Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa
File:                     eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa (raw, json)
Hash identifier:          KTB42v5sDGot7BndJyzQIN5RE25pw1sgppHqPRYp0RI=
Subject key identifier:   78:B1:12:0D:46:28:07:33:5D:E0:05:75:30:D1:5D:B7:FD:99:50:E0
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B380BE8922A9FD4709ACA7D31FA0ABA13
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa
Signing time:             Mon 16 Oct 2023 10:33:06 +0000
ROA not before:           Mon 16 Oct 2023 10:33:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216159
IP address blocks:        89.213.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 08:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:0b:e8:92:2a:9f:d4:70:9a:ca:7d:31:fa:0a:ba:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 16 10:33:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78b1120d462807335de0057530d15db7fd9950e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:d6:76:51:de:d2:6b:b5:fd:ec:ff:d5:9d:
                    f3:e4:2d:b1:01:e4:29:9e:ec:be:fa:e6:88:f1:27:
                    6a:74:68:79:8e:5c:31:b0:89:0c:6c:a8:ec:db:b4:
                    42:7c:89:e2:3e:4c:fd:3f:61:f7:7a:92:d4:33:1a:
                    56:94:4a:89:b8:53:c8:3f:ec:87:a4:77:64:9e:42:
                    9d:90:45:ed:05:23:30:e0:3b:15:55:ff:a2:6e:d9:
                    21:45:00:4f:d3:09:ac:71:cb:68:ae:2d:83:31:1e:
                    e9:5a:1d:62:7b:7d:9d:c4:d6:1c:54:23:7f:aa:72:
                    34:a8:3d:30:a0:e8:ab:15:66:78:51:8c:c8:86:36:
                    6b:61:8b:8f:0b:8c:55:67:59:17:fa:b8:b4:db:9d:
                    a3:db:65:6c:29:94:f7:d6:5d:0b:89:06:7c:19:49:
                    f7:83:ec:25:fb:25:9a:00:eb:f7:64:f5:59:27:d9:
                    06:72:57:ec:4d:af:a2:10:31:08:12:86:71:5f:5e:
                    d4:b3:8f:a4:01:b2:99:4f:c0:9b:26:c3:c8:a3:45:
                    6f:56:d2:e4:90:93:fa:ff:8d:de:63:39:dc:e2:ee:
                    fd:d4:5d:4d:aa:c8:ec:dc:34:f6:e5:f0:cd:02:c3:
                    db:b2:cf:da:1c:c5:00:1d:0f:67:55:3a:99:6f:78:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B1:12:0D:46:28:07:33:5D:E0:05:75:30:D1:5D:B7:FD:99:50:E0
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eLESDUYoBzNd4AV1MNFdt_2ZUOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:5c:77:85:0b:fa:27:18:ba:fa:7a:34:05:67:d0:ff:79:
         60:f9:70:c4:d0:0f:5e:b7:58:5d:4a:fc:66:07:41:54:91:67:
         30:e3:8f:83:c5:ae:62:c4:d3:76:df:0a:0b:5a:a8:43:c8:5e:
         5e:19:65:b8:c1:2a:07:0a:f5:2e:21:8d:93:df:3e:67:fb:02:
         25:44:28:dd:4f:63:5b:fc:9a:96:ed:c5:e8:67:3c:c1:cb:2a:
         6a:46:ef:44:78:e8:4d:56:07:57:81:90:a8:32:2c:3d:d1:e2:
         c9:cd:c7:c4:9e:e8:9f:6b:ce:30:47:ef:a7:0f:77:45:51:ea:
         30:04:44:92:3e:45:cf:84:7f:80:b0:3d:01:e2:15:7a:7c:56:
         26:20:3d:54:21:6e:cc:e5:69:ee:31:ec:8e:4f:1b:36:6d:14:
         16:6d:e6:3f:06:a0:b3:39:ab:b6:36:02:f3:c6:24:7a:67:56:
         56:74:6f:a6:4c:a3:10:36:ac:44:39:17:b0:b6:2a:b0:16:39:
         0b:e0:a1:8d:7a:cd:4a:a7:be:5e:5c:41:16:4c:a7:c2:4d:16:
         7c:b7:b4:39:2c:4f:de:14:77:99:b7:63:c3:69:98:9c:5c:b3:
         f8:d8:6e:99:52:7b:da:b8:27:dc:16:85:c8:14:56:37:e5:95:
         05:8f:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org