Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa
File:                     O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa (raw, json)
Hash identifier:          xkiqy7e1MKEN7NCSqYcSmEzGYJeUIR4mfzznPMom6LI=
Subject key identifier:   3B:F2:3C:EE:3D:20:6B:74:F6:25:95:72:D1:C2:79:E4:6E:A4:FC:67
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01890CE409C44F9A339877C31A7171780890
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa
Signing time:             Fri 30 Jun 2023 15:20:18 +0000
ROA not before:           Fri 30 Jun 2023 15:20:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        82.153.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Aug 2023 08:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:0c:e4:09:c4:4f:9a:33:98:77:c3:1a:71:71:78:08:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jun 30 15:20:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3bf23cee3d206b74f6259572d1c279e46ea4fc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:c2:f5:6c:68:0f:90:5f:c0:69:9e:8c:de:
                    15:20:d9:33:75:44:95:0c:a1:2f:cc:a9:95:98:7d:
                    e9:85:ea:b0:22:4e:d1:be:5f:a7:c7:af:0f:a3:84:
                    f1:cc:8f:f4:1a:7a:07:82:20:97:75:ed:1d:21:10:
                    e3:c2:fd:bc:11:50:97:36:38:b2:fb:f0:53:50:b4:
                    9c:67:f4:da:c5:fb:a3:c9:be:a1:f9:66:b7:72:06:
                    84:03:d3:ea:36:0d:b4:28:7c:42:72:36:b3:06:1f:
                    cb:d1:39:d2:f5:c2:52:c4:37:a7:e4:d5:f5:5e:fd:
                    e5:26:84:bd:49:c3:2b:17:93:54:94:8d:dd:ee:33:
                    c0:fb:1e:09:58:6d:fb:e3:e3:1f:53:2f:e0:68:d7:
                    20:79:89:c3:f4:80:b7:65:d1:a3:34:3c:dc:da:6d:
                    33:d0:5e:99:a9:73:cf:f1:bd:76:49:56:a2:76:bc:
                    04:e7:3a:94:b1:46:4d:b5:a2:e0:39:4f:02:93:aa:
                    6a:a8:e8:6a:c6:b2:80:3f:e4:df:a2:78:06:53:8a:
                    ae:dd:af:d5:3b:0e:08:2e:2d:47:8d:bf:18:d4:d2:
                    f2:02:1b:82:82:5b:f2:06:c0:45:0e:a5:98:85:eb:
                    b9:48:c5:ef:37:d6:d6:4f:b5:20:6c:66:93:06:4a:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F2:3C:EE:3D:20:6B:74:F6:25:95:72:D1:C2:79:E4:6E:A4:FC:67
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:43:0e:a0:a2:bc:16:fd:b8:c6:12:b3:37:1b:83:94:73:b7:
         3f:50:2d:cb:8c:81:96:68:b4:40:42:d6:36:6a:cb:31:a2:52:
         dc:1a:a4:74:78:01:38:25:a2:75:17:99:ca:db:7a:de:63:0d:
         3a:ee:6c:ed:b4:bb:40:a7:67:9a:32:ec:c1:a4:9f:04:68:17:
         9c:1c:28:c6:7b:70:64:06:b4:80:a2:27:9a:0f:c8:e9:41:30:
         57:88:d0:fb:8b:b9:64:ef:dc:32:67:e4:ec:ec:7f:7b:38:0c:
         cd:e1:68:be:c8:05:b8:45:d8:56:87:c4:d8:d4:7e:48:8d:44:
         a2:bd:50:e9:a9:04:9c:10:16:54:73:cc:80:be:bf:81:3e:8d:
         e3:63:4a:71:8f:2c:77:47:f9:7e:da:42:b9:08:33:64:a4:8b:
         56:34:cd:6e:68:4d:7c:06:33:f2:db:3d:ea:d7:a4:88:3b:1a:
         d9:46:37:27:0d:3d:cc:b4:0f:eb:be:eb:5e:62:24:c9:22:32:
         2f:37:5c:b4:9b:d7:39:a6:97:57:47:fb:bd:cf:23:78:9a:63:
         ab:4d:f5:dc:89:75:97:41:d2:75:fb:76:6c:49:a9:db:36:2b:
         70:d9:5d:cb:a5:1b:aa:e9:bd:13:2c:26:36:21:5a:a4:cb:c1:
         41:3e:1f:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkM5AnET5ozmHfDGnFxeAiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNjMwMTUyMDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmYyM2NlZTNkMjA2Yjc0ZjYyNTk1NzJkMWMyNzllNDZlYTRmYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltzC9WxoD5BfwGmejN4VINkzdUSV
DKEvzKmVmH3pheqwIk7Rvl+nx68Po4TxzI/0GnoHgiCXde0dIRDjwv28EVCXNjiy
+/BTULScZ/Taxfujyb6h+Wa3cgaEA9PqNg20KHxCcjazBh/L0TnS9cJSxDen5NX1
Xv3lJoS9ScMrF5NUlI3d7jPA+x4JWG374+MfUy/gaNcgeYnD9IC3ZdGjNDzc2m0z
0F6ZqXPP8b12SVaidrwE5zqUsUZNtaLgOU8Ck6pqqOhqxrKAP+TfongGU4qu3a/V
Ow4ILi1Hjb8Y1NLyAhuCglvyBsBFDqWYheu5SMXvN9bWT7UgbGaTBkpMlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDvyPO49IGt09iWVctHCeeRupPxnMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvT19JODdqMGdhM1QySlpWeTBjSjU1RzZrX0djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUplBMA0G
CSqGSIb3DQEBCwUAA4IBAQAwQw6gorwW/bjGErM3G4OUc7c/UC3LjIGWaLRAQtY2
assxolLcGqR0eAE4JaJ1F5nK23reYw067mzttLtAp2eaMuzBpJ8EaBecHCjGe3Bk
BrSAoieaD8jpQTBXiND7i7lk79wyZ+Ts7H97OAzN4Wi+yAW4RdhWh8TY1H5IjUSi
vVDpqQScEBZUc8yAvr+BPo3jY0pxjyx3R/l+2kK5CDNkpItWNM1uaE18BjPy2z3q
16SIOxrZRjcnDT3MtA/rvuteYiTJIjIvN1y0m9c5ppdXR/u9zyN4mmOrTfXciXWX
QdJ1+3ZsSanbNitw2V3LpRuq6b0TLCY2IVqky8FBPh9z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org