Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa
File:                     IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa (raw, json)
Hash identifier:          3Ruv9AK/oK61hbRmnSIKMYs75RD8yEZFLlthckYrCIs=
Subject key identifier:   21:72:8A:3F:54:47:B7:D8:E2:43:92:73:F4:9C:33:F8:3A:B5:6C:FE
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018D6B20023AFD1A128A0D22BADC4A24CB16
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa
Signing time:             Fri 02 Feb 2024 18:41:16 +0000
ROA not before:           Fri 02 Feb 2024 18:41:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.153.136.0/22 maxlen: 22
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.165.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.173.0/24 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 04 Feb 2024 12:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:6b:20:02:3a:fd:1a:12:8a:0d:22:ba:dc:4a:24:cb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Feb  2 18:41:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=21728a3f5447b7d8e2439273f49c33f83ab56cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:e3:08:ba:2b:ba:e1:48:56:3a:f1:97:06:
                    e0:cb:90:b6:14:d3:b8:a5:f7:5f:97:0d:f9:a3:72:
                    78:52:ec:32:2c:f6:8d:06:51:81:3a:05:d0:58:b4:
                    fe:11:3d:08:69:1e:db:83:75:e2:6f:7b:31:ac:64:
                    a4:8b:f1:7d:ce:e9:a5:9e:6c:cd:7b:cf:3f:a7:5a:
                    44:b2:99:41:b7:44:b3:ec:5c:f6:80:9e:47:0c:30:
                    6a:d1:b8:34:f9:0d:89:e8:dc:28:12:0c:5e:37:fd:
                    74:ce:b5:86:af:92:45:a5:33:97:0d:41:0f:d8:e1:
                    20:81:53:96:fe:a1:2f:16:5b:8b:68:8f:78:c4:8a:
                    d8:eb:c7:a8:38:f5:f6:6c:32:c1:ee:08:c7:91:40:
                    a2:dc:04:1f:88:d6:c6:45:be:3b:f1:81:57:c6:b9:
                    28:50:a0:06:9c:3c:df:70:8f:6a:c8:c3:ad:09:89:
                    7f:07:f0:e7:e9:a4:89:ee:ae:56:61:27:36:1f:b0:
                    5d:c4:63:60:35:ff:d8:66:8e:aa:a4:78:2a:e0:28:
                    55:64:87:e5:57:da:20:c6:0d:b1:8e:ef:ad:9a:0b:
                    b0:89:58:18:ba:e2:34:60:27:26:f7:f2:34:01:e6:
                    aa:dc:ac:34:83:5a:e2:64:3e:3c:73:f6:d7:26:e5:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:72:8A:3F:54:47:B7:D8:E2:43:92:73:F4:9C:33:F8:3A:B5:6C:FE
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IXKKP1RHt9jiQ5Jz9Jwz-Dq1bP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.165.0/24
                  89.213.172.0/22
                  89.213.180.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:23:36:b5:e7:01:eb:a3:72:7f:90:e9:60:f8:69:bd:ed:
         c9:d3:78:04:05:95:36:cf:50:2f:f7:7f:bd:3e:e4:c6:1b:bc:
         09:01:fb:1d:6a:18:ed:fd:53:f0:d1:d3:e2:6a:de:20:d5:ff:
         2b:87:ee:59:06:0f:2f:b6:ec:99:eb:66:a8:78:6d:d6:d0:78:
         a7:09:eb:c1:2a:9d:e6:a1:89:ca:44:59:6d:ad:76:83:78:70:
         ff:30:42:bb:e2:8c:0f:36:9c:8f:fd:13:5b:cf:9a:bb:77:90:
         21:97:f1:64:cc:10:64:7c:21:58:95:37:20:f0:9a:b0:53:61:
         95:28:20:6e:c7:cf:c9:ff:42:d8:90:c1:7d:de:f1:4e:cf:fa:
         5c:25:bc:ab:3d:dd:bb:3e:73:fa:de:d5:be:fa:21:a8:1d:25:
         1d:58:f8:5f:b9:33:cd:c7:f4:06:2e:06:91:97:37:79:72:d8:
         e4:0a:af:21:6b:84:67:28:5e:ab:6a:f8:78:cc:79:64:8c:b9:
         bd:d0:bd:64:7b:01:04:7c:e0:a4:0f:0e:66:d1:84:28:16:1a:
         cf:20:a8:ff:40:01:fc:33:97:6c:f3:d5:af:eb:40:fe:47:d3:
         0f:ee:18:5e:15:b8:7e:d1:5c:4e:a5:dd:e9:71:6c:07:cf:ae:
         64:35:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org