Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QGmFwg90pQINDJ61Elsg_ELazJQ.roa
File:                     QGmFwg90pQINDJ61Elsg_ELazJQ.roa (raw, json)
Hash identifier:          9Pr6b3VYROnUvA6wtqgd6VxtKeIvTVGuU3UGzLpTHn8=
Subject key identifier:   40:69:85:C2:0F:74:A5:02:0D:0C:9E:B5:12:5B:20:FC:42:DA:CC:94
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018571FA230C84DCE9C0F251CDE49538ECF9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QGmFwg90pQINDJ61Elsg_ELazJQ.roa
Signing time:             Mon 02 Jan 2023 10:14:56 +0000
ROA not before:           Mon 02 Jan 2023 10:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8851
IP address blocks:        89.213.64.0/18 maxlen: 24
                          37.252.24.0/21 maxlen: 24
                          80.240.80.0/20 maxlen: 20
                          213.210.0.0/18 maxlen: 24
                          77.107.64.0/18 maxlen: 24
                          85.159.128.0/21 maxlen: 24
                          212.38.64.0/19 maxlen: 24
                          37.98.144.0/21 maxlen: 24
                          37.98.144.0/22 maxlen: 24
                          89.213.40.0/21 maxlen: 24
                          89.213.48.0/20 maxlen: 24
                          213.218.208.0/20 maxlen: 24
                          89.31.232.0/21 maxlen: 24
                          79.99.72.0/21 maxlen: 24
                          185.20.32.0/22 maxlen: 24
                          185.20.34.0/24 maxlen: 24
                          185.20.35.0/24 maxlen: 24
                          213.218.224.0/19 maxlen: 24
                          89.213.128.0/17 maxlen: 24
                          82.163.0.0/19 maxlen: 24
                          217.144.144.0/20 maxlen: 24
                          217.145.64.0/20 maxlen: 24
                          185.49.124.0/22 maxlen: 24
                          185.24.84.0/22 maxlen: 24
                          89.213.0.0/21 maxlen: 24
                          194.105.64.0/19 maxlen: 24
                          213.130.128.0/19 maxlen: 24
                          195.128.138.0/24 maxlen: 24
                          2a02:21f8::/32 maxlen: 32
                          2a00:c60::/32 maxlen: 32
                          2001:1a90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 04 Apr 2023 10:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:fa:23:0c:84:dc:e9:c0:f2:51:cd:e4:95:38:ec:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  2 10:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=406985c20f74a5020d0c9eb5125b20fc42dacc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:29:cc:a8:75:92:6d:b5:04:d7:cf:dc:6d:ec:
                    1a:81:a1:ae:f9:72:b4:37:2c:fa:9c:18:b5:3a:d0:
                    b1:b9:8e:f9:b6:7c:98:bc:f0:db:ff:18:5e:7a:e6:
                    1f:af:7a:ab:db:8b:c2:6c:1d:12:b8:c5:7a:6b:99:
                    3a:62:fe:03:0b:63:e5:c2:18:89:3e:b6:36:58:4e:
                    ee:77:87:c6:41:3d:b8:14:4d:98:a4:64:2b:94:70:
                    f3:89:1e:91:8f:ed:15:bf:2b:85:4d:75:c5:d6:80:
                    02:e7:b0:ed:2a:0f:6d:75:d5:ba:57:01:e8:92:87:
                    31:a4:d8:03:f6:04:d2:e0:da:21:fb:c3:6a:4f:39:
                    f0:b1:50:e2:5e:db:20:d1:75:61:d0:57:30:bf:81:
                    72:6f:54:39:47:85:b8:09:fa:19:f7:76:82:d6:84:
                    57:76:06:af:08:f0:fe:92:69:6e:94:26:19:ab:d8:
                    c7:2c:04:1e:3c:f2:ad:1b:7f:68:16:0f:8b:49:a2:
                    66:bb:9f:a6:32:2b:80:c8:9a:b1:45:13:46:85:c0:
                    67:d7:fc:94:d6:e0:47:11:51:9b:22:93:08:0c:36:
                    33:0b:ae:01:e2:86:25:b9:db:9b:76:eb:3b:bb:6e:
                    c7:63:7e:39:3c:8f:30:ea:65:10:39:1e:4b:94:41:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:85:C2:0F:74:A5:02:0D:0C:9E:B5:12:5B:20:FC:42:DA:CC:94
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QGmFwg90pQINDJ61Elsg_ELazJQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.98.144.0/21
                  37.252.24.0/21
                  77.107.64.0/18
                  79.99.72.0/21
                  80.240.80.0/20
                  82.163.0.0/19
                  85.159.128.0/21
                  89.31.232.0/21
                  89.213.0.0/21
                  89.213.40.0-89.213.255.255
                  185.20.32.0/22
                  185.24.84.0/22
                  185.49.124.0/22
                  194.105.64.0/19
                  195.128.138.0/24
                  212.38.64.0/19
                  213.130.128.0/19
                  213.210.0.0/18
                  213.218.208.0-213.218.255.255
                  217.144.144.0/20
                  217.145.64.0/20
                IPv6:
                  2001:1a90::/32
                  2a00:c60::/32
                  2a02:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:0f:e9:94:00:18:51:48:c9:6f:25:8d:8f:24:d4:93:5c:
         ad:3b:d6:6f:75:c6:57:0e:f1:51:92:bf:90:3e:56:96:3e:57:
         3f:6d:e2:25:11:9a:9e:28:3c:e7:6f:90:7b:2a:10:9d:ea:7c:
         83:34:a5:4f:06:13:3b:39:6a:78:2c:61:c3:9e:91:0b:85:c4:
         43:3e:fb:1e:08:84:71:b2:32:8d:95:32:2b:22:8a:da:16:58:
         75:6e:b4:9a:b2:07:3e:9f:4e:f4:fa:4f:fd:af:99:fc:5d:a0:
         e7:a9:87:6f:b7:9a:6d:12:49:4e:5b:4a:34:43:53:ae:1b:cc:
         86:22:92:c3:64:ae:93:b3:9a:06:fb:0b:4f:97:25:02:8f:01:
         01:eb:17:b6:e9:35:73:40:03:8e:7e:f9:27:ee:11:52:29:3e:
         2f:e0:4a:69:89:a4:16:30:35:cf:25:a9:f2:64:d1:48:72:b5:
         46:da:6b:40:5b:bb:5f:37:a0:55:5f:b5:1b:32:e0:2d:10:21:
         c1:79:35:0c:0b:d1:a1:bb:52:66:30:c5:b0:b4:56:36:43:26:
         9e:83:c7:06:04:3c:08:14:14:79:36:9a:b3:49:e9:98:14:fa:
         ac:cc:c6:bc:ef:bc:31:53:bd:65:ab:5a:4b:dd:b8:e5:13:64:
         aa:fe:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org