Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/J9BPNH4pg384Evx5Xx6jYKh0B4s.roa
File:                     J9BPNH4pg384Evx5Xx6jYKh0B4s.roa (raw, json)
Hash identifier:          qxPNgaB8bWqFmls3zzQYOaSYaQlup8UwM9l+3t0Y6k4=
Subject key identifier:   27:D0:4F:34:7E:29:83:7F:38:12:FC:79:5F:1E:A3:60:A8:74:07:8B
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018BED79C1CF6171A0B77CA6A6EB134D6D3F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/J9BPNH4pg384Evx5Xx6jYKh0B4s.roa
Signing time:             Mon 20 Nov 2023 16:04:21 +0000
ROA not before:           Mon 20 Nov 2023 16:04:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        82.153.136.0/22 maxlen: 22
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          109.176.248.0/24 maxlen: 24
                          82.153.227.0/24 maxlen: 24
                          89.213.180.0/22 maxlen: 24
                          89.213.182.0/23 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          213.152.42.0/24 maxlen: 24
                          82.153.1.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 12:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:79:c1:cf:61:71:a0:b7:7c:a6:a6:eb:13:4d:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 20 16:04:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27d04f347e29837f3812fc795f1ea360a874078b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:6c:03:64:94:2c:a9:99:fd:6d:6c:13:16:
                    72:15:d1:33:38:e8:9e:c7:04:5a:9d:da:09:f8:c3:
                    9f:92:e6:bf:9e:c5:94:d8:5f:a0:3b:b7:31:28:85:
                    9f:55:14:87:06:4b:1c:79:28:c5:b5:56:5f:5c:53:
                    1b:fb:c7:70:03:d7:5c:25:5f:aa:fd:30:10:b5:fd:
                    57:4c:f2:bc:7b:a8:88:e4:06:f0:47:db:ed:d1:4d:
                    77:d5:2c:5d:e2:2e:56:97:2d:d2:8c:89:8f:8b:da:
                    76:7e:a3:b8:2c:60:3e:26:51:3d:9d:d9:20:7e:34:
                    8b:66:cf:0c:c0:cd:24:0a:a7:90:0f:9a:cd:81:4c:
                    60:5c:26:29:a5:f2:d8:72:94:11:a0:a6:ee:b4:c5:
                    34:97:40:a9:9f:4c:9e:6a:6b:44:78:9a:8f:5f:88:
                    35:92:00:96:86:93:a8:a6:a0:7c:27:2b:32:72:d3:
                    b7:75:6c:12:7d:db:96:91:66:cd:27:e0:1d:aa:08:
                    b5:91:29:e8:74:90:e9:de:10:ec:18:71:52:4f:93:
                    e0:e4:09:c7:79:51:f9:34:81:b6:eb:96:26:72:13:
                    22:8f:2e:00:15:f6:b1:f7:96:79:cb:28:53:8a:0b:
                    b6:60:8f:28:8d:70:d6:70:cf:38:b2:4a:dd:cd:fa:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:4F:34:7E:29:83:7F:38:12:FC:79:5F:1E:A3:60:A8:74:07:8B
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/J9BPNH4pg384Evx5Xx6jYKh0B4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.153.1.0/24
                  82.153.136.0/22
                  82.153.227.0/24
                  89.213.148.0-89.213.159.255
                  89.213.172.0/22
                  89.213.180.0/22
                  109.176.248.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a2:ec:b0:f7:c3:3c:39:30:36:be:18:c5:bc:17:ec:75:26:
         52:bd:28:ab:19:c5:19:ec:9d:3a:08:2b:4e:1a:da:22:c3:93:
         ab:15:c8:98:3b:23:a0:8a:93:8f:d5:89:a3:7c:4b:8d:63:c3:
         88:dc:40:69:d5:1f:55:4c:76:bb:ba:e0:83:9b:d7:0e:af:96:
         d7:ea:47:27:1f:b0:02:db:fa:5c:fb:d5:ec:2c:fd:db:75:8d:
         5a:f9:df:65:0c:32:75:de:b9:db:56:b6:72:99:84:66:71:d7:
         a8:e6:93:2e:45:f8:9f:a6:0a:c1:63:82:7b:ba:ad:98:1e:8e:
         35:a1:ff:b4:bc:88:dc:30:27:32:9e:5a:bd:46:ce:89:f4:98:
         d0:2f:08:a9:ff:fe:3f:de:1b:44:f1:00:da:70:a6:0f:a3:d1:
         de:41:d9:8d:1f:5d:a4:77:0d:85:56:91:40:45:16:48:e7:3e:
         52:73:5c:cc:e5:ea:ac:ae:df:20:37:4f:51:1b:02:a7:6f:27:
         17:88:a2:94:ab:5d:a3:a9:f6:22:d8:00:c2:d4:c8:d0:06:f2:
         fc:65:7d:e1:d2:cf:94:af:42:df:14:d4:49:49:27:6c:88:6c:
         62:67:21:63:b8:57:f0:3b:9e:20:00:06:17:ca:54:95:0c:40:
         d8:0d:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org