Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa
File:                     43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa (raw, json)
Hash identifier:          qv/rgTi86JNHI/j+iQbKqucSMCC9dUjFGmmUApIKfqQ=
Subject key identifier:   E3:73:5B:36:D8:10:07:6D:4B:63:46:42:61:46:7A:BB:87:3F:8C:33
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018ADB70A5011AFD98BEDCD7BA15B86751C0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa
Signing time:             Thu 28 Sep 2023 10:58:27 +0000
ROA not before:           Thu 28 Sep 2023 10:58:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8851
IP address blocks:        89.213.64.0/18 maxlen: 24
                          37.252.24.0/21 maxlen: 24
                          80.240.80.0/20 maxlen: 20
                          77.107.64.0/18 maxlen: 24
                          213.210.0.0/18 maxlen: 24
                          85.159.128.0/21 maxlen: 24
                          212.38.64.0/19 maxlen: 24
                          37.98.144.0/22 maxlen: 24
                          37.98.144.0/21 maxlen: 24
                          109.176.0.0/16 maxlen: 16
                          89.213.48.0/20 maxlen: 24
                          89.213.192.0/24 maxlen: 24
                          89.213.192.0/18 maxlen: 24
                          213.218.208.0/20 maxlen: 24
                          89.31.232.0/21 maxlen: 24
                          185.20.34.0/24 maxlen: 24
                          185.20.35.0/24 maxlen: 24
                          79.99.72.0/21 maxlen: 24
                          185.20.32.0/22 maxlen: 24
                          213.218.224.0/19 maxlen: 24
                          81.168.0.0/17 maxlen: 17
                          82.163.0.0/19 maxlen: 24
                          217.144.144.0/20 maxlen: 24
                          217.145.64.0/20 maxlen: 24
                          185.24.84.0/22 maxlen: 24
                          194.105.64.0/19 maxlen: 24
                          213.130.128.0/19 maxlen: 24
                          82.152.0.0/16 maxlen: 16
                          81.5.128.0/18 maxlen: 18
                          82.152.0.0/15 maxlen: 15
                          195.128.138.0/24 maxlen: 24
                          213.152.32.0/19 maxlen: 19
                          2a02:21f8::/32 maxlen: 32
                          2a00:c60::/32 maxlen: 32
                          2001:1a90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 02 Nov 2023 18:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:db:70:a5:01:1a:fd:98:be:dc:d7:ba:15:b8:67:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Sep 28 10:58:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3735b36d810076d4b63464261467abb873f8c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:8f:30:e5:32:e4:10:9a:7a:24:38:8b:f7:
                    b3:6b:63:49:71:7a:31:35:ea:b0:f9:97:f5:95:0a:
                    33:05:d1:98:6f:75:d2:dd:7d:83:8b:ea:87:68:af:
                    4c:40:4b:6f:77:65:2e:2f:60:c1:3f:8b:bf:82:70:
                    f6:09:94:b1:8c:58:bf:c8:01:4d:b6:d4:e9:ff:53:
                    60:46:d8:9f:83:7f:5e:10:f5:de:d2:7c:33:3b:c5:
                    80:23:07:b4:d4:3c:93:06:9d:3c:7d:da:e6:ce:af:
                    79:ea:95:ca:d3:3b:0e:71:5e:91:49:43:0b:a3:12:
                    dd:0c:e9:b2:13:c9:14:eb:ad:2f:4c:24:5c:bd:9e:
                    19:f6:3a:7a:12:72:7b:03:0e:85:66:f5:08:a0:a1:
                    94:86:e3:61:15:90:f9:ce:b6:de:f6:4b:2b:01:8d:
                    9d:be:34:6b:e7:02:26:fd:95:98:ee:36:5d:c7:9d:
                    6f:41:e5:51:5b:4e:77:cf:c5:ad:06:b0:4a:73:21:
                    8f:f0:69:4e:db:0e:e8:dd:fb:e0:c7:45:7b:f7:f4:
                    2a:8d:7a:bb:ca:b9:e5:36:a0:92:74:7a:8b:20:5f:
                    45:f5:c7:28:39:1a:de:7d:19:74:7e:74:a8:98:4a:
                    a7:cb:f8:a6:7b:e6:14:24:f6:86:3e:12:72:43:6d:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:73:5B:36:D8:10:07:6D:4B:63:46:42:61:46:7A:BB:87:3F:8C:33
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/43NbNtgQB21LY0ZCYUZ6u4c_jDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.98.144.0/21
                  37.252.24.0/21
                  77.107.64.0/18
                  79.99.72.0/21
                  80.240.80.0/20
                  81.5.128.0/18
                  81.168.0.0/17
                  82.152.0.0/15
                  82.163.0.0/19
                  85.159.128.0/21
                  89.31.232.0/21
                  89.213.48.0-89.213.127.255
                  89.213.192.0/18
                  109.176.0.0/16
                  185.20.32.0/22
                  185.24.84.0/22
                  194.105.64.0/19
                  195.128.138.0/24
                  212.38.64.0/19
                  213.130.128.0/19
                  213.152.32.0/19
                  213.210.0.0/18
                  213.218.208.0-213.218.255.255
                  217.144.144.0/20
                  217.145.64.0/20
                IPv6:
                  2001:1a90::/32
                  2a00:c60::/32
                  2a02:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:28:55:6b:00:0e:9d:82:43:81:da:2f:a1:bc:fc:ee:52:10:
         01:55:22:35:73:63:53:86:9f:c5:6f:1c:67:85:10:1c:c2:44:
         c7:fc:8a:4d:c5:b3:4f:90:23:fb:3d:59:30:cd:a1:4a:2d:f1:
         1d:05:f3:b8:08:15:3a:dd:45:67:52:b8:14:f6:c7:78:85:9f:
         f2:74:d8:85:c0:32:ff:41:ea:9a:1d:0c:22:ec:2b:0f:61:0f:
         0b:dc:bb:16:7d:72:ee:5d:e5:08:32:b5:fb:ed:94:7e:cf:09:
         bc:eb:95:ed:f3:d4:a3:6f:23:22:8f:41:2a:5b:2a:aa:32:09:
         70:6b:cc:29:84:5c:44:9d:98:38:30:9c:92:68:26:32:53:57:
         6f:94:3f:3c:3f:74:52:9b:3d:6b:d3:d4:0f:d4:80:5e:cc:89:
         87:ff:ba:1f:43:af:fa:df:ae:94:02:b0:77:69:28:47:58:d1:
         54:50:87:50:4c:91:ea:1e:ce:ba:02:27:cc:e1:90:86:ff:6d:
         28:f5:bc:d6:38:87:5b:d0:50:7e:b7:c6:85:ae:6c:ff:de:a9:
         8c:f9:d7:bc:80:91:b9:91:5a:59:02:47:30:b0:06:c5:9d:0d:
         f9:6c:9e:54:95:dc:ed:67:11:df:f7:a2:88:ac:9e:c8:a8:e5:
         c0:5c:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org