Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5kOWnRS-he78fljLNraJ7iNJZPE.roa
File:                     5kOWnRS-he78fljLNraJ7iNJZPE.roa (raw, json)
Hash identifier:          gm93tV7FCTwrCn/kDm3unTIwXjt3xFv6Vw+wZU3jvF4=
Subject key identifier:   E6:43:96:9D:14:BE:85:EE:FC:7E:58:CB:36:B6:89:EE:23:49:64:F1
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018A60057396D4F467B78555AF80338020CB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5kOWnRS-he78fljLNraJ7iNJZPE.roa
Signing time:             Mon 04 Sep 2023 11:48:04 +0000
ROA not before:           Mon 04 Sep 2023 11:48:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197624
IP address blocks:        89.213.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:60:05:73:96:d4:f4:67:b7:85:55:af:80:33:80:20:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Sep  4 11:48:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e643969d14be85eefc7e58cb36b689ee234964f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b2:b4:c2:40:7e:9b:a5:1c:da:8e:84:8d:dd:
                    33:73:45:ec:f7:a9:d5:6b:28:2b:90:33:35:59:90:
                    05:37:3a:63:a8:7b:85:7a:73:6e:6e:5c:5c:36:30:
                    56:e1:2e:00:03:29:ea:a9:9c:e9:0e:78:a7:77:9b:
                    a3:68:43:ba:24:49:c8:47:ea:c0:21:03:bb:7a:7b:
                    06:4c:6b:b5:82:60:3c:c9:5f:06:b9:91:ac:b7:38:
                    66:34:b4:51:e1:9d:18:8c:a3:9e:dd:0c:d5:2e:af:
                    c0:65:89:98:ea:93:b0:03:dc:62:fc:8e:81:9a:1c:
                    e7:40:8d:8a:b5:57:7d:bd:e7:e7:8c:fc:04:66:11:
                    38:38:e4:9e:8d:97:fe:6f:3a:1b:0f:33:69:a4:c8:
                    f8:85:af:fb:b6:3f:89:99:57:50:e0:44:34:1c:3a:
                    9b:6e:4e:e3:76:55:dc:7f:f0:42:18:78:1f:bc:7a:
                    c3:f3:02:ba:4f:87:8c:72:83:4c:00:79:fd:8e:96:
                    fb:f7:e7:c3:76:96:7f:15:89:72:a9:f0:f8:53:63:
                    03:44:0e:6c:e1:9c:66:bc:30:70:12:23:22:6a:ce:
                    18:2a:f7:f2:9c:3d:72:94:0f:1a:bf:6a:46:3e:ea:
                    e0:1e:62:48:27:c1:a4:21:b4:27:06:43:8a:50:8b:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:96:9D:14:BE:85:EE:FC:7E:58:CB:36:B6:89:EE:23:49:64:F1
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5kOWnRS-he78fljLNraJ7iNJZPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:7a:4b:57:83:5a:c7:ec:b0:09:64:ee:ee:9c:83:d8:4e:
         c5:14:74:5f:13:6c:dc:c1:f0:a1:67:70:4f:e6:7a:5d:c4:a5:
         8a:a9:71:f2:50:c7:05:6a:5f:8d:2c:18:98:03:83:2a:9a:7b:
         2b:06:ca:63:1d:59:02:22:94:fb:eb:f3:6b:d6:e0:9f:70:87:
         18:6c:d5:ff:de:d5:5a:11:73:6a:e2:13:24:85:bc:49:b9:d4:
         d1:43:8b:6a:6c:41:f3:18:99:a8:b9:9a:e5:55:6a:09:6f:d6:
         77:ba:07:a2:06:b2:93:f4:88:21:50:3a:a3:be:3f:08:dc:d0:
         b2:ff:c3:91:85:2c:9f:17:7f:40:b1:8a:78:37:1c:bc:cb:2e:
         63:4d:75:7d:20:90:4a:6b:ee:aa:7d:44:53:6a:2a:48:ca:9f:
         c0:54:45:f7:0d:7c:8e:9a:2f:ff:3c:7d:6a:b6:0d:16:39:bd:
         65:86:b7:62:2f:9d:1c:36:ab:9d:d1:8d:9c:83:26:76:a4:a6:
         c7:c3:e8:3e:d6:8e:c5:c9:90:d8:2f:41:d7:3d:95:39:8e:fc:
         02:61:a3:16:22:5c:d9:1d:7b:4d:37:54:d8:aa:85:1d:a2:51:
         e1:55:e5:b0:ab:5d:82:cd:5b:4e:bc:7f:eb:54:5f:bb:5b:20:
         93:15:6c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org