Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaTP8uTogp3vtVxQEA35A2Iaaek.roa
File:                     NaTP8uTogp3vtVxQEA35A2Iaaek.roa (raw, json)
Hash identifier:          /4nKz1tzGDeFl2h13aZ1xQ+qQ6pZeLUcZZVgUeFLC6I=
Subject key identifier:   35:A4:CF:F2:E4:E8:82:9D:EF:B5:5C:50:10:0D:F9:03:62:1A:69:E9
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018E61B9B9155E1A7BB630D368996BAF83B3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaTP8uTogp3vtVxQEA35A2Iaaek.roa
Signing time:             Thu 21 Mar 2024 15:55:45 +0000
ROA not before:           Thu 21 Mar 2024 15:55:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63150
IP address blocks:        89.213.150.0/24 maxlen: 24
                          213.218.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:61:b9:b9:15:5e:1a:7b:b6:30:d3:68:99:6b:af:83:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Mar 21 15:55:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=35a4cff2e4e8829defb55c50100df903621a69e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:f0:3d:ec:81:fc:61:ab:ab:9c:e6:5b:f8:
                    ba:54:95:09:28:ea:a5:4d:67:42:49:fb:b9:4f:61:
                    9c:bd:cb:5d:5f:71:b7:a7:30:05:71:7f:0e:e4:70:
                    a2:3a:4e:c2:46:0f:96:1f:46:c3:d0:5b:50:29:fb:
                    d1:b8:7c:94:5d:7d:b9:ca:45:b8:b4:79:ea:71:ae:
                    93:1f:b5:48:6f:f0:81:96:24:09:37:eb:77:ad:89:
                    c8:96:ad:ee:be:93:37:6c:b7:86:58:0c:4e:03:c5:
                    d3:53:36:02:44:59:6d:74:f4:30:75:04:56:f9:9a:
                    d4:95:1d:81:88:c5:e4:49:da:a6:7e:57:a1:de:28:
                    43:1a:2a:ef:cb:40:9f:65:ab:6f:57:df:5a:ae:a8:
                    46:54:ed:24:e4:2b:df:d2:d8:69:15:26:5c:d2:ef:
                    bb:30:0e:7f:03:06:23:f2:b3:3b:d6:29:80:07:d8:
                    8a:97:a9:8f:f0:1f:be:72:ba:6f:ef:8a:ae:14:92:
                    cd:89:2f:3f:bf:ca:26:f8:9b:12:a6:91:a0:c2:7f:
                    d7:ea:d7:ab:d3:b3:e7:88:94:d5:3d:ce:60:20:a0:
                    3a:a4:f5:c9:58:4b:a7:58:53:0f:38:4c:b8:e8:f9:
                    55:d3:79:68:fb:f1:18:d2:cd:84:29:e1:dc:45:77:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A4:CF:F2:E4:E8:82:9D:EF:B5:5C:50:10:0D:F9:03:62:1A:69:E9
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/NaTP8uTogp3vtVxQEA35A2Iaaek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.150.0/24
                  213.218.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:7a:8f:15:b0:06:27:f9:56:d7:22:f1:8d:57:44:ac:1b:
         64:64:40:69:07:38:8f:2a:ab:10:63:88:0b:7c:67:92:d7:fc:
         cc:26:fd:d1:59:a9:db:b7:24:45:a2:71:92:37:d5:ad:68:63:
         10:48:00:e0:65:15:55:55:ac:ac:c5:3b:0c:66:21:a6:3a:39:
         76:5f:a4:ea:3c:8d:52:f9:47:70:2c:8f:4f:4c:c0:40:c8:a3:
         bf:18:53:a3:fa:cb:39:84:7a:d3:33:09:4e:74:d1:40:f0:01:
         8b:65:71:7c:43:1d:6d:08:1c:67:7a:98:1f:31:61:cc:f9:35:
         56:0c:6e:3f:76:f7:d1:42:51:2d:14:22:e4:24:9b:1d:3a:83:
         64:fb:b5:7c:d8:45:4c:8b:81:77:16:d8:9f:b1:06:16:a2:0c:
         fa:86:86:b9:68:fa:7b:3b:f0:78:e8:aa:3c:71:8d:bf:c2:bd:
         23:01:64:c1:35:e4:48:a6:d2:70:d7:38:34:fe:86:d1:4c:0f:
         8a:a4:88:f6:db:7d:7d:2a:7a:da:d2:24:04:34:8d:eb:63:63:
         ed:f7:4b:46:11:b4:8c:4e:e0:8b:5f:e3:31:b4:bd:99:c9:36:
         40:83:e3:a4:17:39:e0:3d:71:39:71:03:46:ec:8c:f2:5a:66:
         6e:cb:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org