Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa
File:                     9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa (raw, json)
Hash identifier:          5uNsUC4n8P9pWMOT147zGe8Zy2H+mAMZobSzYAHyHAg=
Subject key identifier:   F6:7D:DF:27:96:12:3F:E1:15:16:83:FF:1F:9A:E2:61:74:CB:01:9D
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0188C46C7E6EE58E87FC91F723BA323E54B9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa
Signing time:             Fri 16 Jun 2023 13:37:04 +0000
ROA not before:           Fri 16 Jun 2023 13:37:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        82.153.240.0/24 maxlen: 24
                          82.152.178.0/24 maxlen: 24
                          82.153.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 07:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c4:6c:7e:6e:e5:8e:87:fc:91:f7:23:ba:32:3e:54:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jun 16 13:37:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f67ddf2796123fe1151683ff1f9ae26174cb019d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:03:d7:42:4c:d1:40:a8:b2:7e:df:7e:89:
                    a5:71:bf:70:3e:e8:47:ec:4e:e2:c1:2e:27:ec:ee:
                    4d:78:83:29:b1:9c:99:84:89:d7:26:f1:3d:71:32:
                    2d:4f:6f:9e:41:93:02:5b:15:ac:e3:b2:86:e5:ce:
                    3c:14:1e:a3:b5:84:f6:e3:e6:d9:7c:27:9e:df:6f:
                    83:39:e7:f2:2a:01:7d:ef:fd:38:c6:3b:fe:a6:43:
                    33:81:53:0f:64:68:f9:ec:81:87:ce:ef:4c:33:e9:
                    ad:b8:e6:e5:f9:64:4c:1b:5d:13:48:b7:65:3f:28:
                    ef:43:ef:83:b1:9a:2d:84:0c:5c:0f:64:62:fa:15:
                    1b:80:01:db:be:60:ef:3e:6b:e4:8d:41:b6:a8:3a:
                    7d:7e:dd:c9:72:0f:01:72:52:02:d8:3d:b0:8a:dd:
                    2f:8e:9f:b7:99:c4:b8:28:83:ec:55:bf:5c:25:80:
                    84:bf:49:c7:56:7b:f4:0f:07:11:26:e3:df:f2:0d:
                    df:29:46:91:4b:76:1e:93:1a:31:ac:de:91:8e:c2:
                    dd:c0:5e:4e:7c:85:e8:92:08:cf:25:d1:1c:5e:a9:
                    66:8c:1b:fe:52:81:bd:09:69:0a:2a:10:43:8d:53:
                    eb:cd:84:d3:6a:ad:25:58:e0:e4:d7:4f:b9:ff:b3:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:DF:27:96:12:3F:E1:15:16:83:FF:1F:9A:E2:61:74:CB:01:9D
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.178.0/24
                  82.153.240.0/24
                  82.153.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:e9:be:93:0d:d6:19:11:e5:ea:b8:44:32:71:a0:59:6f:
         f7:c2:2b:f2:80:00:d0:12:1e:0b:9a:01:b2:a5:d8:df:41:42:
         87:93:39:27:ff:ae:69:dc:bc:3b:96:ad:7f:a8:7b:ce:81:3a:
         cb:a3:73:74:15:70:18:81:c0:9b:5e:3f:20:91:cc:91:17:98:
         60:77:8f:ae:29:2e:e7:a4:48:04:53:4a:aa:71:35:ce:a0:aa:
         47:1d:b9:bf:98:b3:02:a2:ab:b9:dc:75:30:59:6c:63:3b:ca:
         c4:7f:99:7c:76:bf:ab:f4:02:79:c8:f0:48:63:bf:94:29:fc:
         83:a0:4f:a7:2b:9e:c6:97:77:d2:a3:32:e6:cf:b9:42:65:5c:
         63:8d:cf:77:aa:d3:f4:2d:77:45:2d:39:33:67:38:c2:47:93:
         6e:f9:c3:e4:66:b4:a4:fc:00:8a:d1:2d:2f:81:62:1f:24:ad:
         81:7a:be:36:39:e8:bb:8f:cb:db:88:a1:b8:c7:35:a1:4c:d5:
         4a:62:2b:5d:cf:b5:77:64:6a:a1:a9:15:c0:e7:1f:0a:8a:7e:
         bc:10:41:36:4f:98:08:7e:83:c3:b2:20:be:d6:90:e5:c7:2f:
         06:29:30:0d:be:fb:67:13:93:41:c6:62:d4:d5:1d:15:17:ff:
         e7:a0:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org