Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Jqz3ysXEstaVeh-jKkkh5VhOeg8.roa
File:                     Jqz3ysXEstaVeh-jKkkh5VhOeg8.roa (raw, json)
Hash identifier:          fCr8tsC1yrqOL6/7MHgdxpjQPxP40sczo8DP/a3dQjo=
Subject key identifier:   26:AC:F7:CA:C5:C4:B2:D6:95:7A:1F:A3:2A:49:21:E5:58:4E:7A:0F
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018A69067F3ADBBBD8F13FBA9505C6E36193
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Jqz3ysXEstaVeh-jKkkh5VhOeg8.roa
Signing time:             Wed 06 Sep 2023 05:45:47 +0000
ROA not before:           Wed 06 Sep 2023 05:45:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198652
IP address blocks:        89.47.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Sep 2023 17:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:69:06:7f:3a:db:bb:d8:f1:3f:ba:95:05:c6:e3:61:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Sep  6 05:45:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26acf7cac5c4b2d6957a1fa32a4921e5584e7a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:fc:5f:45:83:7c:1e:c1:23:99:0e:38:6c:
                    3d:a6:5d:04:cf:f0:b2:6c:93:76:51:74:79:1f:dd:
                    c2:41:88:ac:19:d6:6b:78:2b:95:fc:1b:28:6a:7e:
                    05:f4:f9:d1:6d:e8:30:54:6b:16:c6:cc:62:d9:6b:
                    c6:b9:02:1a:e9:a1:4d:dc:34:f9:7b:a1:2a:ba:43:
                    47:bb:93:9e:e9:9d:ff:c6:8e:48:77:d4:22:5c:16:
                    66:0e:80:b9:78:f9:af:23:ee:d0:5f:23:ae:c1:3b:
                    9c:fc:b1:cf:4d:12:3b:b9:01:00:84:64:e2:9f:ef:
                    7f:09:53:aa:08:e9:8c:7b:2e:03:58:78:16:35:08:
                    fb:71:01:60:57:c7:b9:80:45:86:d0:db:99:50:7a:
                    97:fe:0c:df:94:ff:03:a3:21:0b:a6:41:23:3b:12:
                    47:3f:1f:8c:1e:73:f8:0e:86:b0:5a:e6:31:ec:a6:
                    33:d8:58:0c:5c:5d:7b:a6:2e:71:b5:62:73:c5:ec:
                    a0:9a:c6:73:b4:cb:69:c8:fb:49:db:24:f2:e7:8f:
                    27:3e:fd:ca:8f:02:98:f2:90:f8:4c:61:87:64:48:
                    d3:66:99:6d:8a:4b:49:93:24:c0:a7:16:86:53:63:
                    ca:52:ef:ec:37:73:89:2f:ba:b0:1b:3f:f4:8b:47:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AC:F7:CA:C5:C4:B2:D6:95:7A:1F:A3:2A:49:21:E5:58:4E:7A:0F
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Jqz3ysXEstaVeh-jKkkh5VhOeg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.47.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:b8:46:2b:ad:d8:0d:a7:38:d0:49:1f:86:80:0f:35:8b:
         42:e3:84:d6:9e:6a:af:29:95:bb:b1:31:f0:4a:1b:a3:57:d3:
         3e:6f:6c:83:6b:f7:f0:0f:68:21:cd:a2:bd:ed:93:23:1f:8a:
         47:d0:a7:85:5a:62:01:c0:5f:2d:f5:01:7a:74:2c:16:87:80:
         e1:e4:40:f9:f3:30:45:21:14:4c:e0:8f:b1:81:5a:3c:fd:d4:
         2b:c5:75:46:3e:45:05:57:4c:6b:76:01:4e:37:7c:38:0a:f9:
         69:7e:07:4e:f0:04:59:3a:b4:e5:d9:08:b3:7d:52:11:48:6d:
         88:1e:51:52:21:f1:60:da:18:a1:be:e7:8b:0a:61:02:51:e5:
         28:81:95:e0:04:4c:44:4e:11:4f:3c:ae:fa:e6:b5:ae:76:8b:
         79:35:92:af:f7:23:28:5e:41:dc:7b:db:f6:c1:41:0d:14:3b:
         a0:a2:53:c5:4b:0a:02:f0:6a:ad:1c:b4:1d:13:39:9a:32:e9:
         78:9e:eb:cf:9a:45:55:ba:5a:6a:13:b9:8d:16:b3:64:41:df:
         9d:62:32:df:1a:69:e8:e4:dc:40:51:fb:fe:85:00:58:ab:fb:
         68:8c:d0:cf:4e:9e:b9:7c:71:bd:14:09:54:58:75:3c:1d:a4:
         ba:70:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org