Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWF4TUGMUuIJAV1784RAnIezB7A.roa
File:                     iWF4TUGMUuIJAV1784RAnIezB7A.roa (raw, json)
Hash identifier:          F7lu+FaEuy08NKNctn3ouS6AlCBl2MaQ0ax3xGY4z4c=
Subject key identifier:   89:61:78:4D:41:8C:52:E2:09:01:5D:7B:F3:84:40:9C:87:B3:07:B0
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F867A2C26524A56507D909A7996267C6B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWF4TUGMUuIJAV1784RAnIezB7A.roa
Signing time:             Fri 17 May 2024 12:15:04 +0000
ROA not before:           Fri 17 May 2024 12:15:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215267
IP address blocks:        109.176.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 May 2024 08:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:7a:2c:26:52:4a:56:50:7d:90:9a:79:96:26:7c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May 17 12:15:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8961784d418c52e209015d7bf384409c87b307b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0a:81:92:e8:2a:7d:08:17:16:28:07:10:54:
                    26:46:c6:38:e3:74:3f:ef:60:65:7d:e4:1b:94:19:
                    86:91:75:6d:d4:17:e0:94:f2:dc:b4:da:3e:86:53:
                    68:a6:39:83:1c:c2:7f:42:b5:73:8d:d8:a0:f2:63:
                    0b:e5:0a:33:c5:28:26:10:99:e4:ea:9a:e2:b4:30:
                    9a:4f:a9:83:61:82:c0:d5:5f:2d:eb:ff:e0:0c:42:
                    2b:b3:e1:40:32:b7:1b:7f:f8:79:e6:da:18:46:94:
                    5b:d3:06:47:f5:12:b9:70:43:63:2b:1c:f3:fa:ff:
                    b2:df:78:eb:ec:fb:55:62:19:1e:47:35:5d:44:f2:
                    b8:11:d1:1b:42:9b:52:6e:e6:75:74:3d:92:72:e8:
                    67:10:78:b2:ec:de:49:e5:5b:5f:64:7c:ce:9b:1d:
                    12:2a:77:3e:28:a2:14:9a:5f:79:ab:34:a7:70:e7:
                    f0:c5:78:1e:22:c6:6b:ec:ce:ff:ed:78:28:65:fe:
                    e1:ce:4f:87:ba:24:c6:f6:5c:fb:63:0e:f8:ec:e7:
                    b6:77:a1:f0:c2:97:4e:29:f4:9f:5e:62:83:98:99:
                    90:a0:ae:cc:c5:44:3a:66:d4:ab:fa:3c:e2:8f:11:
                    5a:22:e5:ba:0b:dc:6a:9f:a7:fe:da:e7:e6:8e:9d:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:78:4D:41:8C:52:E2:09:01:5D:7B:F3:84:40:9C:87:B3:07:B0
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iWF4TUGMUuIJAV1784RAnIezB7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.176.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:3b:fc:57:03:da:72:dd:dc:99:cf:2c:b2:55:61:1c:26:
         51:ff:77:b0:d3:06:9d:04:b5:85:ad:35:0a:1a:79:1c:ad:fd:
         69:3d:3a:ad:65:52:dd:22:b4:ce:c3:8b:d9:90:7b:1a:c7:83:
         cc:5b:1b:bc:7d:f8:0c:b5:9d:49:ce:f0:fe:e2:a0:1c:1b:8d:
         7f:6a:1a:1d:f1:78:4d:fb:3f:aa:a0:30:18:f6:f9:93:14:40:
         37:44:9d:7b:85:c0:c1:62:4e:31:93:5d:67:8b:6e:8c:8d:95:
         58:4b:72:fc:5e:6f:04:0c:a1:69:fc:b9:ed:e3:68:62:8e:52:
         31:4a:f7:2f:f8:36:c4:05:e7:01:d4:4f:6f:9a:6d:f3:62:0a:
         99:bc:9b:b2:73:7d:20:52:3c:3f:0d:4f:b9:10:0c:f8:a2:56:
         9c:9e:95:34:8a:69:22:9a:ed:a3:15:d1:a3:6a:16:8a:d2:37:
         40:4f:d9:f0:41:01:84:00:42:8d:1d:0b:d3:f4:2e:6b:8b:5c:
         22:6e:86:75:de:44:47:64:b3:8d:38:bc:e8:8c:d6:a0:ff:5e:
         c8:80:bd:d7:eb:ad:d1:13:6d:60:c2:8c:d9:da:4b:44:c7:02:
         43:94:6a:8a:29:9f:47:24:d5:fb:33:d3:76:0c:82:59:49:16:
         c4:1b:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org