Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5pEK9v4w19cPcbX5CGQvSl40EsY.roa
File:                     5pEK9v4w19cPcbX5CGQvSl40EsY.roa (raw, json)
Hash identifier:          9uI5eo+YMrrLFe7L7paD/PJrjPSdeOjXa3V2rysY3YU=
Subject key identifier:   E6:91:0A:F6:FE:30:D7:D7:0F:71:B5:F9:08:64:2F:4A:5E:34:12:C6
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018C1B6521178A44BE6F0DB3CB41634434A8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5pEK9v4w19cPcbX5CGQvSl40EsY.roa
Signing time:             Wed 29 Nov 2023 14:04:21 +0000
ROA not before:           Wed 29 Nov 2023 14:04:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        82.153.136.0/22 maxlen: 22
                          82.153.70.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          89.213.180.0/22 maxlen: 24
                          89.213.182.0/23 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          213.152.42.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          82.153.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Dec 2023 08:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1b:65:21:17:8a:44:be:6f:0d:b3:cb:41:63:44:34:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 29 14:04:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6910af6fe30d7d70f71b5f908642f4a5e3412c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:22:a6:c2:14:89:cf:e4:69:99:9b:7e:2e:
                    70:6f:2a:6d:cb:2e:f6:dc:0d:00:b0:e6:0d:a5:80:
                    bc:32:15:cb:e7:86:25:c2:30:86:6c:74:19:3c:67:
                    1d:fa:d7:11:14:76:51:3b:b3:94:8e:a9:ab:8d:22:
                    d9:5c:22:ce:1d:42:92:d4:c0:6d:43:5b:bd:5b:7a:
                    19:ca:93:22:dd:a8:43:70:51:c6:90:de:b1:db:f2:
                    d6:0f:c9:13:8e:53:ff:c2:90:76:5b:90:b9:77:eb:
                    1c:6c:65:c7:4b:c7:23:df:5a:96:25:30:1b:e7:01:
                    92:97:29:d1:bd:87:fb:d4:16:cd:23:a8:1c:2a:79:
                    a6:82:97:c9:67:c1:2e:6b:b5:e9:d3:7d:9d:79:e2:
                    a3:75:97:5f:bc:90:24:76:7d:55:b4:f7:b1:46:88:
                    12:77:ac:b0:fb:77:80:b9:65:4e:6e:d3:e3:de:53:
                    80:87:9a:f7:40:e7:0e:8a:30:fa:a2:db:15:47:29:
                    80:da:2a:03:85:7e:3c:85:9e:93:5a:6d:95:2d:5e:
                    58:77:10:1b:40:ca:7b:31:71:78:35:ea:5d:a1:db:
                    fd:51:73:1b:d8:6a:1b:5b:ba:a9:2f:9e:22:df:64:
                    d8:fc:3d:1a:86:0a:4b:78:d6:1c:89:28:c4:c9:81:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:0A:F6:FE:30:D7:D7:0F:71:B5:F9:08:64:2F:4A:5E:34:12:C6
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5pEK9v4w19cPcbX5CGQvSl40EsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.153.10.0/24
                  82.153.70.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.172.0/22
                  89.213.180.0/22
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:9a:da:80:28:18:a1:ef:80:c2:93:6c:fa:ec:22:3c:81:
         2a:12:8d:07:f7:9f:3b:e3:8e:3d:69:fc:1e:0b:2f:d8:a4:d3:
         41:ee:72:2d:c8:ea:c4:af:b0:e4:ac:95:9b:7e:11:73:e2:60:
         0f:3c:d4:3c:23:e6:4e:35:22:1e:76:42:1f:83:6c:3d:af:2b:
         17:8b:9a:bc:67:3d:23:9a:d0:ad:67:fb:6a:bc:14:07:59:99:
         62:d0:f2:02:19:e4:13:67:09:b3:3b:e2:41:64:81:5c:cb:32:
         b3:97:37:65:92:4f:49:5b:e8:3e:e8:4c:1e:c7:82:05:0c:a2:
         72:44:97:63:cc:02:46:6e:60:32:93:b2:8b:01:ad:43:19:3c:
         3b:7b:10:ef:b4:9e:76:86:ae:23:0c:fe:78:fa:90:d4:6d:9c:
         b4:c9:92:42:31:56:30:2c:e7:f8:72:66:26:43:46:6d:24:d0:
         d3:f7:f9:15:94:f0:43:c8:a5:7b:f2:b6:47:10:34:71:9d:0f:
         4c:4c:36:e8:16:92:82:3f:cd:d7:97:06:84:e6:60:dc:33:9b:
         4d:8c:e0:74:8b:ab:16:26:81:35:ef:d6:dc:f9:3c:59:55:97:
         0a:a3:b8:97:1d:56:94:36:01:51:c6:1d:49:f5:8a:b1:6a:fe:
         d6:b6:da:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org