Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyiHAtLm6yceQ4ADJOtZQuneYZo.roa
File:                     FyiHAtLm6yceQ4ADJOtZQuneYZo.roa (raw, json)
Hash identifier:          K9pweQ1EyZLQF9GO6p/S2wLativiGuN+bbaNJnyj/Dk=
Subject key identifier:   17:28:87:02:D2:E6:EB:27:1E:43:80:03:24:EB:59:42:E9:DE:61:9A
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018571FA2C66E9C6958AE6238225F7358BF9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyiHAtLm6yceQ4ADJOtZQuneYZo.roa
Signing time:             Mon 02 Jan 2023 10:14:58 +0000
ROA not before:           Mon 02 Jan 2023 10:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        81.168.116.0/24 maxlen: 24
                          82.153.79.0/24 maxlen: 24
                          81.168.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jan 2023 09:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:fa:2c:66:e9:c6:95:8a:e6:23:82:25:f7:35:8b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  2 10:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17288702d2e6eb271e43800324eb5942e9de619a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:c0:f1:8d:b3:8c:b4:aa:3d:04:1f:a2:fb:
                    7e:91:72:08:d0:7b:15:18:a1:78:47:1d:fb:e7:c1:
                    59:06:71:96:48:cd:73:15:54:9d:1c:99:79:36:97:
                    91:29:ff:44:f2:1f:30:53:b5:c8:67:cd:74:8c:c0:
                    34:63:f2:52:0f:30:37:4d:e5:44:5e:0d:19:0d:df:
                    d1:5f:76:07:f5:f9:aa:a5:f8:49:3a:b5:60:8e:0f:
                    58:20:e3:0f:cf:1d:71:eb:f1:e1:2f:fd:8f:13:7c:
                    07:75:07:4b:3e:56:a5:bc:2e:69:d3:21:7a:29:9c:
                    64:ae:9b:0a:1b:2e:59:c5:8b:3f:b1:f6:44:c4:09:
                    95:b3:ea:d3:b1:51:93:54:ef:bb:12:ce:89:9f:7c:
                    9a:69:4d:08:ee:90:0e:47:83:70:88:cf:cb:d5:4a:
                    f9:c2:19:9a:ad:54:9a:52:ae:34:be:cc:67:3e:f1:
                    97:b3:43:32:cb:c6:53:7b:88:a5:5e:c6:b0:5f:94:
                    76:45:9c:d5:bb:4f:a1:d1:17:d7:2d:7e:d8:f9:fd:
                    ca:e1:fa:aa:4c:19:60:7b:0f:17:89:e5:58:42:86:
                    0e:89:5e:ab:86:6c:a9:58:2b:62:a5:e9:0f:16:88:
                    c7:56:82:7b:57:b9:29:32:d8:8b:f7:14:65:0d:10:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:28:87:02:D2:E6:EB:27:1E:43:80:03:24:EB:59:42:E9:DE:61:9A
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyiHAtLm6yceQ4ADJOtZQuneYZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.35.0/24
                  81.168.116.0/24
                  82.153.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:7b:44:3e:5e:04:28:69:a3:20:c2:78:18:e4:b5:78:41:
         b8:f4:c7:98:80:b3:ad:c4:04:61:84:68:4d:9a:e2:b9:cf:17:
         b4:d8:73:51:bd:69:e6:5a:2e:37:6a:88:e0:fb:83:e3:40:e4:
         ea:33:18:2e:88:56:1b:ff:23:d2:54:dd:a8:57:5b:5d:4f:4f:
         1b:a6:6b:43:0b:28:63:21:57:60:4b:67:09:e5:b9:25:8d:1c:
         6b:a9:e1:a7:e2:df:87:fc:dc:79:31:08:ad:d4:a4:1c:14:63:
         5c:60:d1:6a:81:38:61:a8:a9:47:09:61:15:7b:cc:84:39:1d:
         cf:71:61:42:17:02:17:7b:dc:2b:18:62:60:28:52:17:94:f8:
         a9:a0:d2:71:aa:76:23:92:d7:19:7d:42:1f:1e:0a:73:41:e0:
         08:31:e8:8e:74:a8:a7:5a:60:cf:c2:be:68:b4:e8:28:55:5e:
         f3:5a:27:25:ff:33:80:02:98:27:a2:2e:2a:27:92:8d:52:7f:
         d3:4d:63:a5:11:50:4d:d3:46:47:ca:8f:44:bf:a8:25:af:1d:
         a7:20:3b:be:95:0a:a5:a1:19:a4:9f:8b:65:3f:34:05:9b:ed:
         c7:85:53:6e:87:a9:77:2b:83:46:6b:91:a5:a7:a5:23:e8:73:
         a2:cf:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org