Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa
File:                     Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa (raw, json)
Hash identifier:          +9h6KttXbw0TPH47NOdoTiEIkF2wLD9CSNvd95d2DsY=
Subject key identifier:   3E:7C:36:A3:8C:AB:DD:3C:D1:E4:C5:43:04:B1:E5:88:BE:66:36:67
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018713799107117CAB68AA0C2263D95F3837
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa
Signing time:             Fri 24 Mar 2023 11:55:46 +0000
ROA not before:           Fri 24 Mar 2023 11:55:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        212.69.10.0/23 maxlen: 23
                          178.253.237.0/24 maxlen: 24
                          109.121.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:13:79:91:07:11:7c:ab:68:aa:0c:22:63:d9:5f:38:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Mar 24 11:55:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e7c36a38cabdd3cd1e4c54304b1e588be663667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:f6:1d:73:a5:38:62:c4:f8:72:44:88:65:
                    bd:9c:b0:e6:68:7e:2b:16:f9:a6:c7:3e:79:fe:39:
                    c6:fc:55:a4:6d:a0:fe:cc:12:e6:cc:35:fa:8f:0e:
                    ce:2a:9a:cc:e8:93:b4:99:d2:2a:29:95:ca:d7:80:
                    82:64:d3:ce:30:5a:8a:b4:7d:25:6e:c2:21:90:48:
                    e5:71:2d:20:e3:fd:d6:36:90:46:e2:66:14:59:ae:
                    4d:42:e1:24:56:5c:05:9d:1c:19:52:ba:06:50:8d:
                    f6:c4:1e:67:65:4a:eb:c3:b7:b9:f9:4d:fd:fa:dd:
                    56:2c:d2:26:d7:d0:1a:52:f4:32:fa:88:e1:37:2e:
                    9e:e6:8e:ad:40:4e:9a:b4:4d:0b:8b:f3:7e:17:bf:
                    04:76:06:5a:a9:33:da:38:13:20:47:d3:47:41:2b:
                    3d:34:63:b7:2c:dc:10:81:9b:9b:46:d0:03:a4:88:
                    da:bd:5b:ff:c5:37:35:69:6d:48:7e:0a:88:5e:0f:
                    2e:98:bc:17:b6:53:69:e7:4b:2e:8e:11:98:b1:74:
                    83:8c:33:2a:1e:3f:8c:76:eb:37:60:33:b5:d7:7b:
                    d7:32:c6:3d:42:e2:98:dc:1d:76:c3:9e:ce:86:16:
                    66:eb:62:3b:38:fa:ea:92:44:a7:d3:b6:ce:91:ae:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:36:A3:8C:AB:DD:3C:D1:E4:C5:43:04:B1:E5:88:BE:66:36:67
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pnw2o4yr3TzR5MVDBLHliL5mNmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.121.0.0/19
                  178.253.237.0/24
                  212.69.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:bc:a8:32:b2:99:ba:5b:0b:97:0c:d9:b9:d6:1d:3c:9b:
         28:f9:88:55:38:9a:fe:6c:4c:7a:a7:b5:b7:66:5e:d4:bd:c0:
         ee:ef:2c:ab:d2:d4:c3:25:97:1d:1d:c6:59:90:5f:78:c5:8e:
         5f:14:aa:38:a7:ad:c1:64:46:58:2b:a2:d5:63:ae:e1:52:17:
         97:6b:28:fd:ba:76:5c:ad:5b:42:ac:b0:ba:18:6b:e8:e2:ab:
         6e:c8:6f:db:9b:af:eb:20:ed:66:8b:81:87:c0:35:4c:c4:99:
         b8:73:ec:c8:5d:9e:5d:b3:ef:14:bf:4c:8a:74:b3:a7:12:88:
         d0:f2:57:f0:6c:13:e8:c4:71:fd:73:f9:e2:40:60:c2:b6:3c:
         c0:de:64:93:64:8d:0d:f9:4c:d1:40:3d:d5:cb:75:f0:5f:26:
         0a:5d:13:70:8a:dd:7d:f3:d7:3d:b9:49:d1:ac:50:f7:85:1d:
         a3:93:ee:9a:9e:fe:e4:13:9a:c5:2d:73:92:b8:3c:84:21:35:
         e9:a8:3f:f9:83:f7:bb:e7:6a:80:a4:f5:99:20:04:cf:f5:10:
         90:4a:02:ba:86:fa:5b:95:ca:dd:42:34:ca:a1:17:7a:2d:b1:
         63:0e:77:24:5d:fd:50:6e:5b:1f:c5:04:a1:ea:35:72:d5:76:
         26:38:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org