Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MvgFCN6YiiJkHUco521927flwtw.roa
File:                     MvgFCN6YiiJkHUco521927flwtw.roa (raw, json)
Hash identifier:          jADZ5DoEORTD/o2xKVUK95g5VtNtk3CDeJpgjH5mERo=
Subject key identifier:   32:F8:05:08:DE:98:8A:22:64:1D:47:28:E7:6D:7D:DB:B7:E5:C2:DC
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B3E66CE9B5989E78D0A9C0FC308ECA3B4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MvgFCN6YiiJkHUco521927flwtw.roa
Signing time:             Tue 17 Oct 2023 16:10:06 +0000
ROA not before:           Tue 17 Oct 2023 16:10:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     271842
IP address blocks:        89.213.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3e:66:ce:9b:59:89:e7:8d:0a:9c:0f:c3:08:ec:a3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 17 16:10:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=32f80508de988a22641d4728e76d7ddbb7e5c2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:50:80:5d:f5:6d:a7:76:2c:b4:40:f0:b9:6f:
                    c8:c6:b6:31:ac:36:a8:96:ce:c4:3a:b6:c4:94:1d:
                    c6:45:7a:2d:c3:32:71:e7:4f:29:15:82:32:30:57:
                    25:77:24:38:f5:20:d1:7d:4b:92:b1:12:57:f9:28:
                    ac:9e:f0:db:9e:e5:df:95:1d:15:b1:0e:a9:89:7d:
                    1f:a3:1f:db:be:b1:d9:a8:d9:68:49:e6:9c:82:6e:
                    e1:c5:d8:d4:e9:a2:a2:c3:e9:46:8b:4b:be:cd:e0:
                    68:fe:35:fb:b4:33:7c:fa:fc:16:96:a7:1e:c2:be:
                    35:97:81:ce:5a:87:7d:bc:e1:26:1c:79:92:86:04:
                    51:9f:9c:cf:02:a6:9f:87:44:d2:08:65:7c:c1:2b:
                    24:fb:15:31:bc:b9:b9:62:0a:ab:c8:56:2c:ed:dc:
                    8f:2e:7b:6f:83:1e:6f:b2:ca:96:17:ef:98:d8:15:
                    55:e8:72:d5:37:a2:5c:0e:fc:ff:ca:cd:5d:e2:2a:
                    1f:14:e8:9c:03:b1:e2:15:1d:60:19:48:06:60:0d:
                    27:c7:44:1b:49:0f:47:5f:20:7c:92:66:de:ad:f2:
                    38:68:ad:1c:0b:19:59:1f:08:76:87:5b:a6:82:fe:
                    43:a0:47:7b:2e:8a:74:1c:30:0e:bc:e0:f4:86:a5:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F8:05:08:DE:98:8A:22:64:1D:47:28:E7:6D:7D:DB:B7:E5:C2:DC
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MvgFCN6YiiJkHUco521927flwtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:60:e0:63:7d:98:0e:9a:c3:1f:cb:84:36:98:a5:bb:f9:de:
         4c:d7:ef:b6:7c:89:dd:bf:ac:55:f2:98:4b:8a:3a:50:ef:1c:
         1f:79:99:d6:d0:f0:13:ec:38:bf:a7:a2:0c:48:70:02:3f:3c:
         bf:b6:cd:20:ba:e3:a6:f4:78:6e:76:78:22:93:02:9a:fc:a8:
         26:35:e2:3a:75:99:33:ba:6a:47:47:d9:0e:3a:a0:47:ec:0a:
         35:94:7d:6c:a1:cc:61:3d:2b:db:72:f6:a0:32:2f:c7:fc:63:
         1d:70:f4:03:90:89:c8:d8:6d:12:a4:78:ab:73:39:a8:23:78:
         1a:fd:ec:20:6c:db:12:3c:2f:bf:14:0e:89:a2:b3:14:01:6d:
         2b:79:6b:22:af:f1:ab:42:6a:73:3f:91:2b:2a:b8:1a:13:a5:
         3e:e9:a2:88:92:2b:d8:46:ad:ef:ab:7f:df:67:42:c2:0b:01:
         74:38:3b:f1:bf:24:02:2b:72:b8:87:55:55:2f:69:ef:23:ac:
         dc:5a:34:42:03:ce:d4:aa:cf:e4:c2:d6:d7:d4:ca:6b:88:e4:
         45:f4:00:58:b1:a4:37:2d:99:34:09:5e:61:38:3d:b2:b2:e1:
         51:45:a6:bb:8d:c1:61:b7:39:18:23:6b:d1:69:67:f1:81:f3:
         0b:4e:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org