Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QEuxnSc-v4eccVye0CYEnBq2x9M.roa
File:                     QEuxnSc-v4eccVye0CYEnBq2x9M.roa (raw, json)
Hash identifier:          rOWmyHYel6QmnILCNi9t3TqWoYxfBEPWQddb5xFDu2w=
Subject key identifier:   40:4B:B1:9D:27:3E:BF:87:9C:71:5C:9E:D0:26:04:9C:1A:B6:C7:D3
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018ECD0D083E2A7808F39D91BC76A4F58A29
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QEuxnSc-v4eccVye0CYEnBq2x9M.roa
Signing time:             Thu 11 Apr 2024 12:06:07 +0000
ROA not before:           Thu 11 Apr 2024 12:06:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.152.176.0/23 maxlen: 23
                          82.153.136.0/22 maxlen: 22
                          82.153.245.0/24 maxlen: 24
                          89.213.97.0/24 maxlen: 24
                          89.213.133.0/24 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          213.130.149.0/24 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 07:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:cd:0d:08:3e:2a:78:08:f3:9d:91:bc:76:a4:f5:8a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Apr 11 12:06:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=404bb19d273ebf879c715c9ed026049c1ab6c7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:a9:61:af:a0:7b:57:5f:58:a5:58:2f:59:
                    25:1a:11:eb:76:bb:69:49:08:f0:ef:26:28:60:c3:
                    c0:cf:1a:8f:6e:0b:2c:7c:00:ca:3b:e6:3b:59:ef:
                    27:68:a3:86:2f:4e:0b:87:1f:9b:6f:05:4e:90:11:
                    95:6a:51:98:89:c7:f9:94:73:27:45:a3:4b:ba:c9:
                    80:21:04:44:64:49:73:fb:55:cb:e2:52:bd:40:d1:
                    a5:f6:f1:95:46:4c:b4:60:79:90:44:6c:52:33:3b:
                    cb:e9:85:37:49:9a:07:81:b6:f8:90:f4:46:c0:e0:
                    15:e0:a0:63:61:5f:40:d2:0a:61:7a:dc:d6:06:d0:
                    c8:65:70:77:67:45:70:cc:56:62:dc:e0:6b:4c:d6:
                    b8:b7:a8:62:3b:83:b7:9b:cd:aa:84:13:08:30:09:
                    12:9e:db:3a:d5:29:2d:93:ee:15:99:e3:b8:a2:17:
                    80:9c:9b:4d:ab:84:9d:50:d4:4e:92:3e:c7:58:f8:
                    6e:f7:1c:71:d5:35:ec:d7:f3:a7:59:5d:d7:82:6a:
                    10:fa:4a:fc:81:09:9e:5d:f4:8c:b9:d4:eb:b0:e0:
                    8c:6b:a8:a7:29:9c:71:6c:1c:2a:92:0a:a9:4d:56:
                    ed:98:fd:ad:5b:24:2c:09:69:46:40:6a:56:96:43:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4B:B1:9D:27:3E:BF:87:9C:71:5C:9E:D0:26:04:9C:1A:B6:C7:D3
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QEuxnSc-v4eccVye0CYEnBq2x9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.176.0/23
                  82.153.136.0/22
                  82.153.245.0/24
                  89.213.97.0/24
                  89.213.133.0/24
                  89.213.148.0-89.213.159.255
                  89.213.172.0/22
                  89.213.180.0/24
                  185.49.126.0/23
                  213.130.149.0/24
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:40:de:52:9f:32:bf:f3:45:2b:f4:cd:36:e0:b8:3d:69:f6:
         b9:3b:f4:ec:c6:8d:6a:78:01:c5:58:32:36:ab:5a:9e:0e:5a:
         a8:06:9a:0f:8e:8e:14:e9:8d:cc:9f:15:ee:72:f1:60:e9:d3:
         db:72:bc:d9:86:6b:fd:09:94:df:24:b5:33:bd:48:2d:5a:83:
         7d:22:35:49:ce:bc:f6:11:0d:b9:5a:b6:15:d1:79:cb:ee:b6:
         8d:6c:ba:96:57:9a:38:32:30:ff:63:5f:84:cf:89:c6:43:4a:
         eb:b8:71:fd:fd:d3:2d:9a:b9:84:e4:83:af:2c:54:8e:4f:92:
         9b:4d:f2:fa:bf:6d:be:5a:04:59:40:48:d3:0a:fc:04:9f:9b:
         8d:92:3f:b4:4a:3b:e1:59:db:7a:49:2f:e3:c5:2a:ad:59:b1:
         99:72:f8:da:2b:01:04:ea:c7:cb:e6:0e:d9:24:53:62:d2:5b:
         cc:26:f3:38:76:18:8b:2c:2d:04:32:e2:e7:43:84:ef:58:f3:
         1d:ef:65:fc:a3:47:28:0c:ac:c5:ce:e8:64:52:20:4f:ec:e5:
         7a:d9:6a:97:1e:83:ef:d9:2b:27:19:fc:6f:e3:2b:20:23:4f:
         02:ee:fb:3b:4b:70:61:bd:cf:51:dd:e5:95:56:98:07:c1:05:
         12:e3:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org