Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BiT2SlgiT29-dizpn6KvV5vhtvw.roa
File:                     BiT2SlgiT29-dizpn6KvV5vhtvw.roa (raw, json)
Hash identifier:          ITt9hKFwmx8dY1HdbHhgsMk0hNxL4tYa0aDe1IxoFAg=
Subject key identifier:   06:24:F6:4A:58:22:4F:6F:7E:76:2C:E9:9F:A2:AF:57:9B:E1:B6:FC
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018BDD955B093F8218EDA92F84D43DA88DE4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BiT2SlgiT29-dizpn6KvV5vhtvw.roa
Signing time:             Fri 17 Nov 2023 14:00:34 +0000
ROA not before:           Fri 17 Nov 2023 14:00:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48678
IP address blocks:        109.176.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 11:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:95:5b:09:3f:82:18:ed:a9:2f:84:d4:3d:a8:8d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 17 14:00:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0624f64a58224f6f7e762ce99fa2af579be1b6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:f2:37:0c:6b:26:f5:d8:a8:65:d1:1c:7a:
                    b8:90:cd:3f:ba:c2:c1:db:e0:76:1d:70:0d:ee:e6:
                    6b:47:31:a9:0f:80:66:47:5a:b2:0c:8f:9b:72:77:
                    c4:0d:bf:af:a1:ce:76:52:60:28:c6:43:a8:85:18:
                    b4:92:81:18:66:ca:f6:77:5a:ff:70:5e:13:2a:1c:
                    bf:0d:65:9a:dd:4a:12:0f:d3:55:f9:bc:29:18:37:
                    0c:e7:d2:85:4a:bc:43:63:c3:6e:41:71:bf:70:39:
                    fc:5d:b4:46:7a:0b:43:60:bd:e5:f5:34:1a:ff:01:
                    29:99:a3:45:ea:e5:8f:f8:11:c3:ad:04:3d:e6:a6:
                    2b:53:ac:fe:db:24:3e:38:d1:8b:c8:f8:ac:72:f2:
                    f3:b6:32:9d:b0:d6:63:a1:67:69:36:ee:3b:0b:a1:
                    a1:e6:b5:20:03:97:d4:0f:0a:fe:4f:2e:81:34:f6:
                    13:0a:ea:dd:c2:70:2c:28:13:fb:f2:af:dd:47:97:
                    97:56:bf:bc:ff:24:4b:a4:48:64:46:58:3f:b3:6b:
                    8f:2b:54:3c:11:22:48:89:fa:73:0a:b3:00:8c:c6:
                    e2:50:30:2e:2a:49:27:30:a7:76:c2:30:15:e6:17:
                    aa:86:5d:33:38:66:54:a2:5e:81:89:c4:83:57:e9:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:24:F6:4A:58:22:4F:6F:7E:76:2C:E9:9F:A2:AF:57:9B:E1:B6:FC
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BiT2SlgiT29-dizpn6KvV5vhtvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.176.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:cf:f0:4a:2e:d6:2e:2f:db:3e:38:af:e1:b5:1c:e6:4a:
         33:49:4b:c0:57:6d:37:e3:bd:6e:47:63:ac:dc:77:60:d1:e9:
         d3:e4:36:19:fb:90:47:67:22:3a:ac:ca:ba:c8:4b:dd:c6:8a:
         3e:b2:4c:99:74:bf:0f:05:62:3c:68:93:b3:b1:e1:70:cc:ba:
         48:d2:79:57:42:6c:bb:1f:9d:a9:31:8b:34:02:5d:cb:ae:21:
         e1:90:a1:dd:73:a4:5e:0f:f6:6a:6c:64:d1:bb:41:f3:87:52:
         47:76:3b:ec:bb:5f:43:21:2f:fa:b6:00:54:77:cf:50:7a:27:
         29:5b:14:cb:6d:80:9a:66:2a:32:80:22:ac:f3:e8:11:c2:15:
         69:4e:a5:ff:dd:5b:a4:43:35:f1:c1:b5:d8:24:e9:95:c9:e2:
         74:72:d5:aa:b2:fc:eb:f7:57:f6:2b:a7:b8:38:6f:07:23:d6:
         e9:db:3b:e6:c7:f4:d7:f7:87:02:e1:60:2e:09:bc:1c:f9:38:
         32:fa:4a:99:1d:d2:af:d0:92:66:79:ac:bf:a9:40:95:d2:4a:
         cc:1f:89:1a:8f:89:03:74:ee:b2:7b:58:38:98:eb:9e:48:63:
         84:44:85:a4:2b:b4:f8:23:66:33:bd:3b:3a:73:9e:0f:c8:53:
         ed:db:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org