:29:c9:c1:9d:0f:64:aa:c8:43:cd:4e:ac:
                    63:cf:78:8a:fd:49:7c:21:b2:82:a8:0d:4e:03:fe:
                    10:dd:fb:be:7b:cc:f6:cb:50:07:c3:99:b9:7d:ca:
                    e3:a1:b1:1a:51:32:9f:d1:e4:81:af:cb:a8:11:52:
                    c8:e3:9f:db:77:c3:d3:96:b7:d9:38:03:f2:86:f5:
                    ea:95:54:8a:a0:75:00:ad:ba:ca:16:a5:db:69:11:
                    66:1f:b9:0c:c6:fc:ff:d0:59:c9:d5:2b:07:40:1e:
                    1d:d3:2e:f9:78:1a:f3:b4:71:19:b6:4d:6b:76:74:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:42:BD:E6:20:70:71:C2:DB:38:03:02:2D:77:49:CF:36:C7:EE
            X509v3 Authority Key Identifier:
                keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:2e:b1:dd:66:1e:e6:06:a4:95:51:58:9e:ad:08:f3:4d:77:
         e4:79:34:93:7a:f5:b1:e8:ac:7d:8d:14:5c:d2:5f:4b:ce:59:
         cc:ef:b4:53:24:b7:c2:98:a4:d0:b9:18:83:d8:53:9e:bd:7f:
         d3:ec:95:82:83:e9:6b:ef:0e:0c:f3:cd:6c:89:4b:bc:d6:91:
         33:f6:26:a8:90:91:1f:f5:3b:46:73:40:f4:c7:1e:16:21:c8:
         fd:04:03:c0:0e:34:11:eb:16:48:f7:87:b7:9d:62:8a:eb:1c:
         84:98:36:87:66:f0:bd:6d:dc:79:17:02:c9:7b:ea:45:3a:84:
         31:22:fe:a9:ef:7e:0d:bf:64:ab:5e:31:57:c1:66:99:71:af:
         b0:99:b0:95:78:c9:64:e5:97:5a:78:13:4a:bf:27:33:46:a7:
         b6:c2:89:96:4e:90:f8:2d:52:b6:bc:63:d3:2b:0a:c8:b8:2f:
         05:0b:6d:5b:69:da:7a:01:3f:6f:b9:c9:f1:75:99:29:0a:70:
         67:61:b4:9a:26:5b:24:15:c2:5f:a4:de:a5:c5:c7:0c:e3:a7:
         ba:78:c7:bd:e2:69:1b:18:01:c6:71:31:23:cd:ce:88:ae:50:
         bf:a5:9d:1c:99:18:08:14:a7:fc:04:8e:68:82:de:53:99:f7:
         bc:d1:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:00 2024 by rpki-client on console-fra.rpki-client.org