Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E-wOV2w1l1Dn0rrvTCQFhcaqLrg.roa
File:                     E-wOV2w1l1Dn0rrvTCQFhcaqLrg.roa (raw, json)
Hash identifier:          5IH2KJ6b8ASr9oRKjf20g7vf2dWByUYVsepOfbSLEK8=
Subject key identifier:   13:EC:0E:57:6C:35:97:50:E7:D2:BA:EF:4C:24:05:85:C6:AA:2E:B8
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0188778C6FA385F691F11C81F1333A6F44A8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E-wOV2w1l1Dn0rrvTCQFhcaqLrg.roa
Signing time:             Thu 01 Jun 2023 15:21:12 +0000
ROA not before:           Thu 01 Jun 2023 15:21:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398465
IP address blocks:        82.153.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 02 Jul 2023 11:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:77:8c:6f:a3:85:f6:91:f1:1c:81:f1:33:3a:6f:44:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jun  1 15:21:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13ec0e576c359750e7d2baef4c240585c6aa2eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:75:fa:0f:88:de:12:ec:1d:0c:c5:6d:66:
                    e5:75:57:5a:9a:e0:20:0f:6a:43:32:3e:d4:64:11:
                    4a:b0:cf:d7:7d:1f:0e:7f:85:d4:e4:a7:3e:72:1d:
                    32:ea:39:0c:a5:05:d3:a7:75:87:e3:88:53:6d:48:
                    ef:25:ae:0f:c8:b9:e7:55:0b:94:19:86:96:30:eb:
                    53:f4:36:7f:23:ad:14:39:34:05:69:5f:94:2c:00:
                    13:e6:f0:60:a4:11:05:1b:b0:7c:cc:df:a8:fd:fc:
                    16:ea:42:6b:d0:df:a2:e0:d1:e8:83:91:b9:29:7f:
                    6b:2c:92:4e:6b:40:64:2b:4c:55:71:43:0b:a7:f2:
                    cb:21:0b:87:a3:6a:7c:c7:4f:4e:ec:27:af:a4:21:
                    07:f0:68:24:d1:57:09:13:da:4d:f1:30:90:79:f4:
                    5a:f5:68:e3:2e:80:59:d9:a4:13:ce:6d:46:79:40:
                    be:68:75:02:4f:7f:15:88:ea:9d:8a:b6:5a:36:65:
                    3c:27:2f:7f:7c:bd:52:8e:d6:3e:01:5d:c2:53:ee:
                    6d:97:83:89:72:e8:b3:fd:2e:d8:2e:ba:6d:09:bd:
                    48:7b:97:0e:43:bb:48:b1:0b:08:17:b1:7f:87:e4:
                    cc:44:de:a1:fe:ef:b7:7f:a0:c9:10:b3:36:e3:37:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:0E:57:6C:35:97:50:E7:D2:BA:EF:4C:24:05:85:C6:AA:2E:B8
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E-wOV2w1l1Dn0rrvTCQFhcaqLrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:84:ba:74:08:fb:77:02:cf:e7:aa:9f:46:3a:fd:d1:3e:
         ea:96:cf:1b:02:45:c9:8d:b9:7f:e7:74:c7:74:7e:ce:03:44:
         ed:f4:13:d6:83:a2:24:ab:ce:39:b8:28:f1:8a:48:f0:24:86:
         7c:03:14:25:5c:18:8f:53:6b:ce:d8:3c:2b:65:79:9b:04:3e:
         72:05:33:bd:46:22:0b:bc:60:ee:15:bd:60:52:82:bb:9b:04:
         4b:cc:c6:ad:38:69:b6:86:42:90:2d:ff:62:a8:f8:05:fa:03:
         a8:89:76:a3:0f:75:8a:31:8c:1c:38:43:c9:86:da:19:ba:eb:
         ba:2c:d6:6f:53:f8:6b:e0:ad:fc:d0:bd:07:71:c8:a0:1c:78:
         1e:d7:ca:b2:86:6f:e8:34:2c:84:1f:83:56:f4:41:59:b6:91:
         91:fc:77:38:87:81:2e:fe:e0:20:93:17:ba:38:e5:54:81:ae:
         d0:b0:32:4b:26:74:a6:15:0c:37:68:00:d4:ab:28:2a:bb:05:
         ad:68:21:85:71:d5:57:cc:89:69:e6:8b:7f:ba:ec:12:12:b6:
         ba:5b:d3:4c:66:cd:d0:78:48:24:00:60:ac:60:a2:a3:73:9e:
         06:c5:53:e2:1c:73:27:ef:e7:da:36:15:76:03:92:b1:6c:77:
         09:13:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org