Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8M3s50VeJ9KQ__tTuMXze61AZ6A.roa
File:                     8M3s50VeJ9KQ__tTuMXze61AZ6A.roa (raw, json)
Hash identifier:          IwcdMduuZVXl7v5XMSDocoWZzG28wLplkybaF33Nh0w=
Subject key identifier:   F0:CD:EC:E7:45:5E:27:D2:90:FF:FB:53:B8:C5:F3:7B:AD:40:67:A0
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018AAFF8C3281BADBB31D79A25C092AFFDF3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8M3s50VeJ9KQ__tTuMXze61AZ6A.roa
Signing time:             Wed 20 Sep 2023 00:23:50 +0000
ROA not before:           Wed 20 Sep 2023 00:23:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8851
IP address blocks:        89.213.64.0/18 maxlen: 24
                          37.252.24.0/21 maxlen: 24
                          80.240.80.0/20 maxlen: 20
                          77.107.64.0/18 maxlen: 24
                          213.210.0.0/18 maxlen: 24
                          85.159.128.0/21 maxlen: 24
                          212.38.64.0/19 maxlen: 24
                          37.98.144.0/22 maxlen: 24
                          37.98.144.0/21 maxlen: 24
                          109.176.0.0/16 maxlen: 16
                          89.213.48.0/20 maxlen: 24
                          89.213.192.0/18 maxlen: 24
                          213.218.208.0/20 maxlen: 24
                          89.31.232.0/21 maxlen: 24
                          185.20.34.0/24 maxlen: 24
                          185.20.35.0/24 maxlen: 24
                          79.99.72.0/21 maxlen: 24
                          185.20.32.0/22 maxlen: 24
                          213.218.224.0/19 maxlen: 24
                          81.168.0.0/17 maxlen: 17
                          82.163.0.0/19 maxlen: 24
                          217.144.144.0/20 maxlen: 24
                          217.145.64.0/20 maxlen: 24
                          185.24.84.0/22 maxlen: 24
                          194.105.64.0/19 maxlen: 24
                          213.130.128.0/19 maxlen: 24
                          82.152.0.0/16 maxlen: 16
                          81.5.128.0/18 maxlen: 18
                          82.152.0.0/15 maxlen: 15
                          195.128.138.0/24 maxlen: 24
                          213.152.32.0/19 maxlen: 19
                          2a02:21f8::/32 maxlen: 32
                          2a00:c60::/32 maxlen: 32
                          2001:1a90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 10:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:af:f8:c3:28:1b:ad:bb:31:d7:9a:25:c0:92:af:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Sep 20 00:23:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0cdece7455e27d290fffb53b8c5f37bad4067a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:ce:6c:cc:a4:12:e9:03:ff:ed:81:b6:20:
                    18:6c:c3:99:b7:62:8d:e9:fb:a0:7e:ad:30:a8:00:
                    4e:87:7d:7e:9d:d9:9f:15:28:19:32:88:9d:ea:57:
                    55:25:43:c7:f6:43:80:9e:c2:b2:5f:2b:89:db:1c:
                    5a:f0:08:c3:05:85:99:a9:ac:5f:74:dd:79:3a:54:
                    e6:9b:61:cb:9b:9b:65:ff:8d:24:69:24:f1:65:2e:
                    40:46:2a:17:82:fd:3b:38:c0:9d:b4:2f:23:90:17:
                    fa:c3:9c:e5:72:62:1f:a7:f3:4f:1e:31:22:85:f2:
                    94:83:d8:e9:65:82:50:6a:63:c1:21:76:87:64:aa:
                    30:f2:1d:94:30:5a:be:c5:c2:e4:ac:04:2c:30:1d:
                    bb:a3:00:36:03:54:a2:45:0d:30:74:2f:90:36:6b:
                    8e:00:d5:06:cf:4d:9f:18:b2:0c:fa:e4:1c:c0:2f:
                    69:cd:b9:d8:73:91:0a:a7:ff:8c:5e:3c:26:21:d7:
                    82:57:0a:26:38:ea:49:c5:0a:95:f3:85:19:22:1e:
                    39:b6:0d:62:3b:ee:d0:a7:2c:54:5d:57:3f:19:d1:
                    64:5b:19:a5:82:b7:9f:b0:7f:6c:f6:21:53:2c:45:
                    3d:dd:58:87:fd:8c:5d:a8:60:f2:ee:22:58:67:ec:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:EC:E7:45:5E:27:D2:90:FF:FB:53:B8:C5:F3:7B:AD:40:67:A0
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8M3s50VeJ9KQ__tTuMXze61AZ6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.98.144.0/21
                  37.252.24.0/21
                  77.107.64.0/18
                  79.99.72.0/21
                  80.240.80.0/20
                  81.5.128.0/18
                  81.168.0.0/17
                  82.152.0.0/15
                  82.163.0.0/19
                  85.159.128.0/21
                  89.31.232.0/21
                  89.213.48.0-89.213.127.255
                  89.213.192.0/18
                  109.176.0.0/16
                  185.20.32.0/22
                  185.24.84.0/22
                  194.105.64.0/19
                  195.128.138.0/24
                  212.38.64.0/19
                  213.130.128.0/19
                  213.152.32.0/19
                  213.210.0.0/18
                  213.218.208.0-213.218.255.255
                  217.144.144.0/20
                  217.145.64.0/20
                IPv6:
                  2001:1a90::/32
                  2a00:c60::/32
                  2a02:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:65:32:2a:2f:c5:8c:55:ca:8b:51:08:19:2f:c6:89:4e:82:
         7c:e6:e9:d8:19:b9:a6:10:68:f4:f5:ca:de:f8:ea:9a:33:d5:
         74:32:47:f3:85:c6:6b:94:81:ae:1d:ce:94:2b:d0:67:27:96:
         d9:0e:c4:b6:12:ff:5b:20:7a:84:50:62:a1:a0:c5:1b:72:c9:
         b3:08:4e:68:72:2f:20:6b:44:f5:1d:6f:65:93:3a:ac:bb:47:
         3a:34:2e:4a:f0:f3:fb:76:17:9c:ec:52:60:87:ee:90:bb:4d:
         a3:92:21:c7:50:f4:79:c6:f9:7b:44:cb:87:7f:7a:61:0f:9a:
         b5:00:46:e2:ae:62:18:89:ba:d7:6f:78:24:af:e6:85:70:f5:
         3a:f4:de:98:a8:91:02:01:d9:58:f5:34:6d:f8:30:df:7a:fa:
         1a:12:a0:f6:ac:8f:8d:09:00:7b:52:5c:35:a2:2a:44:3d:d7:
         e1:fe:5f:d4:60:6b:a4:8a:10:7d:be:73:13:22:07:a2:77:d3:
         04:bd:33:f3:39:55:f2:15:af:b4:15:4a:36:32:bd:21:82:16:
         ac:a5:a3:f3:6c:75:90:ca:17:18:91:1a:3f:22:f3:be:bb:7d:
         e2:cb:62:ac:08:b3:36:b3:c0:15:b5:6c:47:7e:bf:ad:f6:7b:
         f9:20:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org