Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Suiwngh8Mp1S83tQ3LQEmDJAP-8.roa
File:                     Suiwngh8Mp1S83tQ3LQEmDJAP-8.roa (raw, json)
Hash identifier:          K/Xvx/5uDIkr6ONaRypfi5sdQ6GxAG8jJf4qu56REEA=
Subject key identifier:   4A:E8:B0:9E:08:7C:32:9D:52:F3:7B:50:DC:B4:04:98:32:40:3F:EF
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0188F6B1F14CB5EF1BC847784A84D1F833FB
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Suiwngh8Mp1S83tQ3LQEmDJAP-8.roa
Signing time:             Mon 26 Jun 2023 07:53:56 +0000
ROA not before:           Mon 26 Jun 2023 07:53:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        81.29.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jul 2023 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f6:b1:f1:4c:b5:ef:1b:c8:47:78:4a:84:d1:f8:33:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Jun 26 07:53:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ae8b09e087c329d52f37b50dcb4049832403fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:16:3e:8f:f2:ec:04:7f:31:da:89:d6:39:
                    cd:e0:94:a1:8d:61:dd:da:eb:06:62:13:3b:9c:1a:
                    5c:8d:67:0e:43:3a:de:82:e5:a8:1e:78:92:e9:72:
                    fd:4a:7c:c1:2f:fc:da:34:a8:30:00:c2:52:fb:88:
                    45:84:ae:15:34:31:27:0e:e2:c8:c9:86:1a:23:1b:
                    44:59:d8:9a:e0:9c:e9:e0:c1:69:b5:b5:01:96:63:
                    74:01:4d:f3:f8:65:29:4a:3e:89:19:31:ab:d5:3a:
                    0a:db:3c:bb:24:f7:37:8b:5e:9b:40:90:90:a7:20:
                    c6:88:31:32:bf:31:dd:28:81:14:2a:05:74:52:29:
                    97:2d:bc:2e:74:bb:02:7a:9c:41:dc:bc:fc:e2:0d:
                    04:53:85:c6:45:f7:7f:02:32:55:95:a8:94:e5:60:
                    fd:76:cc:44:4e:c0:e1:42:2b:96:4b:00:47:d9:26:
                    e7:6f:48:63:17:74:c9:ba:b4:06:1b:b9:dd:55:ff:
                    ca:1f:aa:3b:92:63:da:e1:fb:37:15:9c:eb:25:0b:
                    97:c3:33:49:1a:ef:c7:d6:b0:a0:55:8b:dd:b0:6d:
                    99:51:cc:bc:b0:cb:43:9a:c8:e0:36:04:97:d6:7d:
                    88:d0:4e:21:1e:be:8b:20:3b:0c:07:5d:d7:d3:a2:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:B0:9E:08:7C:32:9D:52:F3:7B:50:DC:B4:04:98:32:40:3F:EF
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Suiwngh8Mp1S83tQ3LQEmDJAP-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.29.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:60:9c:70:e4:a2:5c:17:f4:f7:e9:1d:21:35:44:a6:16:2e:
         55:5c:38:b6:39:cd:aa:11:24:ec:cd:a4:ad:05:bd:93:53:ba:
         f9:68:72:59:96:50:11:c3:f4:36:7e:4f:1d:0a:1a:c3:6d:25:
         e1:6b:d2:d9:49:99:80:fe:c7:fb:7b:4d:fc:77:2f:d6:e4:12:
         d4:1b:dd:ae:11:2c:43:9b:2a:f3:85:a2:e8:97:db:53:0c:0d:
         f0:10:f4:52:9a:15:49:60:15:61:66:35:85:b9:73:2c:9f:65:
         24:85:60:32:73:57:1d:6a:1a:a7:d8:c7:b3:2d:ca:73:53:32:
         b8:a0:8d:9e:34:6d:5b:e6:42:aa:49:35:41:de:0e:bf:62:7f:
         7d:9b:21:42:75:82:7d:81:bb:f2:50:ad:14:b6:22:06:d3:42:
         95:b2:cf:50:73:45:c3:be:39:e5:78:ff:99:67:94:45:bd:d5:
         d6:a9:4e:1a:f4:99:dd:4a:dc:72:0d:33:f5:4b:a8:7b:b8:0c:
         9c:3e:10:79:e1:42:87:aa:04:5f:e0:0c:32:8f:54:e3:a9:94:
         d8:0f:61:2a:32:8c:84:c9:81:98:ac:cb:fd:94:6d:a2:bc:b0:
         cf:47:39:d5:44:45:b9:5c:77:c0:00:34:03:53:7d:a4:62:7a:
         52:ce:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org