Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9OUMevB4cvFy655qNAcBtzMGoGs.roa
File:                     9OUMevB4cvFy655qNAcBtzMGoGs.roa (raw, json)
Hash identifier:          DOHHFYEuctChmqA+CkrrNtTwZFJjv1JaEOWbS6wHMa4=
Subject key identifier:   F4:E5:0C:7A:F0:78:72:F1:72:EB:9E:6A:34:07:01:B7:33:06:A0:6B
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0185C945F74D92E1BA8FBB4017D26D8E457D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9OUMevB4cvFy655qNAcBtzMGoGs.roa
Signing time:             Thu 19 Jan 2023 09:04:43 +0000
ROA not before:           Thu 19 Jan 2023 09:04:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        81.168.116.0/24 maxlen: 24
                          82.153.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 Feb 2023 16:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c9:45:f7:4d:92:e1:ba:8f:bb:40:17:d2:6d:8e:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan 19 09:04:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4e50c7af07872f172eb9e6a340701b73306a06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:24:25:e2:d6:a7:7f:27:09:28:f5:e5:4f:
                    f3:2b:3b:16:48:fb:ba:0f:65:b5:c2:d3:ae:17:23:
                    1b:05:fd:03:f3:73:99:f7:af:6c:d6:36:02:7c:bb:
                    7f:c2:52:9b:92:1d:63:26:06:20:77:25:4b:1a:ba:
                    b8:d1:0e:e6:fc:9f:ae:48:44:44:e1:b5:72:7f:7a:
                    33:5c:be:e1:79:23:c0:f9:f6:cc:d5:ac:e0:dc:b2:
                    df:b3:3f:73:ff:f2:42:1b:ae:59:c0:a4:6a:45:13:
                    0c:a4:bd:1a:86:90:62:b5:58:8b:52:73:b6:03:85:
                    3a:68:95:d4:82:47:fa:ba:3c:b9:1c:59:c5:30:0a:
                    a0:0c:ee:1f:27:9a:da:41:a5:b7:fe:17:d7:fb:42:
                    a4:ec:e0:8f:73:ef:52:fc:ec:50:dc:5c:38:9b:a7:
                    a4:fe:14:08:b3:a4:8a:ee:9e:03:a1:21:6a:bb:6e:
                    30:98:c2:e0:1b:66:57:1c:2e:e1:23:dd:88:f7:61:
                    ee:ab:dc:c1:e5:fe:98:9a:e5:22:01:55:a8:f5:c6:
                    a8:f9:d0:14:d0:36:34:1b:9e:84:ea:5f:5c:f7:9a:
                    d1:1a:83:28:25:c0:65:db:b7:ad:5a:4c:04:72:1e:
                    45:ee:23:c7:9f:fa:96:1f:dc:07:52:d0:09:9c:68:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E5:0C:7A:F0:78:72:F1:72:EB:9E:6A:34:07:01:B7:33:06:A0:6B
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9OUMevB4cvFy655qNAcBtzMGoGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.116.0/24
                  82.153.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:11:ae:11:73:ca:49:2f:c8:de:e8:b9:11:8d:60:d9:eb:13:
         c2:35:cc:f3:f7:f8:40:7c:58:c9:e6:c3:f2:02:9a:26:13:21:
         b2:0a:ba:4c:6d:94:24:6c:e5:ea:47:52:d2:42:63:9f:37:2e:
         cd:7c:cd:c3:9b:ac:53:21:1e:8b:76:07:2e:05:f9:5e:bd:b5:
         0d:5a:82:c8:80:48:40:30:45:a5:e7:ce:b0:ba:e1:e8:b3:fd:
         f3:b5:8f:33:67:9d:67:64:3f:77:ff:ae:d3:d5:8e:07:45:e2:
         4b:43:4e:52:39:ba:c9:e2:a6:2a:59:5e:f3:dc:4b:da:73:27:
         6f:e6:c2:56:a5:6d:d2:b8:b8:0c:7f:4f:bc:a3:da:b9:5d:31:
         e8:4b:b3:c0:7b:2f:f1:52:b0:37:bc:d4:f9:93:55:73:13:d1:
         d9:81:57:f6:d5:6d:fb:24:a8:6c:7b:2f:73:c6:12:8b:ed:d1:
         59:e3:d3:30:ea:ba:44:81:a0:65:98:de:b3:17:82:c1:86:eb:
         54:ab:b3:62:07:2f:5e:5d:0f:1a:96:fc:a3:69:83:c5:4c:28:
         62:8b:10:20:02:b5:4f:b9:1d:7a:47:f5:02:39:4f:75:b9:2d:
         11:f5:9e:c5:d0:e7:bc:63:b1:92:43:7b:a0:a4:de:b0:76:ac:
         49:c2:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org