Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j0FGaRDNUgUmveXvDjrSN5w8eKA.roa
File:                     j0FGaRDNUgUmveXvDjrSN5w8eKA.roa (raw, json)
Hash identifier:          iDHG/QpVf3tNX943b1nHdI8TJ9Uv/x7SVsj+seEEhzE=
Subject key identifier:   8F:41:46:69:10:CD:52:05:26:BD:E5:EF:0E:3A:D2:37:9C:3C:78:A0
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018C8BE39A1FBC3164AECA99D52C0A75AB35
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j0FGaRDNUgUmveXvDjrSN5w8eKA.roa
Signing time:             Thu 21 Dec 2023 10:19:58 +0000
ROA not before:           Thu 21 Dec 2023 10:19:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57974
IP address blocks:        89.213.181.0/24 maxlen: 24
                          89.213.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 24 Dec 2023 14:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:e3:9a:1f:bc:31:64:ae:ca:99:d5:2c:0a:75:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Dec 21 10:19:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f41466910cd520526bde5ef0e3ad2379c3c78a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:33:62:4d:cc:15:97:04:74:c2:02:78:c5:
                    02:bd:0c:00:f1:42:2b:52:31:dc:e7:68:47:99:49:
                    51:3f:20:85:5c:77:36:f2:a3:7e:30:c7:b5:86:df:
                    b2:5f:02:32:f7:c0:18:69:f5:49:1a:65:2a:c6:a8:
                    22:22:0a:62:c6:ee:40:0e:69:21:d6:9e:9b:f1:d2:
                    32:f8:b5:75:67:8b:e1:c9:2b:49:d6:ec:ed:25:ab:
                    7c:ff:49:37:bf:c6:d3:d4:2a:95:b2:0c:e3:43:e3:
                    76:c2:62:9f:86:73:f1:46:58:e0:a5:fb:c2:7b:d6:
                    98:26:3a:8b:10:cd:69:08:6a:43:39:f1:4d:2d:ef:
                    eb:ed:0c:b2:84:b8:a8:2b:b6:4c:4e:0d:7c:60:ca:
                    05:93:cf:7c:7f:b5:b2:44:2d:6f:6a:13:65:a4:ae:
                    83:01:30:7d:56:b1:b8:ca:d7:88:24:0d:0f:13:e2:
                    6b:29:0f:35:f5:e0:e3:dd:31:47:8a:23:73:9b:f6:
                    c6:b9:bc:55:23:60:cf:b7:01:c5:9b:ac:dd:e7:0b:
                    74:8e:b1:14:f4:d0:98:9c:7d:9d:b9:1d:c2:1f:09:
                    c4:8c:32:8a:60:29:48:7d:c0:15:bc:f3:c0:4a:a1:
                    a8:a1:4f:4c:c8:0e:e2:b4:ad:cd:57:0e:14:88:68:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:46:69:10:CD:52:05:26:BD:E5:EF:0E:3A:D2:37:9C:3C:78:A0
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j0FGaRDNUgUmveXvDjrSN5w8eKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.147.0/24
                  89.213.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:ca:25:e7:65:9a:3b:f9:be:28:3d:f8:f7:1d:69:2d:65:
         41:d7:26:ae:a7:62:b3:69:13:e3:b6:eb:da:d7:f4:7a:3f:fe:
         bd:8c:7a:84:f5:01:4e:61:c5:22:0d:85:54:ea:2e:b9:ae:48:
         48:9b:c0:c2:78:3d:d9:63:36:39:79:9d:95:7b:17:94:c8:ec:
         da:6f:05:78:1a:4c:33:f9:88:20:15:80:75:63:7a:d3:22:80:
         ac:33:33:43:8e:2a:67:c5:39:fd:37:a9:e7:5e:2c:4c:d4:69:
         97:aa:7c:d1:90:0c:6c:79:8e:27:ac:0f:8a:ee:59:2c:d3:ae:
         8c:21:06:f6:e7:60:85:d6:77:43:40:65:ca:c2:7b:b2:ce:1c:
         19:b0:11:6d:75:57:32:e5:4e:22:26:0f:66:21:16:94:60:2d:
         ae:07:13:61:5d:db:54:5c:32:22:32:43:d4:24:43:7f:a4:d2:
         49:4c:65:e0:1b:5c:7f:4f:d9:bf:f1:17:55:31:ef:62:7b:40:
         78:d7:36:81:b2:80:01:5c:d0:eb:38:eb:85:ad:89:8a:a5:84:
         ca:ad:58:e9:4f:b4:91:18:31:34:93:70:e0:c7:f9:1b:0a:50:
         13:a2:20:dc:73:10:a7:85:58:d5:70:11:44:08:ef:3e:13:a2:
         67:eb:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org