Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/i9Nele3hNmU6C-qkTwAmxi4bPDc.roa
File:                     i9Nele3hNmU6C-qkTwAmxi4bPDc.roa (raw, json)
Hash identifier:          emd/QCh/YzME/CdkSudQJAGIYQFOy0SZsOvyX2N4y9o=
Subject key identifier:   8B:D3:5E:95:ED:E1:36:65:3A:0B:EA:A4:4F:00:26:C6:2E:1B:3C:37
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       01889ABFF7AB49FDEF2B33B35EAC91FA0602
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/i9Nele3hNmU6C-qkTwAmxi4bPDc.roa
Signing time:             Thu 08 Jun 2023 11:24:12 +0000
ROA not before:           Thu 08 Jun 2023 11:24:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198294
IP address blocks:        84.47.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9a:bf:f7:ab:49:fd:ef:2b:33:b3:5e:ac:91:fa:06:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Jun  8 11:24:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8bd35e95ede136653a0beaa44f0026c62e1b3c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:60:77:f3:9c:b0:1f:54:f6:72:2f:3e:92:
                    8d:62:7e:f6:c5:33:ae:53:c4:c8:e2:20:55:55:a0:
                    b1:c0:9d:86:1f:48:6c:a4:a3:50:14:33:99:32:00:
                    3d:53:bd:92:6f:b1:96:8e:f1:63:5c:a2:58:be:a8:
                    fc:65:9e:81:92:d7:f3:b5:95:b2:37:6a:ab:d4:74:
                    89:43:f4:f6:48:69:fa:58:7b:a8:f5:b6:16:ae:5b:
                    b3:68:07:ec:e1:90:d7:2f:8d:5c:e7:ae:de:fa:4d:
                    5a:fe:98:55:28:8b:83:9c:7c:21:99:7d:25:16:76:
                    e0:1d:95:15:49:66:10:16:c8:36:67:a8:d6:74:c3:
                    3a:ad:03:c0:48:0a:f1:8f:15:20:85:12:fb:83:1e:
                    31:ee:20:2b:0c:0d:07:88:bd:05:b3:8e:2c:4d:ba:
                    11:1a:de:f9:92:9b:f7:b1:7d:71:87:8c:b4:eb:e6:
                    ee:fb:37:59:3e:6e:d0:4e:f4:6e:cf:29:00:e8:d3:
                    13:93:e5:32:3c:e5:4b:72:44:37:d1:b8:19:22:f9:
                    5d:10:d5:90:7d:71:31:82:27:9c:5f:a2:5c:7c:a4:
                    cf:d5:7c:66:90:eb:26:ba:fc:d3:b6:1c:36:a5:c1:
                    9d:b4:65:aa:ea:3f:4a:b9:c5:82:13:e9:04:bc:27:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:5E:95:ED:E1:36:65:3A:0B:EA:A4:4F:00:26:C6:2E:1B:3C:37
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/i9Nele3hNmU6C-qkTwAmxi4bPDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.47.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:49:56:ed:77:46:fb:47:c0:eb:e6:59:eb:75:0e:9c:08:
         b9:19:55:e1:75:04:27:ca:98:e7:f1:fa:b1:b3:ac:00:de:e0:
         b3:9f:3b:7b:d7:1d:51:2f:d6:fd:ef:23:a0:d2:b8:74:5e:43:
         09:71:e7:20:7e:2f:52:b3:94:b7:b9:9e:d9:d2:75:14:4d:24:
         8d:95:03:2b:88:be:5b:90:37:b5:e7:1b:74:b4:39:b4:29:fe:
         ff:4f:73:20:21:32:93:bf:ed:8e:22:b5:4f:68:87:30:0d:3d:
         68:8d:f4:aa:ae:4b:70:0e:9f:27:d1:b3:b8:36:81:e3:3a:7e:
         65:37:ae:a8:66:f6:6c:06:81:5b:f4:f2:42:43:0f:a0:ba:b4:
         e7:7f:7f:f3:37:6e:c7:f9:70:0b:a5:89:b4:14:44:e9:44:bc:
         75:0d:e2:97:c3:f0:03:83:35:f4:fa:3b:2c:a7:f1:fb:70:36:
         f0:01:ce:20:90:36:8a:11:cf:b6:60:e3:4b:4b:d5:32:88:cf:
         2e:66:8d:40:8b:db:63:34:35:00:c1:20:0c:da:e0:21:18:2f:
         99:13:fb:a6:15:1e:33:5b:d1:21:00:b8:d8:04:da:e0:f2:58:
         44:2a:7e:37:33:c5:f8:e3:c4:73:1e:ee:e7:f2:98:07:c8:3e:
         7a:75:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org