Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B38P794oY-JY-D5baDjGzfu0Ojk.roa
File:                     B38P794oY-JY-D5baDjGzfu0Ojk.roa (raw, json)
Hash identifier:          ALdLBci53saSg4x0iH8hMIjF3PirI6U/HAoeAh6LPUo=
Subject key identifier:   07:7F:0F:EF:DE:28:63:E2:58:F8:3E:5B:68:38:C6:CD:FB:B4:3A:39
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01863689876922C617CEB6A5D65B288FC94E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B38P794oY-JY-D5baDjGzfu0Ojk.roa
Signing time:             Thu 09 Feb 2023 14:17:08 +0000
ROA not before:           Thu 09 Feb 2023 14:17:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        81.5.191.0/24 maxlen: 24
                          82.153.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Feb 2023 09:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:89:87:69:22:c6:17:ce:b6:a5:d6:5b:28:8f:c9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Feb  9 14:17:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=077f0fefde2863e258f83e5b6838c6cdfbb43a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:12:2c:1b:ac:3d:7f:42:3a:fa:9f:3d:cb:
                    47:82:06:b3:7c:09:91:93:36:5c:ea:91:50:a5:5c:
                    da:bd:a3:e3:60:36:28:e9:83:7a:50:17:4b:99:83:
                    21:b2:19:4a:5d:a1:f5:6c:a8:6d:c5:d8:9e:a6:f4:
                    a0:a2:c1:ef:6f:bf:92:4d:8f:75:91:7a:e1:5e:73:
                    d8:99:6c:a0:63:d4:80:4d:e9:63:14:ae:2a:3f:37:
                    0b:31:d0:5e:f6:71:20:34:62:cb:0e:a7:ef:15:27:
                    5e:da:d1:f9:7b:57:e4:32:04:f8:c2:fe:c6:c0:ed:
                    a7:0f:c0:ae:9b:85:85:30:a7:e5:b7:9a:3e:44:2c:
                    13:35:fa:ff:23:c2:75:a4:83:10:80:28:2c:b2:87:
                    db:5a:c6:49:0a:ea:04:b4:24:a2:02:92:05:9d:ea:
                    e5:47:77:be:39:fd:c5:90:e4:ef:d5:72:82:4b:95:
                    95:27:53:bc:25:8e:be:ba:29:4d:2a:5e:66:8e:e7:
                    7a:6e:77:34:d8:d8:0b:a5:4d:79:6f:6c:2f:5f:13:
                    8e:32:5d:6b:99:a2:fd:e1:60:bb:65:80:90:bf:c6:
                    e4:dc:4f:69:37:7c:2c:2f:0f:e2:0a:f2:c9:e6:ba:
                    f7:39:2a:4a:92:84:9d:da:0c:a9:b4:93:c7:07:79:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:0F:EF:DE:28:63:E2:58:F8:3E:5B:68:38:C6:CD:FB:B4:3A:39
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B38P794oY-JY-D5baDjGzfu0Ojk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.5.191.0/24
                  82.153.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:52:70:8f:c9:44:b5:b7:5d:8c:ae:62:f0:ce:07:13:c7:c9:
         bc:11:54:1f:bf:41:db:22:50:1a:14:cc:49:83:f7:fd:e5:48:
         63:ae:85:09:04:97:0a:44:81:51:31:18:3d:d1:43:b5:a3:4d:
         7d:29:34:9a:d2:0e:2c:cb:57:4d:b6:f3:3e:01:eb:99:15:1e:
         50:49:04:bb:66:d1:c2:10:8b:63:3f:07:14:03:2d:aa:92:89:
         06:f8:a6:6c:d3:f1:c4:f6:40:4d:d3:0d:d7:e6:62:bb:19:b9:
         4d:d7:e5:1c:a4:b6:1e:f9:41:6a:88:0c:d5:da:fa:ab:d9:54:
         a6:15:00:e5:84:da:96:8a:5a:f7:c4:7e:2b:08:33:fd:4d:bc:
         fb:4e:f1:54:1d:0a:85:79:f6:66:9d:77:0b:59:be:0e:3f:fd:
         a7:c9:a1:cf:f2:0f:33:11:20:aa:a3:38:34:c7:80:c6:13:ae:
         0f:8b:07:e3:c0:d2:38:26:bb:6b:2b:db:cf:c1:cb:a4:58:a6:
         2d:c6:c0:da:bb:09:73:86:0c:1c:20:65:b9:e3:13:ce:f4:f1:
         e5:b9:b5:da:f1:85:c9:dd:68:0f:c8:b3:17:33:a4:5e:cb:ed:
         7e:e6:f1:03:b1:17:89:fc:11:70:01:fe:1f:0c:d8:93:5c:ad:
         ad:39:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org