Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Osc22hXx-Thlxs8f8tESb8TwYY.roa
File:                     2Osc22hXx-Thlxs8f8tESb8TwYY.roa (raw, json)
Hash identifier:          x/RkdIhn3Vps9xl5um+mppW/mVfqOwMcgxSMahIr4Fo=
Subject key identifier:   D8:EB:1C:DB:68:57:C7:E4:E1:97:1B:3C:7F:CB:44:49:BF:13:C1:86
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0189CEDB31F25548A38DD311002B10262999
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Osc22hXx-Thlxs8f8tESb8TwYY.roa
Signing time:             Mon 07 Aug 2023 07:16:58 +0000
ROA not before:           Mon 07 Aug 2023 07:16:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14445
IP address blocks:        109.176.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Aug 2023 07:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ce:db:31:f2:55:48:a3:8d:d3:11:00:2b:10:26:29:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Aug  7 07:16:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8eb1cdb6857c7e4e1971b3c7fcb4449bf13c186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:3f:74:a8:b2:60:f6:34:aa:9f:37:a5:4a:
                    5c:88:a6:7b:8f:86:93:7a:91:a1:b1:9d:d1:9f:27:
                    89:d3:e5:12:36:5e:61:ea:98:c0:64:55:93:e9:fc:
                    30:92:50:37:75:a9:b1:e4:2a:5d:33:ef:d4:6c:00:
                    f0:68:c2:92:db:f2:c1:2b:cc:a1:cd:bd:6a:82:ec:
                    9a:d4:32:fc:57:af:93:95:7b:b4:f5:86:ff:ea:e7:
                    19:58:5d:2e:f6:ad:10:9d:e5:36:a6:cc:cc:e2:82:
                    5d:7a:23:c4:d4:24:38:75:20:f9:e0:71:10:3f:33:
                    33:0d:4b:7f:b7:bf:00:d6:b9:91:72:6b:b4:03:3e:
                    d9:9f:e3:4f:30:36:aa:7f:7d:ff:d5:d3:64:cb:51:
                    f3:44:6a:b0:19:7c:73:da:cb:31:48:8f:90:0b:ea:
                    e0:35:9d:7b:4d:25:94:8a:e1:1a:09:8d:25:e6:6a:
                    d2:c4:82:7e:1d:e5:4b:97:97:13:df:a4:9f:3e:cd:
                    89:c6:77:d7:ec:5c:4d:44:eb:bb:2a:43:5e:88:de:
                    8d:f6:6e:3c:64:00:f8:37:c1:20:f3:3b:2c:e8:21:
                    22:61:a7:40:80:3d:89:d4:92:30:ac:32:63:45:41:
                    a9:8d:45:51:24:33:1a:73:2b:d9:28:21:3a:62:d6:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:1C:DB:68:57:C7:E4:E1:97:1B:3C:7F:CB:44:49:BF:13:C1:86
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Osc22hXx-Thlxs8f8tESb8TwYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.176.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:8c:6b:f2:60:19:ac:b0:c3:64:c0:f9:35:dc:8f:46:5e:
         ab:bd:8d:12:17:52:7e:34:1a:fe:e0:45:ff:d6:b5:4b:b1:41:
         ea:30:8a:63:40:c0:3e:a5:e1:1f:fd:14:31:b1:26:ee:e9:70:
         ac:43:31:5d:61:16:fe:c1:6c:ea:d3:86:38:ea:b9:25:33:86:
         e6:44:ca:11:1e:57:0f:45:e9:56:5d:71:b3:9f:06:0b:2c:2e:
         5b:0d:f9:ef:9b:0d:6a:42:bb:db:05:3e:e3:1e:39:aa:2c:07:
         df:7f:f5:ce:76:78:6a:3a:ed:b4:72:31:a0:01:3a:86:7d:2d:
         ee:72:74:f4:f7:a4:cd:9f:25:ba:d3:e5:98:89:77:97:5d:cd:
         8e:5c:8c:90:30:1e:8b:e1:b2:e6:d1:73:22:13:c5:4a:ef:c6:
         a2:b1:5e:71:8b:dd:48:59:5d:43:fe:b7:dc:79:04:46:df:8b:
         f0:f2:c6:47:4f:c3:ce:91:5f:62:a4:5c:8e:bb:5e:8e:9f:30:
         83:86:13:de:c0:98:30:b9:cb:5d:18:2c:d1:ec:7f:b6:66:64:
         d3:65:c8:8a:2b:0d:58:04:8f:7e:ea:c3:61:9a:24:31:3d:9b:
         13:65:22:1e:6b:3d:2e:f4:75:52:9a:ec:8b:19:fd:19:6c:eb:
         7a:da:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:19 2024 by rpki-client on console-ams.rpki-client.org