Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa
File:                     ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa (raw, json)
Hash identifier:          ZbaUf2SKtnwwDM7KzkJFKEiTaAJf6WCV0Zo8qqMnT0k=
Subject key identifier:   67:02:08:F9:52:74:D7:E2:C6:52:90:42:F2:0A:A4:80:27:80:B1:D0
Certificate issuer:       /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial:       0185A5D5253D60B88DBD05DB2E82F0F285F5
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa
Signing time:             Thu 12 Jan 2023 11:54:47 +0000
ROA not before:           Thu 12 Jan 2023 11:54:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39855
IP address blocks:        212.124.68.0/22 maxlen: 24
                          212.124.72.0/22 maxlen: 24
                          212.124.76.0/22 maxlen: 24
                          212.124.86.0/24 maxlen: 24
                          212.124.88.0/22 maxlen: 24
                          212.124.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:d5:25:3d:60:b8:8d:bd:05:db:2e:82:f0:f2:85:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
        Validity
            Not Before: Jan 12 11:54:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=670208f95274d7e2c6529042f20aa4802780b1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:ee:b0:d2:ac:59:df:c7:17:fd:7f:7e:ef:
                    dd:95:c5:03:b3:f8:68:1a:7f:4d:73:7f:c0:a5:c3:
                    80:f6:f6:c6:ff:01:1d:7e:47:85:03:cd:c3:83:c4:
                    0d:3a:c5:86:3a:0f:a7:20:6c:b5:3e:56:fe:ad:78:
                    11:62:dd:4a:2b:bd:b5:bf:be:0b:59:93:81:1a:66:
                    56:24:d1:0e:fa:74:bb:a4:0c:fe:59:46:50:fe:5c:
                    12:46:43:32:75:49:58:8f:ba:eb:86:1a:c7:06:d3:
                    01:4a:e5:0a:80:31:c5:4b:16:1b:40:ae:44:87:16:
                    ca:61:14:22:cf:de:ec:28:dc:1d:fe:5a:33:e2:6f:
                    12:cb:43:e1:fd:63:cd:87:82:40:1b:2e:09:bb:69:
                    80:75:ae:8f:2c:ca:f6:4a:cd:8b:03:b1:11:0d:6a:
                    42:ae:be:6b:3e:b7:e8:a9:7c:9b:62:a7:99:3c:b9:
                    63:67:74:26:c8:58:c4:51:9a:c6:ed:44:05:d1:1b:
                    c2:a0:48:7d:9a:91:26:53:3e:f6:8e:66:a4:cb:6b:
                    c7:82:30:ea:c6:89:d5:3a:bc:6e:56:3a:78:64:de:
                    c7:2f:69:6c:65:d2:67:ba:c4:9c:73:4a:27:40:80:
                    6e:31:01:9f:aa:6f:62:f4:16:25:22:cb:e2:5b:a1:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:08:F9:52:74:D7:E2:C6:52:90:42:F2:0A:A4:80:27:80:B1:D0
            X509v3 Authority Key Identifier:
                keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.124.68.0-212.124.79.255
                  212.124.86.0/24
                  212.124.88.0-212.124.92.255

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:5d:3a:99:f9:ce:65:2f:64:23:4d:39:af:6c:e3:83:ad:
         2c:19:2b:98:ad:a0:8e:91:1d:a9:a2:97:43:71:02:a1:ca:94:
         8a:39:18:25:88:f0:78:d0:e7:b2:b5:b6:41:89:d9:41:66:67:
         e7:78:13:35:f2:d4:47:10:e7:0c:1b:3d:ee:d8:85:6e:2a:f1:
         92:a2:92:3f:a8:80:7d:15:bd:66:40:bd:1f:a1:ed:07:75:79:
         36:b9:d5:bb:af:30:aa:8b:84:d3:5e:33:65:74:66:f0:0f:98:
         ef:a7:73:22:0f:36:2d:23:eb:cd:29:42:72:05:f0:6c:14:74:
         b7:72:d7:70:26:f4:7e:0f:5b:41:5b:1a:7f:b7:30:4d:87:8f:
         25:80:da:73:c5:89:f9:36:52:cd:f9:de:54:ad:35:99:36:20:
         24:3c:61:8b:c7:cb:59:15:12:d6:d7:09:56:1d:c5:50:14:18:
         14:dc:68:51:19:bd:fa:5f:bb:b1:50:75:1a:d5:fc:53:e4:56:
         3b:e9:43:3a:14:b2:e5:b0:cf:93:2c:53:a5:08:c5:97:3a:ed:
         64:5d:f4:83:0b:c1:1a:88:f3:29:15:c4:9c:f2:91:81:0c:69:
         f5:7e:7e:02:e7:f9:90:73:af:22:93:71:2f:5a:9a:82:f7:22:
         bb:df:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org