Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WHga0hF65mfjieaDXm3GHJ15H_o.roa
File:                     WHga0hF65mfjieaDXm3GHJ15H_o.roa (raw, json)
Hash identifier:          kfMgHMooRTwtuvAfybsi0vsCe8YlNoYDIfPZa7ZPMOU=
Subject key identifier:   58:78:1A:D2:11:7A:E6:67:E3:89:E6:83:5E:6D:C6:1C:9D:79:1F:FA
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018BDD1FF824539057A4F453A99EBBD6511C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WHga0hF65mfjieaDXm3GHJ15H_o.roa
Signing time:             Fri 17 Nov 2023 11:52:21 +0000
ROA not before:           Fri 17 Nov 2023 11:52:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216159
IP address blocks:        89.213.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 Nov 2023 08:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:1f:f8:24:53:90:57:a4:f4:53:a9:9e:bb:d6:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 17 11:52:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58781ad2117ae667e389e6835e6dc61c9d791ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:59:50:5a:07:c1:c9:bb:e2:45:12:5a:85:
                    f3:e5:63:ea:27:ad:47:d4:77:09:e1:36:cb:8b:b2:
                    c8:ee:3f:77:da:88:2c:22:38:79:db:32:10:49:aa:
                    7c:b7:cb:7e:ba:10:ca:06:71:7d:b4:59:71:77:e0:
                    09:0b:38:c9:88:ec:50:c6:4c:18:d5:0e:56:25:a2:
                    16:54:6d:61:58:bf:a9:53:46:2c:82:45:fa:9b:6b:
                    a1:75:48:25:50:48:2b:ee:44:6e:6f:f3:4a:13:38:
                    62:8e:4a:f9:3e:12:4b:2f:fd:f9:9b:e1:cc:cf:89:
                    f8:da:ac:70:05:71:49:4f:54:0a:2e:60:f2:6c:d6:
                    6a:a9:fa:5c:f3:23:49:a1:e0:4e:45:c2:8b:41:84:
                    34:61:3e:c1:20:90:b2:11:10:d6:7f:fa:4b:ff:7f:
                    1f:89:c2:90:00:30:e0:f9:7e:36:fe:fb:21:09:7b:
                    0f:ae:2f:5a:53:9b:d3:7b:b1:f8:0f:73:59:f1:6a:
                    d7:30:e8:d3:21:87:3a:a3:4b:6a:b3:42:42:c9:fc:
                    a6:4e:6a:5b:02:3e:61:89:a8:e5:bd:1e:e4:f4:55:
                    c5:76:a6:ba:8e:c4:75:51:27:bc:fa:2c:1e:de:ed:
                    81:6f:05:e7:54:8e:1c:05:b7:1b:fc:18:78:0c:55:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:1A:D2:11:7A:E6:67:E3:89:E6:83:5E:6D:C6:1C:9D:79:1F:FA
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WHga0hF65mfjieaDXm3GHJ15H_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:50:56:21:0c:9b:9b:2f:0f:1f:0b:7b:3b:cd:fb:6e:bb:
         1b:c5:10:6f:10:05:fd:64:4f:55:66:58:13:6d:91:ce:5d:34:
         96:3d:86:84:c8:8b:d9:1e:b7:9d:f8:46:ac:89:40:73:94:02:
         6b:65:cf:17:56:01:55:77:c9:5f:9e:0a:1c:43:cb:2f:f6:6a:
         a6:f2:9c:c7:f3:92:15:de:87:02:5b:c0:d6:d8:37:64:4e:a1:
         85:95:d2:38:f8:b9:c7:76:ef:c3:16:ed:dd:8a:38:96:e4:05:
         7b:58:f8:9f:0e:3e:96:03:7e:44:05:1b:a6:2e:8b:96:aa:d0:
         7f:78:17:04:61:72:7f:87:e3:f9:17:81:87:75:7c:9b:70:f2:
         6f:7c:1d:68:ea:59:ba:20:b4:01:ee:f9:84:cc:fa:18:4a:8d:
         06:85:0a:9d:df:0a:86:d4:c7:11:d9:b5:0b:ee:3f:1f:a4:ff:
         12:6a:65:1e:b2:76:01:57:6a:a0:b8:bd:08:5d:fb:5d:10:b8:
         7a:7c:eb:eb:60:75:97:2a:a3:54:f8:1c:37:8c:36:c9:4f:a0:
         c2:3d:2b:81:83:ec:30:8f:28:ee:04:07:06:01:cd:16:54:e0:
         5d:91:21:79:23:91:b6:3d:66:27:27:ad:29:64:54:6e:7d:dd:
         19:21:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org