Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ak75PbgrazfYLL5h9vdkjqW9Zvg.roa
File:                     ak75PbgrazfYLL5h9vdkjqW9Zvg.roa (raw, json)
Hash identifier:          wi1jwj0ch1df97tye7s+djGM3vI4amFzXoNzAYIC13c=
Subject key identifier:   6A:4E:F9:3D:B8:2B:6B:37:D8:2C:BE:61:F6:F7:64:8E:A5:BD:66:F8
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018CC34953DBCABF4F3B5C3F1A47E7FAAE20
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ak75PbgrazfYLL5h9vdkjqW9Zvg.roa
Signing time:             Mon 01 Jan 2024 04:30:11 +0000
ROA not before:           Mon 01 Jan 2024 04:30:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48678
IP address blocks:        109.176.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 03 Mar 2024 14:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:53:db:ca:bf:4f:3b:5c:3f:1a:47:e7:fa:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 04:30:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6a4ef93db82b6b37d82cbe61f6f7648ea5bd66f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:e2:d7:9d:f6:9b:60:8a:16:aa:96:83:a9:
                    b9:25:a5:2a:9c:1d:ea:be:2b:a9:d0:8f:d8:38:45:
                    3e:8e:d1:fb:a3:26:dc:75:43:88:fe:ea:c2:5a:6f:
                    28:af:e0:d7:bc:3e:21:a0:e4:c3:fb:9f:d7:0f:0a:
                    8b:a0:cd:4d:d8:1f:27:84:18:bb:be:a2:17:d7:9e:
                    f8:34:12:b2:d4:d0:bf:b7:e7:8b:7c:c0:7e:d6:eb:
                    16:dd:e2:88:3d:29:d5:ae:15:5f:2f:d5:dc:b4:64:
                    0a:1d:38:c6:df:d6:c7:35:84:20:69:cc:b9:29:40:
                    9c:9f:c4:16:6d:1e:40:c6:3d:bb:29:10:36:52:58:
                    55:35:af:49:d9:f6:f3:b5:1d:95:67:68:2d:5f:53:
                    23:7e:84:44:01:39:9d:15:86:aa:1e:1a:f8:38:f0:
                    54:c9:a0:54:e3:93:94:81:15:af:95:4f:dc:85:5a:
                    e1:15:48:cb:df:14:36:a5:e1:c8:33:c1:a9:9b:34:
                    89:2e:cb:b8:25:7a:48:23:83:06:a9:fc:a2:bf:b5:
                    b2:d9:2e:70:c0:9a:42:92:d8:fe:64:93:07:24:e7:
                    12:0b:66:8e:1f:74:06:c9:f4:4e:4a:cf:d5:0b:e1:
                    6f:33:0a:87:e8:42:76:ae:ae:31:48:be:ed:4d:8a:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:F9:3D:B8:2B:6B:37:D8:2C:BE:61:F6:F7:64:8E:A5:BD:66:F8
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ak75PbgrazfYLL5h9vdkjqW9Zvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.176.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:22:d9:1e:81:cf:61:2c:a6:eb:8a:34:59:89:ae:f9:d7:7d:
         86:73:96:7a:d7:bf:9f:9c:22:5c:f0:36:83:85:b3:8d:4a:e1:
         12:cf:a2:c0:8a:37:e2:17:c8:15:8e:7d:e5:54:4d:a5:01:48:
         67:dc:32:8d:a4:ff:60:96:d6:a1:ed:38:1c:ce:fd:18:b5:e4:
         79:df:da:ff:8b:ec:64:b7:ed:be:92:b8:88:f8:eb:ae:0e:eb:
         ab:d7:fa:53:0a:c5:fa:75:18:a7:8e:fe:b6:8c:bc:da:60:eb:
         85:11:b9:4f:54:ba:ba:fd:8d:b7:d0:ab:07:42:e5:07:42:b7:
         69:56:6f:e5:03:3b:45:42:5b:b8:6b:d5:88:b0:c3:f0:ee:b8:
         56:32:b4:5b:23:02:c1:64:72:79:80:d0:e7:65:85:40:91:bf:
         87:28:21:ad:13:51:4e:ed:df:0a:e2:1a:64:c0:f2:ac:6d:65:
         c1:47:a4:f5:b4:a4:27:a1:1d:cf:6b:05:0a:bc:93:e1:89:98:
         eb:98:a2:79:21:51:c9:cf:92:7b:db:21:74:26:cb:dd:47:f7:
         e3:a4:c4:f8:b9:f5:04:22:40:5f:4d:47:00:93:1b:0a:0c:96:
         82:7d:8a:45:95:fa:34:d9:65:9a:94:5c:4d:e8:c5:9b:1a:19:
         d8:95:c4:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSVPbyr9PO1w/Gkfn+q4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMTAxMDQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTRlZjkzZGI4MmI2YjM3ZDgyY2JlNjFmNmY3NjQ4ZWE1YmQ2NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXni1532m2CKFqqWg6m5JaUqnB3q
viup0I/YOEU+jtH7oybcdUOI/urCWm8or+DXvD4hoOTD+5/XDwqLoM1N2B8nhBi7
vqIX1574NBKy1NC/t+eLfMB+1usW3eKIPSnVrhVfL9XctGQKHTjG39bHNYQgacy5
KUCcn8QWbR5Axj27KRA2UlhVNa9J2fbztR2VZ2gtX1MjfoREATmdFYaqHhr4OPBU
yaBU45OUgRWvlU/chVrhFUjL3xQ2peHIM8GpmzSJLsu4JXpII4MGqfyiv7Wy2S5w
wJpCktj+ZJMHJOcSC2aOH3QGyfROSs/VC+FvMwqH6EJ2rq4xSL7tTYqCgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGpO+T24K2s32Cy+Yfb3ZI6lvWb4MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYWs3NVBiZ3JhemZZTEw1aDl2ZGtqcVc5WnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD1MA0G
CSqGSIb3DQEBCwUAA4IBAQBoItkegc9hLKbrijRZia75132Gc5Z617+fnCJc8DaD
hbONSuESz6LAijfiF8gVjn3lVE2lAUhn3DKNpP9gltah7Tgczv0YteR539r/i+xk
t+2+kriI+OuuDuur1/pTCsX6dRinjv62jLzaYOuFEblPVLq6/Y230KsHQuUHQrdp
Vm/lAztFQlu4a9WIsMPw7rhWMrRbIwLBZHJ5gNDnZYVAkb+HKCGtE1FO7d8K4hpk
wPKsbWXBR6T1tKQnoR3PawUKvJPhiZjrmKJ5IVHJz5J72yF0JsvdR/fjpMT4ufUE
IkBfTUcAkxsKDJaCfYpFlfo02WWalFxN6MWbGhnYlcRG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org