Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/9pnUwaE554MYEoI5gmSqtstWKeQ.roa
File:                     9pnUwaE554MYEoI5gmSqtstWKeQ.roa (raw, json)
Hash identifier:          +ywRwkBlVgZCN/dw+fQpVDzzf+ng/B/8ZMpp07npBxo=
Subject key identifier:   F6:99:D4:C1:A1:39:E7:83:18:12:82:39:82:64:AA:B6:CB:56:29:E4
Certificate issuer:       /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial:       018CC9BBFA767EEF34CD87207ABF4C9EC076
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/9pnUwaE554MYEoI5gmSqtstWKeQ.roa
Signing time:             Tue 02 Jan 2024 10:33:08 +0000
ROA not before:           Tue 02 Jan 2024 10:33:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8351
IP address blocks:        195.98.192.0/19 maxlen: 19
                          213.254.32.0/19 maxlen: 19
                          194.59.16.0/23 maxlen: 23
                          2a02:320::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 19:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:fa:76:7e:ef:34:cd:87:20:7a:bf:4c:9e:c0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
        Validity
            Not Before: Jan  2 10:33:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f699d4c1a139e783181282398264aab6cb5629e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:2e:84:a2:a1:f2:23:2d:56:8c:90:5b:95:
                    17:7c:96:f8:45:e0:d2:81:28:94:a3:c9:ec:5c:aa:
                    bd:a4:fc:df:01:bb:f6:22:0f:29:01:10:25:a2:1b:
                    60:8c:a3:a8:1b:29:68:e0:c4:bf:28:31:40:60:88:
                    0a:d0:94:ea:31:b5:43:87:e2:31:f6:41:ee:6b:35:
                    18:54:4a:66:6a:24:88:37:ab:46:5c:36:4a:7a:bd:
                    e1:ef:72:4f:b2:a6:49:90:7a:5e:c2:7c:ad:57:59:
                    33:27:d4:d6:cd:3b:d0:26:dd:ab:aa:1c:34:7a:72:
                    e6:a6:e6:35:03:bd:4a:57:e9:cb:51:66:7b:6c:9a:
                    57:ca:d8:49:29:cc:8f:bf:7b:2b:69:17:3f:65:82:
                    e8:de:7e:19:f2:98:0e:5b:31:b2:d3:35:91:e4:d9:
                    97:61:74:10:12:61:40:f3:38:60:4b:cf:f3:c5:0d:
                    cd:9e:57:36:a6:77:cb:ac:2a:0b:49:4b:f8:3f:16:
                    99:04:c1:0d:bd:e4:b7:b0:d2:c3:93:5c:4a:b8:46:
                    07:fd:36:e1:7d:62:5c:01:b6:67:b9:68:48:bf:dd:
                    3e:92:cf:6f:1d:81:c2:a1:f4:3a:f5:ec:a8:64:5c:
                    52:77:ac:46:85:a5:1e:58:62:af:86:d9:7e:14:49:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:D4:C1:A1:39:E7:83:18:12:82:39:82:64:AA:B6:CB:56:29:E4
            X509v3 Authority Key Identifier:
                keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/9pnUwaE554MYEoI5gmSqtstWKeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.16.0/23
                  195.98.192.0/19
                  213.254.32.0/19
                IPv6:
                  2a02:320::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:66:1d:a8:70:6f:27:51:be:bc:58:1f:d5:78:c3:b9:4c:21:
         cb:ae:d1:16:67:16:32:7b:3f:5e:17:ea:80:83:15:26:82:73:
         47:24:c3:69:63:0f:73:d0:09:f8:15:f6:21:bf:c8:dd:e1:a5:
         45:db:c0:34:44:74:32:9c:1a:a5:ea:15:b3:35:11:3d:48:76:
         a4:ce:41:ca:14:61:2e:06:e7:55:a4:de:56:2d:18:97:87:7c:
         0b:f1:b1:3d:9e:eb:5c:bf:e4:45:94:de:39:ba:d1:2b:d1:98:
         85:45:8c:30:15:9a:50:54:2f:f0:2e:92:7c:fc:ec:16:2d:38:
         2a:d7:b8:10:3e:fc:30:3e:8f:94:f6:c5:fd:04:8c:29:ac:35:
         50:e3:17:e4:b0:33:31:a2:6d:7d:27:25:23:f1:a4:77:1c:12:
         c9:94:00:33:55:e2:97:b4:48:62:68:31:5a:d4:14:bb:51:1c:
         7d:7d:2e:62:05:fa:7b:23:3b:32:99:ef:81:1b:5c:43:59:88:
         03:3a:e8:d7:d1:66:36:4b:b3:cd:19:55:b0:1b:b5:0c:5f:9d:
         6c:77:95:82:57:8f:da:f5:65:54:b8:6a:bd:5b:3c:9c:4f:05:
         45:b9:4d:6d:99:e4:5d:cc:b1:58:82:d7:c5:e9:6f:52:b1:a8:
         1f:53:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org