Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa
File:                     psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa (raw, json)
Hash identifier:          3VWqjn+59AWVCj4op5bUzpxNkgQOhbR9lUrNEcAfpac=
Subject key identifier:   A6:C7:C0:DD:9F:11:0B:71:7B:ED:2A:86:BD:D2:EB:E2:8D:C0:77:D4
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B943F45D59C2EE2C7F57B3553B57FDFC8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa
Signing time:             Fri 03 Nov 2023 08:14:16 +0000
ROA not before:           Fri 03 Nov 2023 08:14:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        109.176.245.0/24 maxlen: 24
                          89.213.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 Nov 2023 07:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:94:3f:45:d5:9c:2e:e2:c7:f5:7b:35:53:b5:7f:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov  3 08:14:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6c7c0dd9f110b717bed2a86bdd2ebe28dc077d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:74:b6:66:61:cd:db:0b:88:46:d3:9e:35:
                    92:63:99:36:bb:b5:9e:ae:6c:2b:e6:a8:ae:32:6f:
                    f0:e9:32:8b:59:62:a2:99:9c:e4:84:15:7b:48:55:
                    78:61:26:c5:e9:31:ba:c2:44:ec:60:a2:80:ba:e7:
                    7a:64:76:e1:86:0e:91:2a:1d:13:4c:6f:99:3a:98:
                    1d:b5:f0:88:47:99:6d:bb:c4:d8:1f:32:06:83:9c:
                    9b:21:75:d0:76:37:31:8c:ba:6d:46:4a:61:b5:cd:
                    f1:3e:56:93:e7:36:1f:4b:c1:16:1b:d9:a8:a3:e5:
                    b4:d5:12:54:32:6f:f1:28:94:04:e9:86:5d:bf:8f:
                    f7:61:41:0f:a5:e9:fd:1a:e0:fa:fc:cd:1b:52:67:
                    a1:d8:c9:38:42:c8:af:35:db:56:eb:34:02:81:f1:
                    bc:57:f7:e2:86:5c:31:88:d7:57:e7:87:46:6d:02:
                    94:28:7c:68:a5:7c:04:5d:74:a1:0f:e6:2b:d8:68:
                    28:04:31:42:f4:6c:4d:fa:b9:10:b1:ae:72:53:f5:
                    3d:55:5b:ac:3f:1b:19:d7:14:c1:8a:59:02:40:c7:
                    be:20:3f:e7:1e:6f:4c:fe:84:49:e9:5b:1e:5f:a2:
                    24:17:08:a2:9c:54:e7:79:f4:e9:05:34:11:74:40:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:C0:DD:9F:11:0B:71:7B:ED:2A:86:BD:D2:EB:E2:8D:C0:77:D4
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/psfA3Z8RC3F77SqGvdLr4o3Ad9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.157.0/24
                  109.176.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:80:12:59:6e:1b:b7:0e:c7:b5:bc:d5:71:b3:15:69:7d:
         50:c1:c3:d7:7d:fa:1f:e7:7d:94:cf:ad:bc:44:af:11:31:b4:
         21:63:aa:b6:23:02:c8:62:84:24:e6:84:4e:a5:23:bc:ed:b6:
         5c:06:96:6c:60:a4:9d:44:83:d8:5e:ed:82:09:37:5e:05:59:
         4c:f0:44:13:6a:ef:38:19:5f:5d:2d:18:dd:d6:cb:20:59:6a:
         7e:6e:30:ec:ed:d2:bc:3d:b0:3e:c4:c5:97:3d:88:e2:25:89:
         00:e5:55:79:11:05:be:12:5d:99:b4:1d:fa:f8:1d:59:da:e4:
         75:78:0b:1f:30:b3:ec:2e:04:ec:0e:87:49:32:0f:b0:72:03:
         bc:13:b0:4e:7c:4a:e1:7e:89:48:ff:c7:f5:e9:77:54:82:2a:
         e8:50:2a:dd:99:9d:12:ea:48:0e:61:c3:f1:b8:28:07:fa:b9:
         8c:cb:03:fc:76:d2:2c:a6:fc:e8:16:b9:01:1d:2e:25:ed:b5:
         f0:5f:44:1c:89:46:9d:52:7b:01:5a:53:b3:f3:02:78:2b:13:
         5b:71:cf:af:91:3c:ff:3d:88:c3:60:49:22:7f:09:ba:d0:42:
         c8:ee:ef:2f:b6:13:8e:54:f1:c3:fd:3d:a6:c1:ba:f9:97:83:
         dc:24:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org