Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oCRvefaA5wiB-h99X3s6ttzGfjA.roa
File:                     oCRvefaA5wiB-h99X3s6ttzGfjA.roa (raw, json)
Hash identifier:          p8FAcSXPPnFYU50lyPrlwR5A+slvY/P78/GWaXAchVw=
Subject key identifier:   A0:24:6F:79:F6:80:E7:08:81:FA:1F:7D:5F:7B:3A:B6:DC:C6:7E:30
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B3E65E339039DF2D3C246E049A8DC26AB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oCRvefaA5wiB-h99X3s6ttzGfjA.roa
Signing time:             Tue 17 Oct 2023 16:09:06 +0000
ROA not before:           Tue 17 Oct 2023 16:09:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53667
IP address blocks:        89.213.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 Nov 2023 08:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3e:65:e3:39:03:9d:f2:d3:c2:46:e0:49:a8:dc:26:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 17 16:09:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0246f79f680e70881fa1f7d5f7b3ab6dcc67e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:8d:4f:bd:2d:33:4d:2e:76:14:02:1d:77:
                    50:e0:02:18:93:ef:9a:a2:9a:34:1d:f1:2b:8e:86:
                    3a:ee:2b:9e:f0:de:e7:18:73:fc:36:0f:03:53:33:
                    f2:cf:46:a3:81:f4:a2:55:d1:81:bc:3a:2d:20:d4:
                    27:a2:a1:4b:80:00:b2:e9:f5:a8:52:4b:9d:b2:13:
                    78:24:73:82:da:ee:e0:b5:6d:9f:0c:29:bf:8c:b6:
                    2a:8c:71:a1:7d:36:33:d6:21:4f:a2:f7:b2:c7:dd:
                    1b:06:77:f5:8e:e4:8e:32:dd:e6:f7:d8:dc:9a:fa:
                    27:a1:5e:f2:7e:2d:3e:a9:bc:e6:ed:a8:bd:b6:88:
                    5d:68:86:cf:7f:47:12:cb:b1:bf:ed:b4:fd:fb:de:
                    58:ab:90:24:86:a7:45:cc:3e:8d:f3:b9:36:fd:77:
                    fb:ce:d3:57:ea:25:79:b8:42:0d:3c:02:46:2a:66:
                    0f:e5:6b:28:d7:63:c8:6d:f8:02:5c:87:43:86:24:
                    ff:e4:81:f7:02:ef:24:30:ef:dc:76:3d:86:5d:68:
                    2b:c7:46:d4:e3:86:2f:d1:d3:59:a7:8f:2c:ea:41:
                    97:0f:d7:a8:97:49:91:f6:04:13:ac:46:11:25:fc:
                    11:a4:bd:18:97:b1:73:d2:7d:56:99:c5:69:ba:e1:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:24:6F:79:F6:80:E7:08:81:FA:1F:7D:5F:7B:3A:B6:DC:C6:7E:30
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oCRvefaA5wiB-h99X3s6ttzGfjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:38:82:2f:fb:7c:9a:35:93:1d:af:8f:f8:a9:c8:74:56:64:
         ea:6b:b6:46:54:4c:b5:a8:1e:5b:30:3d:b7:32:5e:7b:53:9a:
         9d:f0:f1:40:c6:97:84:41:72:cf:82:8c:1b:95:3a:05:91:29:
         99:c6:f6:4a:ee:36:11:64:ee:68:a8:de:a8:94:2d:dc:1b:54:
         ed:d8:7b:41:63:b3:33:78:5c:73:b3:52:fa:01:b8:2f:b6:7f:
         bf:71:b0:93:57:31:61:b8:65:d4:7b:fb:66:d9:31:ee:a0:1a:
         5f:92:6a:4f:91:03:4f:83:71:be:ef:12:21:f3:e6:8d:57:55:
         8d:98:39:77:2f:83:50:d0:ba:f5:6c:af:3f:1b:24:30:0a:bd:
         b0:2f:22:ca:0e:62:a8:41:cf:f1:65:55:fc:22:e3:10:c5:7a:
         a1:58:fc:ee:86:5c:2b:19:cb:c7:7d:fd:7c:ae:b1:bf:75:99:
         eb:c6:4e:79:1c:d6:ab:cd:90:54:46:68:e7:53:c0:96:71:ce:
         d9:5d:66:4f:6c:b7:ee:52:65:76:33:5e:1f:13:e6:d4:2d:14:
         fb:ab:11:c1:bf:bd:97:d2:05:28:6b:cb:9f:4e:95:8e:75:ea:
         0d:27:5b:b7:07:a0:bd:27:0e:2e:22:6f:b1:6d:05:08:5a:18:
         96:d6:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org