Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KlmZVmNU235dNIr9cfRCecGExT8.roa
File:                     KlmZVmNU235dNIr9cfRCecGExT8.roa (raw, json)
Hash identifier:          KLMMUGjzPDMz93prfgyKmJRvLwyOm2SGvCa1VF19iFY=
Subject key identifier:   2A:59:99:56:63:54:DB:7E:5D:34:8A:FD:71:F4:42:79:C1:84:C5:3F
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B39391EDD5E0A414FF1AC7B538AB59F12
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KlmZVmNU235dNIr9cfRCecGExT8.roa
Signing time:             Mon 16 Oct 2023 16:02:06 +0000
ROA not before:           Mon 16 Oct 2023 16:02:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        81.168.123.0/24 maxlen: 24
                          89.213.144.0/24 maxlen: 24
                          89.213.150.0/24 maxlen: 24
                          82.153.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 Nov 2023 08:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:39:39:1e:dd:5e:0a:41:4f:f1:ac:7b:53:8a:b5:9f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 16 16:02:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2a5999566354db7e5d348afd71f44279c184c53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:c5:7b:67:66:11:e7:d7:bd:fd:17:d9:2b:
                    72:1d:71:bf:33:bd:b8:6e:f5:75:78:aa:f5:76:bc:
                    c1:d6:49:4d:97:39:9f:84:c2:85:c7:e0:1d:e6:10:
                    0b:5b:37:7a:9a:cc:ea:85:82:77:47:8e:59:27:5c:
                    ff:58:d5:e4:ab:61:6a:81:ba:d1:07:eb:b9:d2:cb:
                    f0:e3:8e:22:fc:9c:46:ed:d0:05:06:c6:a8:bc:a7:
                    02:1a:e8:1c:f4:5b:b4:3f:0b:2d:f0:7b:02:1e:36:
                    22:79:49:5b:1a:98:0a:70:55:7b:cf:49:ed:d5:17:
                    cf:78:cb:bf:da:98:e3:b4:40:74:b4:95:41:f3:25:
                    87:49:ec:f5:eb:98:7c:cc:81:e0:de:92:82:cc:ff:
                    3b:ed:f6:d5:85:08:6e:04:4e:db:2d:28:41:fd:67:
                    6a:d7:60:7a:2a:b1:4e:a8:7d:4b:87:f2:0b:84:17:
                    1c:ef:02:d4:b0:a6:c4:6d:4b:37:43:59:a4:d6:6c:
                    28:66:c2:5b:b7:31:4b:3c:49:45:b7:de:ea:8c:50:
                    23:a6:af:c6:d2:be:83:aa:45:cb:b2:12:4b:bc:c5:
                    ad:70:a2:54:b6:15:5d:e9:b6:e8:71:bf:24:48:05:
                    8b:e7:43:f2:eb:03:80:29:d4:fc:14:3f:f8:c1:4f:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:99:56:63:54:DB:7E:5D:34:8A:FD:71:F4:42:79:C1:84:C5:3F
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KlmZVmNU235dNIr9cfRCecGExT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.123.0/24
                  82.153.10.0/24
                  89.213.144.0/24
                  89.213.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:8f:88:99:6a:0b:41:2a:06:dc:97:a6:f1:ed:12:39:e8:04:
         46:3b:16:da:39:e3:21:88:d9:e8:e1:48:f7:9c:16:8c:20:ad:
         fc:82:53:c3:7a:ad:65:a2:53:da:7b:f3:68:5d:40:07:f5:7c:
         6a:a9:d4:d4:ba:68:b0:af:c7:b2:a7:75:c6:78:aa:2b:78:91:
         99:79:ea:7d:80:f0:e2:d1:cf:9a:80:8c:99:d3:83:d3:6a:8e:
         b5:db:0d:5c:9d:69:3d:36:8a:f5:ed:eb:80:68:ee:f0:f3:22:
         51:13:93:95:cf:41:dd:cd:95:ba:dc:62:17:22:38:d0:90:f4:
         3f:14:9c:2a:50:f0:01:75:08:e1:cc:e8:2c:c3:c1:cb:28:dc:
         29:04:77:06:ea:a9:8f:a4:e0:70:dc:aa:e2:c5:89:bc:e9:95:
         ff:d5:6a:b3:08:b8:08:24:bc:25:a9:df:29:52:4f:2d:6d:74:
         37:89:9e:07:6f:42:df:d7:9f:35:a0:7c:40:2b:91:4a:ed:66:
         b9:cc:3c:8d:17:dd:75:e7:db:a5:4e:7c:b8:24:d1:5e:3b:f6:
         32:9e:e8:ec:fc:2e:ab:90:7c:a3:02:c0:22:28:98:84:5e:9b:
         94:20:9f:16:f1:a3:ad:ea:65:d1:87:59:1f:6c:eb:93:4a:02:
         2b:6c:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org