Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TJnkt-lHplFCPy9CuMKA7u3W20U.roa
File:                     TJnkt-lHplFCPy9CuMKA7u3W20U.roa (raw, json)
Hash identifier:          f718IMH3jkFDyNFi8dt2BgdIRSglg+oeoIu8TjkmxWc=
Subject key identifier:   4C:99:E4:B7:E9:47:A6:51:42:3F:2F:42:B8:C2:80:EE:ED:D6:DB:45
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018A644430434B5D9CB5B8F9EC89E4D39D13
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TJnkt-lHplFCPy9CuMKA7u3W20U.roa
Signing time:             Tue 05 Sep 2023 07:35:04 +0000
ROA not before:           Tue 05 Sep 2023 07:35:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     265919
IP address blocks:        89.213.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:64:44:30:43:4b:5d:9c:b5:b8:f9:ec:89:e4:d3:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Sep  5 07:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c99e4b7e947a651423f2f42b8c280eeedd6db45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:36:d9:35:46:05:7e:6f:b0:84:2e:87:55:
                    9d:57:27:40:86:00:63:2f:4e:ba:ee:ae:a2:29:82:
                    1c:95:da:93:46:41:b6:f9:08:d6:e8:71:e5:68:3c:
                    53:3a:53:58:ac:f4:5d:09:b1:82:47:e1:82:9f:03:
                    c8:3b:de:e7:d0:e5:13:ed:30:b3:8e:b4:c9:bc:2b:
                    1d:0f:cd:24:4f:cb:d2:e2:1c:0d:3a:56:50:46:d3:
                    18:67:f7:ff:5b:fa:48:a7:b0:7c:0c:e4:b7:78:97:
                    b0:f6:41:be:c4:05:76:e3:d2:64:72:4e:aa:c4:ac:
                    89:b4:53:fd:07:b1:c7:41:d1:b9:9f:32:a2:25:b7:
                    8d:53:80:5e:cf:37:88:7c:31:ff:61:20:01:67:f4:
                    50:a6:ae:1c:98:ce:e2:6e:6f:98:65:57:91:7a:b9:
                    37:85:c4:b1:76:de:28:aa:c6:2b:1f:7e:e5:dd:51:
                    a7:31:4e:ee:46:c4:7b:cd:1a:69:7a:a0:c6:35:e7:
                    14:df:bc:69:49:46:1c:50:c0:b6:d7:b1:c2:03:75:
                    3d:d8:47:33:d0:3f:4c:32:81:ea:24:45:03:6a:9d:
                    5f:d4:dd:98:83:44:65:f1:1c:d3:8e:67:bc:d9:aa:
                    e1:c4:2d:5f:43:3a:33:92:7b:98:e8:fa:d3:5c:dc:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:E4:B7:E9:47:A6:51:42:3F:2F:42:B8:C2:80:EE:ED:D6:DB:45
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TJnkt-lHplFCPy9CuMKA7u3W20U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:98:07:ce:90:92:49:c0:27:86:24:e7:41:5b:3f:dd:9f:
         2d:6b:45:90:81:9d:f4:cb:ca:3b:99:13:48:1c:19:0f:7a:ce:
         93:30:5e:d5:2f:71:45:97:c6:53:41:ff:3b:6a:d9:ef:c2:e6:
         49:70:b1:f2:1f:d9:0a:d3:9c:45:ba:7d:b5:a1:56:a1:3b:0e:
         20:fe:04:2d:b7:b6:34:c1:d1:4b:64:59:dd:5a:7a:5a:9e:18:
         ce:03:d0:fe:f8:7a:7e:9f:cb:66:4b:dd:ea:3e:55:fd:dd:32:
         75:f8:d0:b1:b1:0c:34:91:a7:ac:92:21:e2:b2:b2:28:23:86:
         4f:7d:43:9a:a2:6b:b4:45:86:61:72:4c:df:4c:47:43:af:30:
         c6:0e:8a:44:56:b0:42:64:87:8e:d4:57:c4:92:64:fd:65:03:
         fe:3b:2b:11:a7:0f:fa:23:70:f7:1f:e4:0a:04:2c:b9:55:8e:
         93:3a:4f:95:ed:ca:d8:2a:9a:81:1c:9d:f6:d0:50:0c:75:bc:
         1a:b0:32:df:cc:ee:71:a7:50:da:61:3d:62:16:99:d6:d7:4d:
         cc:67:49:b0:cb:53:a5:5f:34:fb:b0:54:3e:75:27:8e:15:b2:
         7f:3b:1a:22:b1:e7:22:5a:73:4e:31:f7:15:f3:b5:43:6e:a7:
         04:19:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org