Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MALE1KbdA9IEn3ZK1UUycKanoCY.roa
File:                     MALE1KbdA9IEn3ZK1UUycKanoCY.roa (raw, json)
Hash identifier:          7+yNA/AE3HOgV1cILXDadijU85cw3A1c/pzXWH01JVo=
Subject key identifier:   30:02:C4:D4:A6:DD:03:D2:04:9F:76:4A:D5:45:32:70:A6:A7:A0:26
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01874BF49C080F409A0E4B23C8F61095F330
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MALE1KbdA9IEn3ZK1UUycKanoCY.roa
Signing time:             Tue 04 Apr 2023 11:08:54 +0000
ROA not before:           Tue 04 Apr 2023 11:08:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8851
IP address blocks:        89.213.64.0/18 maxlen: 24
                          37.252.24.0/21 maxlen: 24
                          80.240.80.0/20 maxlen: 20
                          77.107.64.0/18 maxlen: 24
                          213.210.0.0/18 maxlen: 24
                          85.159.128.0/21 maxlen: 24
                          212.38.64.0/19 maxlen: 24
                          37.98.144.0/22 maxlen: 24
                          37.98.144.0/21 maxlen: 24
                          109.176.0.0/16 maxlen: 16
                          89.213.40.0/21 maxlen: 24
                          89.213.48.0/20 maxlen: 24
                          213.218.208.0/20 maxlen: 24
                          89.31.232.0/21 maxlen: 24
                          79.99.72.0/21 maxlen: 24
                          185.20.32.0/22 maxlen: 24
                          185.20.34.0/24 maxlen: 24
                          185.20.35.0/24 maxlen: 24
                          213.218.224.0/19 maxlen: 24
                          81.168.0.0/17 maxlen: 17
                          89.213.128.0/17 maxlen: 24
                          82.163.0.0/19 maxlen: 24
                          217.144.144.0/20 maxlen: 24
                          217.145.64.0/20 maxlen: 24
                          185.49.124.0/22 maxlen: 24
                          185.24.84.0/22 maxlen: 24
                          89.213.0.0/21 maxlen: 24
                          213.130.128.0/19 maxlen: 24
                          194.105.64.0/19 maxlen: 24
                          81.5.128.0/18 maxlen: 18
                          82.152.0.0/15 maxlen: 15
                          195.128.138.0/24 maxlen: 24
                          2a02:21f8::/32 maxlen: 32
                          2a00:c60::/32 maxlen: 32
                          2001:1a90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 04 Apr 2023 11:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4b:f4:9c:08:0f:40:9a:0e:4b:23:c8:f6:10:95:f3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Apr  4 11:08:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3002c4d4a6dd03d2049f764ad5453270a6a7a026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:e7:43:ff:db:b7:a8:2f:fb:80:3c:4b:4f:
                    a5:d9:23:23:6b:af:47:44:a0:15:27:57:ad:94:39:
                    ce:5e:73:e3:8f:be:99:7d:96:05:5e:7c:21:d6:c7:
                    10:e8:28:da:df:6f:c2:3d:65:8c:34:0f:dd:b0:86:
                    1f:32:65:33:16:18:36:45:4a:d5:6b:7f:60:1a:a4:
                    e5:f7:33:d1:5f:4f:81:5c:db:ad:68:f1:de:bf:be:
                    1a:f8:b4:ce:82:64:fc:9a:f8:76:a8:03:53:4c:b5:
                    94:97:a2:b0:d3:2e:2d:03:9a:57:4a:db:9b:09:a4:
                    56:42:97:d4:82:55:6b:7f:58:4b:f6:f2:53:ca:d5:
                    6a:44:4a:6e:98:09:e0:85:ff:b5:5a:48:20:be:37:
                    00:ec:8a:11:cc:41:ba:29:ee:d6:fe:60:2b:1f:43:
                    7d:91:94:d6:c1:a1:b9:ab:fc:a5:31:29:a9:7e:7c:
                    5d:4b:ee:34:6f:b9:e8:7b:71:96:71:16:da:ed:66:
                    7d:1a:0d:fc:f3:b5:38:09:8d:17:a6:45:ba:81:51:
                    f2:27:2d:d6:bc:19:2c:9b:43:e3:60:2a:ed:00:eb:
                    de:8e:52:b0:f1:a2:65:c1:f8:81:62:cf:41:40:56:
                    d4:e4:37:9a:47:81:54:f1:98:ed:2b:25:61:06:12:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:C4:D4:A6:DD:03:D2:04:9F:76:4A:D5:45:32:70:A6:A7:A0:26
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MALE1KbdA9IEn3ZK1UUycKanoCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.98.144.0/21
                  37.252.24.0/21
                  77.107.64.0/18
                  79.99.72.0/21
                  80.240.80.0/20
                  81.5.128.0/18
                  81.168.0.0/17
                  82.152.0.0/15
                  82.163.0.0/19
                  85.159.128.0/21
                  89.31.232.0/21
                  89.213.0.0/21
                  89.213.40.0-89.213.255.255
                  109.176.0.0/16
                  185.20.32.0/22
                  185.24.84.0/22
                  185.49.124.0/22
                  194.105.64.0/19
                  195.128.138.0/24
                  212.38.64.0/19
                  213.130.128.0/19
                  213.210.0.0/18
                  213.218.208.0-213.218.255.255
                  217.144.144.0/20
                  217.145.64.0/20
                IPv6:
                  2001:1a90::/32
                  2a00:c60::/32
                  2a02:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:7c:93:4b:ef:30:f7:18:e4:a2:41:68:3e:3b:6b:c7:41:5c:
         4e:d9:79:c8:a7:dc:66:54:33:1b:48:aa:6a:48:58:91:75:34:
         4a:f5:e9:81:e6:2c:14:20:c7:15:68:f6:4e:8a:6b:f5:8f:28:
         8f:6b:f8:06:04:f4:bc:9d:35:d6:eb:48:37:11:a1:9b:db:12:
         85:ce:69:c4:c9:be:82:dc:18:6c:93:ce:4a:77:00:cf:51:51:
         91:fd:53:25:c6:47:cc:93:ec:11:ab:36:55:ad:01:27:0c:b3:
         f1:6e:b1:ed:e3:6f:dd:96:b3:21:30:fc:e7:5b:8e:1c:c6:a9:
         f8:52:e4:b1:9f:b7:3b:d9:ed:ef:0d:61:81:d4:f4:8b:5a:80:
         23:2c:a1:90:eb:d9:f2:d7:93:a7:e8:67:9e:7b:69:c3:95:bb:
         19:c6:d9:ca:08:5b:5a:6b:21:36:7d:9e:3f:b4:ba:45:2c:77:
         21:97:a5:cc:b1:b3:b6:0f:7e:e3:9d:79:37:5f:8b:89:6c:d2:
         87:26:f0:0d:a5:8b:8a:97:1b:74:d7:bd:0c:7e:99:60:93:44:
         74:11:c6:3b:aa:ed:1a:cf:16:2e:5b:2e:3f:68:eb:d2:68:c7:
         5b:4e:9e:d7:2c:ba:a0:e8:46:fa:51:fb:5b:26:87:46:97:cd:
         95:67:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org