Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fPvlBiQAhYOJTKDjlVX-R4AQ408.roa
File:                     fPvlBiQAhYOJTKDjlVX-R4AQ408.roa (raw, json)
Hash identifier:          CIejRUACg8teH3f3UClHH5fmx0v9lL9Q6pEOZaIz7mk=
Subject key identifier:   7C:FB:E5:06:24:00:85:83:89:4C:A0:E3:95:55:FE:47:80:10:E3:4F
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018E70CBC0A4F629D1E2CD25A63B4740803A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fPvlBiQAhYOJTKDjlVX-R4AQ408.roa
Signing time:             Sun 24 Mar 2024 14:09:45 +0000
ROA not before:           Sun 24 Mar 2024 14:09:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61112
IP address blocks:        89.213.164.0/24 maxlen: 24
                          89.213.184.0/24 maxlen: 24
                          213.218.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 08:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:70:cb:c0:a4:f6:29:d1:e2:cd:25:a6:3b:47:40:80:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Mar 24 14:09:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7cfbe50624008583894ca0e39555fe478010e34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:98:48:ee:bf:f6:3c:f7:89:7a:63:04:68:
                    ad:1c:7b:1f:4c:04:7c:48:a3:c2:49:fa:4a:29:cc:
                    ee:df:e9:f5:56:e7:2b:88:63:68:d9:76:69:7c:b3:
                    9f:67:6b:a4:c9:e4:8d:7d:66:32:be:c0:ce:90:0b:
                    9c:91:9a:85:6a:37:c5:1e:7b:68:48:9d:f2:f2:8d:
                    a1:03:05:a4:b8:5d:ea:23:51:ef:ce:97:60:43:ac:
                    ba:93:4f:f6:2b:96:1d:2b:f8:f3:84:c8:45:bc:fb:
                    f7:0a:fa:8b:42:c1:73:08:17:5d:25:1d:86:38:d8:
                    b3:ec:b9:13:42:c0:da:74:a6:d3:34:81:61:ab:6c:
                    24:62:2d:7d:c1:7b:8c:6d:d7:aa:43:e5:6a:04:db:
                    60:c3:95:3e:a1:09:7b:ee:6e:5d:a7:4a:b7:b3:c3:
                    69:b6:25:4c:82:3e:19:06:ae:3c:5c:76:33:e7:ac:
                    c0:46:2f:9c:bb:d6:e9:b6:c2:1d:fb:6d:0e:e3:c7:
                    a7:83:14:94:94:3f:ba:09:65:6e:32:d5:83:c3:fc:
                    36:51:fd:24:fa:47:cc:20:88:1e:e7:9c:8e:89:a0:
                    ed:82:f4:c7:ea:91:12:be:8a:78:43:19:81:67:56:
                    b3:ef:2d:50:f1:e7:ff:60:81:98:bc:8d:b1:4f:d0:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FB:E5:06:24:00:85:83:89:4C:A0:E3:95:55:FE:47:80:10:E3:4F
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fPvlBiQAhYOJTKDjlVX-R4AQ408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.164.0/24
                  89.213.184.0/24
                  213.218.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c7:c1:a3:57:ee:bd:5e:2b:e4:83:6f:15:b1:a2:51:60:d6:
         6d:e3:dc:fd:3a:ec:a7:16:01:3d:65:d4:a3:dc:17:8a:5b:97:
         59:66:a8:93:24:4e:46:52:c9:2b:2a:b7:39:b0:63:be:d8:7f:
         5d:95:c9:07:08:8e:b7:d7:e0:d6:76:e4:a5:ac:7d:ca:41:b9:
         e0:b4:46:76:23:11:b6:09:af:4e:84:0f:2b:9e:a8:52:36:56:
         67:6a:1a:27:a3:7f:ac:19:d7:8a:28:ec:8c:84:f8:f4:e7:41:
         b0:96:46:ad:8c:37:a0:78:9e:c4:ef:3d:98:05:e5:46:cb:5e:
         36:43:0f:9e:dd:e2:34:4d:c2:65:9d:88:a5:a3:ac:1a:8f:41:
         b0:94:da:a5:1c:ed:d1:3e:5d:2f:ed:27:2f:94:59:86:3a:bc:
         6a:91:3c:32:d0:1d:54:b6:bd:97:0a:bc:4b:f8:14:cf:ba:3a:
         c2:6f:11:9f:04:eb:ee:2e:09:0d:35:87:55:c8:7d:08:0c:4f:
         4b:aa:82:85:34:b2:84:17:85:61:10:a9:57:d1:6a:27:83:a6:
         d1:43:fd:8d:7e:28:f6:8c:f8:1c:65:31:e8:e3:26:b1:be:8e:
         64:8e:a9:52:80:bd:8d:a3:7d:24:d7:c0:a3:5e:b1:cf:8a:67:
         c7:54:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org