Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q-Tr65yOu5jznku7wx8GtbUbkhM.roa
File:                     q-Tr65yOu5jznku7wx8GtbUbkhM.roa (raw, json)
Hash identifier:          gTx97qHqugEsALb/ujps453P8nAeDxEq1nw3IxW4X9A=
Subject key identifier:   AB:E4:EB:EB:9C:8E:BB:98:F3:9E:4B:BB:C3:1F:06:B5:B5:1B:92:13
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0189D09F74EED12FF579DDF338CDA82CCA98
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q-Tr65yOu5jznku7wx8GtbUbkhM.roa
Signing time:             Mon 07 Aug 2023 15:30:58 +0000
ROA not before:           Mon 07 Aug 2023 15:30:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        89.213.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 11:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d0:9f:74:ee:d1:2f:f5:79:dd:f3:38:cd:a8:2c:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Aug  7 15:30:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abe4ebeb9c8ebb98f39e4bbbc31f06b5b51b9213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a0:93:3c:c4:a9:eb:91:e3:cc:7e:4f:70:c1:
                    ec:9d:b0:19:09:47:19:57:38:0c:40:e3:26:8c:ed:
                    68:ac:06:60:99:0f:bd:a5:ae:eb:6c:e2:ed:28:43:
                    a6:8a:75:76:e9:05:14:0c:28:68:09:a3:50:27:19:
                    7b:f8:a6:da:8b:60:13:bd:3c:ea:33:ec:ce:f7:fc:
                    00:fb:dc:1d:21:df:fc:05:bd:6d:f7:ea:a2:48:7f:
                    29:24:36:fc:15:00:31:81:a5:21:ec:9c:51:7d:94:
                    24:9f:3d:a4:f6:3d:2b:92:54:a2:b3:f2:ea:73:53:
                    5c:40:6e:1c:d4:0e:4b:59:f9:5c:dc:1b:47:3a:4e:
                    3f:6b:37:8d:69:64:11:d3:b4:7d:7e:60:da:ee:80:
                    d3:32:59:2d:33:79:67:b8:e5:8c:a9:e0:8c:77:a8:
                    4f:df:32:4e:d3:17:1f:f1:d0:5c:26:cf:ef:10:cb:
                    5b:60:56:9b:99:76:6e:f4:7f:41:54:45:4e:de:d8:
                    7b:3a:21:9f:0a:da:7b:8c:a3:58:d9:85:c0:28:b9:
                    1e:57:cc:8a:96:52:a9:7a:ce:1f:cd:11:6b:d1:b9:
                    78:d2:90:86:56:5b:4b:ef:d7:00:ea:2d:c4:3d:f7:
                    b8:db:76:88:bd:94:0c:61:a3:d4:2c:a1:b6:2f:bf:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:EB:EB:9C:8E:BB:98:F3:9E:4B:BB:C3:1F:06:B5:B5:1B:92:13
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q-Tr65yOu5jznku7wx8GtbUbkhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.213.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:91:92:5a:6c:21:92:2b:7f:27:cc:46:bf:2a:9b:3f:a0:4b:
         c6:93:57:ec:93:a7:1e:ca:80:f7:25:1c:70:7b:25:38:50:5b:
         ae:f9:29:90:db:97:ff:c7:81:e8:f7:3e:0a:84:df:17:9e:c5:
         f8:7e:7f:90:5b:88:e3:52:7f:a8:95:3a:62:04:6b:8e:8c:a7:
         b1:79:8e:0d:a3:1a:88:c6:6b:d3:a0:99:60:96:40:38:5f:66:
         d2:e6:66:27:f1:67:ff:42:10:b5:3c:99:de:be:48:39:c0:7e:
         9d:e2:b4:4f:a9:c4:e2:08:9b:ad:a5:5a:e7:32:5c:46:7a:7d:
         b3:88:62:e0:6e:00:f0:c7:07:5c:54:b2:da:68:32:d1:50:d7:
         1a:71:a2:fc:28:51:ac:cc:0c:b3:66:3c:64:63:18:49:72:92:
         14:59:9c:d6:f2:3a:d9:6f:ba:a8:74:06:a7:66:03:17:73:9d:
         3f:23:18:c3:15:d5:8b:75:99:45:37:30:b3:5b:0e:d1:69:52:
         ec:da:9c:49:97:85:8d:88:c9:d0:17:be:e9:8b:05:84:ab:eb:
         76:81:1c:74:00:6c:f9:c0:42:b5:85:f8:c9:56:82:c2:d3:40:
         c2:56:ed:8c:c3:d7:92:20:39:e6:3f:c3:0e:63:a9:66:56:fd:
         e3:35:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org