Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EPbya23q_FQQikZv0wnlVpV2tg4.roa
File:                     EPbya23q_FQQikZv0wnlVpV2tg4.roa (raw, json)
Hash identifier:          kND1lqMida1Zx54kEvToC6H8D8/jZaSAKOaQO5HAXok=
Subject key identifier:   10:F6:F2:6B:6D:EA:FC:54:10:8A:46:6F:D3:09:E5:56:95:76:B6:0E
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01885BFFDFD66EAF44E88C3ECD38924486C4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EPbya23q_FQQikZv0wnlVpV2tg4.roa
Signing time:             Sat 27 May 2023 06:57:55 +0000
ROA not before:           Sat 27 May 2023 06:57:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        82.152.174.0/23 maxlen: 23
                          82.153.69.0/24 maxlen: 24
                          82.153.73.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          82.153.248.0/24 maxlen: 24
                          82.153.249.0/24 maxlen: 24
                          82.153.64.0/24 maxlen: 24
                          82.152.253.0/24 maxlen: 24
                          82.152.249.0/24 maxlen: 24
                          82.152.251.0/24 maxlen: 24
                          82.153.208.0/24 maxlen: 24
                          82.153.209.0/24 maxlen: 24
                          82.153.210.0/24 maxlen: 24
                          82.153.211.0/24 maxlen: 24
                          82.152.254.0/24 maxlen: 24
                          82.152.255.0/24 maxlen: 24
                          82.153.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 May 2023 17:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5b:ff:df:d6:6e:af:44:e8:8c:3e:cd:38:92:44:86:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May 27 06:57:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10f6f26b6deafc54108a466fd309e5569576b60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:12:d6:b4:3d:8e:e0:58:cf:f4:48:a0:cd:
                    c5:35:06:2f:1a:02:f9:bc:df:11:58:53:a5:46:db:
                    4c:21:f1:b9:52:f5:e2:f9:a2:b2:f7:22:46:9e:7b:
                    11:46:2f:bb:b5:3b:c7:c6:07:56:7a:53:ea:c3:5d:
                    8f:d3:79:95:00:d5:d1:43:8e:d2:2d:a6:01:a5:b3:
                    46:38:8d:26:a2:ad:f3:73:c8:45:1b:05:77:36:f4:
                    b8:f7:71:fd:52:3e:e6:e5:33:91:47:d6:98:f0:7c:
                    8d:97:c4:2b:5d:59:f1:a5:59:d6:c1:00:9f:68:47:
                    ec:e4:e8:64:9f:0c:0b:2f:d9:58:5d:fb:1c:1c:4f:
                    79:da:82:6d:c8:7d:df:74:05:c0:9d:63:3e:6e:d5:
                    a7:44:8e:e4:49:df:c8:e8:12:84:96:d5:6f:06:23:
                    b1:1d:73:9f:47:9f:d5:b5:fc:70:83:bd:a2:38:88:
                    1a:5e:96:30:9f:ab:a2:97:f2:9b:2a:57:7c:69:b1:
                    28:74:d0:d4:c6:d8:a5:9a:75:34:a8:41:b8:94:9f:
                    31:b4:a9:ae:ce:fe:04:16:81:01:36:cb:7d:d6:e4:
                    39:48:4e:fd:df:92:19:19:fe:f8:26:28:d3:94:e5:
                    5a:c4:5d:5d:27:ce:09:ef:a8:f7:8c:3a:e5:14:4e:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F6:F2:6B:6D:EA:FC:54:10:8A:46:6F:D3:09:E5:56:95:76:B6:0E
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EPbya23q_FQQikZv0wnlVpV2tg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.152.174.0/23
                  82.152.249.0/24
                  82.152.251.0/24
                  82.152.253.0-82.152.255.255
                  82.153.64.0/24
                  82.153.69.0/24
                  82.153.73.0/24
                  82.153.208.0/22
                  82.153.222.0/24
                  82.153.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:35:9f:2c:d1:a6:6e:0e:8e:6d:f5:c1:7e:8a:85:b4:1a:34:
         4b:67:f6:87:97:ab:f5:6f:6b:52:a2:90:e7:96:f4:9f:d8:ac:
         98:74:a8:81:fa:c1:14:67:8f:f2:83:10:c2:17:f8:e4:37:ab:
         54:69:24:c6:cc:86:56:91:80:f0:de:bb:7b:66:58:c1:c9:e5:
         55:01:1f:cc:92:7c:c5:d2:53:ac:e5:bf:6b:60:d1:55:84:bd:
         6a:08:e6:cd:f2:52:13:7c:63:02:af:92:cf:a6:cf:4e:13:83:
         dd:6b:4b:07:ca:0d:94:5e:86:e8:27:1f:cd:41:ff:e2:0e:e7:
         71:d7:d1:a8:98:68:63:01:ac:64:9a:eb:50:cf:b6:80:12:49:
         80:f2:8b:6e:90:88:76:d0:e3:ee:7b:b3:76:54:87:ad:ef:38:
         20:a5:af:1d:c4:75:f9:68:3d:ff:ea:ae:e6:bf:6c:bc:b0:88:
         e8:d0:2e:b1:c3:fe:b7:4b:41:39:d0:86:c1:f6:18:8b:f1:a4:
         5f:87:0d:f2:31:ef:d6:ef:1c:25:2b:ca:bb:13:f9:31:ca:a3:
         ce:c2:91:a3:ff:c9:85:5b:d0:73:5c:b3:76:fb:b4:39:09:8b:
         21:f3:f7:7a:41:d0:46:37:57:07:ce:a6:90:68:a9:12:32:a6:
         c8:3b:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org