Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa
File:                     jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa (raw, json)
Hash identifier:          bfaeBwztUC2xlIxcbgdFaARaNKG+H6xIqpCeh2tomN4=
Subject key identifier:   8D:4F:D1:45:6A:C3:55:8E:A3:3C:0A:39:6B:A5:1D:21:61:81:26:FA
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018CC3495F436B7A472B51CCCEFDE6B89466
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa
Signing time:             Mon 01 Jan 2024 04:30:14 +0000
ROA not before:           Mon 01 Jan 2024 04:30:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209242
IP address blocks:        89.213.139.0/24 maxlen: 24
                          89.213.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 11:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:5f:43:6b:7a:47:2b:51:cc:ce:fd:e6:b8:94:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 04:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d4fd1456ac3558ea33c0a396ba51d21618126fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:95:83:d8:4d:5f:5f:16:6e:30:41:8e:50:
                    aa:96:91:27:4c:ae:fc:f7:e1:f0:6f:8d:21:a3:66:
                    ae:ed:72:19:3a:e5:0f:18:8c:99:2c:d6:c9:dd:e2:
                    b3:54:a7:ba:f5:8a:8e:f4:90:36:db:7e:17:39:ae:
                    c2:73:81:84:ca:bd:68:7e:fc:3f:7c:66:0f:e1:76:
                    4f:4e:c5:b2:63:86:b3:d7:c7:66:75:70:4b:40:6b:
                    db:fa:83:5f:df:06:7f:e7:a5:54:c4:1e:08:88:50:
                    c1:7b:62:27:e7:89:c5:38:af:0f:d9:da:eb:0c:04:
                    59:8e:e4:a7:14:6e:84:43:a4:12:61:e4:4b:11:7a:
                    a9:81:c5:57:64:9b:35:e6:ed:65:96:e9:09:97:59:
                    23:6d:4c:23:b9:f5:5f:69:f4:a7:9d:8f:de:34:3d:
                    0d:be:3c:32:25:88:c8:40:74:6e:49:20:e5:df:9b:
                    18:c7:ef:1f:1a:d9:f4:28:d2:eb:24:52:f5:07:3a:
                    ef:86:fe:e6:6f:b9:4e:eb:6b:86:48:94:31:1d:96:
                    cd:d9:4d:86:14:69:6c:63:7f:f8:d3:46:12:4b:35:
                    39:54:54:9b:75:18:60:49:1e:63:bd:26:ba:07:69:
                    9d:20:a5:a9:6f:b1:42:ac:a6:92:08:6e:db:22:92:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4F:D1:45:6A:C3:55:8E:A3:3C:0A:39:6B:A5:1D:21:61:81:26:FA
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jU_RRWrDVY6jPAo5a6UdIWGBJvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.139.0/24
                  89.213.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:81:5c:b4:22:98:5e:b5:5a:c5:36:1e:0a:40:12:65:56:
         af:5b:77:60:12:3e:af:d9:b3:0a:33:45:77:91:c6:a5:50:7a:
         34:4d:c6:36:72:e9:aa:b7:cd:58:00:b9:7e:7c:83:5e:61:44:
         b0:47:8c:10:cc:bb:40:35:ef:82:96:d2:30:a0:e8:dc:d9:55:
         a6:26:e2:10:4c:37:37:8d:c5:e4:d4:c2:2f:99:d6:58:c6:94:
         5f:01:66:2a:3d:e9:a2:34:ec:59:a7:93:77:56:a2:46:62:a3:
         8a:9b:5e:cb:60:e4:38:a3:a4:0b:99:de:2e:77:96:0c:16:10:
         47:99:80:7a:7b:a3:9a:2b:46:c1:c3:2f:a6:0e:3d:66:9e:37:
         2e:e4:f3:28:e6:58:25:82:73:93:86:8f:7f:93:29:44:58:8c:
         8e:30:be:68:d4:1f:f8:7a:39:cd:0f:39:6b:1f:ab:d9:a1:0e:
         ac:f2:da:3e:07:94:d3:59:ce:18:2c:4d:f2:ac:48:3b:6a:6f:
         de:c8:91:e4:4e:5c:e0:a8:da:85:e9:ac:7e:bc:4a:e9:99:24:
         74:9a:05:5c:1e:44:e9:74:fc:88:72:9c:96:04:7e:93:b3:92:
         5d:db:65:60:c8:f0:8b:1c:b1:fd:a7:a2:50:b7:0a:bf:36:fe:
         30:d4:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org