Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78YnUWFfXp08qss3F8aaVkuSk6A.roa
File:                     78YnUWFfXp08qss3F8aaVkuSk6A.roa (raw, json)
Hash identifier:          /cC6PzOQazCI2EOay5sXm6jkwtSiFkM0yjpOLHaOKOs=
Subject key identifier:   EF:C6:27:51:61:5F:5E:9D:3C:AA:CB:37:17:C6:9A:56:4B:92:93:A0
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018CC3494A1C6227E6BBD10DD4B7135DAEBB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78YnUWFfXp08qss3F8aaVkuSk6A.roa
Signing time:             Mon 01 Jan 2024 04:30:09 +0000
ROA not before:           Mon 01 Jan 2024 04:30:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12912
IP address blocks:        82.153.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 10:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:4a:1c:62:27:e6:bb:d1:0d:d4:b7:13:5d:ae:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 04:30:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=efc62751615f5e9d3caacb3717c69a564b9293a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:00:cf:09:35:18:dc:c6:30:aa:50:b0:93:
                    d6:4a:c1:3d:7a:87:c0:ac:90:6a:3b:04:fb:eb:cc:
                    de:4a:e1:02:ef:e6:0a:07:be:5c:08:20:59:14:74:
                    69:a5:e1:44:de:8c:50:75:79:23:a5:91:3d:f0:1b:
                    4f:c4:50:5c:e2:35:8a:3a:b2:f4:da:93:d3:97:4a:
                    eb:44:0b:76:0e:f7:27:47:e4:03:86:54:41:99:21:
                    9e:83:df:6e:1b:79:81:95:d1:3e:f2:8b:62:f4:1c:
                    b0:a8:95:ef:ef:f6:a9:f5:cd:b9:c4:cf:7b:52:cd:
                    ff:6f:0b:35:fa:6a:ba:af:20:e7:cf:72:cc:df:89:
                    fd:28:c0:a7:76:9b:7e:63:95:1f:d7:4a:30:ac:03:
                    bd:61:1b:cf:0e:77:7e:97:30:98:e2:c2:32:1e:3f:
                    41:9d:df:13:4a:b8:c3:1c:ec:9f:3c:b3:e8:59:4d:
                    80:f2:66:b0:d0:75:15:c0:4b:81:39:db:36:39:db:
                    59:b1:53:a9:45:8f:f5:b7:ed:ae:8e:ad:7b:d8:48:
                    15:4a:e5:13:01:09:68:f0:63:b1:f3:8d:a2:72:a9:
                    68:24:8b:be:17:23:63:51:0d:a6:3c:87:78:c6:20:
                    47:af:cd:4d:4b:fc:71:2f:e5:90:2d:97:cb:a3:82:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C6:27:51:61:5F:5E:9D:3C:AA:CB:37:17:C6:9A:56:4B:92:93:A0
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/78YnUWFfXp08qss3F8aaVkuSk6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:43:33:64:8b:a4:ae:f8:6e:50:db:a6:cb:a1:f1:be:6a:
         05:6f:fb:f3:32:e7:fe:7b:02:de:c6:39:00:00:62:b2:57:cf:
         1a:f4:5a:2f:3c:71:49:a2:86:b7:13:3d:7f:f3:f7:eb:a9:48:
         6d:4c:22:cb:0d:e2:95:f9:c8:b1:f3:76:15:9a:b4:b5:27:e7:
         23:5c:d7:47:20:42:90:38:69:d5:a3:e5:67:e0:09:7a:c7:85:
         44:a2:93:09:a4:21:95:fb:ac:3a:ea:a3:38:9a:8e:aa:29:a8:
         4f:27:02:0f:ca:0e:fb:d7:39:14:f8:b9:cf:a3:6d:a2:db:fa:
         18:04:00:68:b7:7e:af:04:23:87:ca:19:53:6d:1f:29:f1:af:
         6f:fe:4b:d1:c0:38:6f:b0:01:c2:ba:e6:ac:a6:d4:e4:9c:f7:
         d1:37:28:df:17:f2:1e:0a:e6:3e:51:11:b8:91:ff:5f:57:cd:
         57:47:76:a8:67:d8:55:13:8f:1e:5a:96:3d:04:41:87:40:de:
         b3:ec:39:d7:05:22:cf:1f:31:a9:56:21:e8:05:df:80:03:47:
         e5:0b:34:54:fc:b6:33:e8:09:48:4b:f3:23:9e:3f:7d:5d:b4:
         c9:e1:5e:b1:2e:81:b8:8a:fa:84:b9:54:f0:35:9c:ef:5b:67:
         7e:8c:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org