Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M3gcLEBO7Tzrf_xRQpy9nKp5G-U.roa
File:                     M3gcLEBO7Tzrf_xRQpy9nKp5G-U.roa (raw, json)
Hash identifier:          1aK9LRYWobJrDxyGpumjy58ubL/iJG+kllqNHYDp8E0=
Subject key identifier:   33:78:1C:2C:40:4E:ED:3C:EB:7F:FC:51:42:9C:BD:9C:AA:79:1B:E5
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018CC3495472FF1FA4DD6271895A250EAE9C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M3gcLEBO7Tzrf_xRQpy9nKp5G-U.roa
Signing time:             Mon 01 Jan 2024 04:30:12 +0000
ROA not before:           Mon 01 Jan 2024 04:30:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51847
IP address blocks:        89.213.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 May 2024 18:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:54:72:ff:1f:a4:dd:62:71:89:5a:25:0e:ae:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 04:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33781c2c404eed3ceb7ffc51429cbd9caa791be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:c6:0e:9a:b2:99:10:9a:32:8a:97:7e:e7:
                    bf:c8:f9:27:e9:7c:a8:fb:07:46:fb:c9:1e:1f:3c:
                    6d:71:85:07:0f:27:92:df:29:10:e4:df:1c:63:e1:
                    43:02:f4:c1:e3:f7:b9:b4:58:c7:7f:83:20:f5:fb:
                    ab:c1:b0:a0:bc:be:51:2f:69:ef:dd:98:85:b7:6f:
                    d2:64:22:d0:17:d3:c7:4e:ba:d1:e9:fa:d4:16:b9:
                    d1:25:8e:7b:26:51:95:8f:73:63:29:18:15:d2:43:
                    b3:47:9c:cb:a7:95:8c:ac:2a:48:08:d4:cb:64:b0:
                    91:d5:13:85:a3:0f:51:a2:e8:50:cc:c7:f3:13:69:
                    f6:34:db:2c:f8:5b:29:73:bc:a5:21:03:f3:98:14:
                    b6:49:ae:5d:1e:ae:84:48:b0:70:b8:36:fc:3c:a6:
                    ce:57:5c:8d:e2:02:36:da:cf:fd:bb:49:8b:95:2f:
                    52:37:bd:ec:cf:25:69:8c:e1:f0:09:4e:e2:d6:85:
                    00:80:49:c1:35:10:52:6b:ac:f3:de:11:19:8c:09:
                    e8:7e:21:b3:cb:c7:63:f0:87:a3:c1:c3:ac:ab:67:
                    26:90:3a:e7:c4:e1:be:48:29:fa:7b:b9:ee:89:dd:
                    04:38:62:0a:0d:d5:b7:4f:22:91:42:78:30:bf:17:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:1C:2C:40:4E:ED:3C:EB:7F:FC:51:42:9C:BD:9C:AA:79:1B:E5
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M3gcLEBO7Tzrf_xRQpy9nKp5G-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:be:e2:a4:aa:c8:76:a3:14:79:b2:ff:a5:cb:e6:3a:e1:
         e3:51:69:32:4b:72:80:7e:d0:26:6b:97:b3:91:af:23:ee:7d:
         52:fd:d8:21:b6:30:ce:df:48:fb:78:fb:aa:0b:db:f6:98:a6:
         40:cc:a6:11:62:18:76:81:70:fe:e8:27:29:84:55:4f:93:2e:
         dc:ea:0e:fc:34:a1:2f:94:58:74:d3:93:26:d9:6f:90:f2:18:
         8a:45:f2:30:f3:25:37:1a:2e:b0:72:a1:f6:d3:ad:64:8e:1f:
         4e:a3:f3:ec:d5:c0:27:3f:ad:97:ed:06:ef:0c:ab:59:9e:30:
         10:0c:27:6d:38:72:33:44:10:df:4b:58:ef:87:f6:bf:7a:70:
         ba:f0:c8:83:47:f7:66:26:1a:87:23:2b:b9:61:02:2c:be:cd:
         08:0e:e7:a5:6f:17:bd:d2:5f:3c:0b:e4:80:d7:7f:38:55:d0:
         9e:4b:4e:45:78:0e:b2:e4:49:21:e1:7f:2b:07:7a:85:00:a2:
         f9:13:6b:fd:0d:6c:36:a6:df:94:24:e4:43:f9:c0:22:62:2b:
         83:f8:9b:82:57:58:bd:cd:b8:75:7e:33:4e:78:c4:cf:e1:0f:
         0a:86:9e:09:46:32:d5:4a:1e:ee:88:0d:7a:2f:44:ef:f5:e4:
         ed:0e:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org