Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SENUI62n0XYlIgScx3eB1CZQ8u8.roa
File:                     SENUI62n0XYlIgScx3eB1CZQ8u8.roa (raw, json)
Hash identifier:          jpOuYr5f792bVwlbNVwd2sHd51DDqluY/vDdQTTw6KA=
Subject key identifier:   48:43:54:23:AD:A7:D1:76:25:22:04:9C:C7:77:81:D4:26:50:F2:EF
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018BDC73FD5C21A1A1B591068612530D2DF0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SENUI62n0XYlIgScx3eB1CZQ8u8.roa
Signing time:             Fri 17 Nov 2023 08:44:30 +0000
ROA not before:           Fri 17 Nov 2023 08:44:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        82.153.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:73:fd:5c:21:a1:a1:b5:91:06:86:12:53:0d:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 17 08:44:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48435423ada7d1762522049cc77781d42650f2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:6c:6f:e3:10:6d:f1:38:e9:8d:0b:ec:47:
                    d4:09:07:e4:2d:18:81:89:ea:59:5e:0d:1d:64:ba:
                    c3:f1:b5:5b:22:a6:87:67:db:0f:56:b6:c1:37:0d:
                    df:4e:d2:6c:d8:2e:b1:de:9e:53:17:84:c8:e1:91:
                    ca:7f:db:93:a8:48:b1:d4:d8:60:d6:00:0a:11:78:
                    61:49:d4:d8:fa:7c:a6:e1:ed:ab:d9:5f:73:2d:7c:
                    cb:a1:10:98:d9:13:c6:6a:96:a4:8e:6f:ef:4a:87:
                    f2:76:66:5c:95:51:cf:5b:16:fc:18:a2:70:f6:b3:
                    05:95:0c:da:b8:e2:b4:c9:56:47:5e:1b:2d:e5:e7:
                    72:19:ee:5d:e5:60:c8:b9:cf:39:59:bc:c0:94:b0:
                    11:2f:26:f2:11:ad:57:2b:a4:31:02:cc:7e:a0:f8:
                    cc:76:84:b3:12:bd:b8:e0:35:55:c0:62:0a:74:cd:
                    28:60:4b:54:90:8c:4d:43:bd:d3:2c:89:00:06:4d:
                    90:a0:a4:68:ec:df:33:0f:a1:f9:c7:4f:00:3c:39:
                    a0:f5:5a:e5:dd:05:fd:04:48:32:36:e1:58:5f:7b:
                    33:9c:b5:ae:0a:09:79:62:5c:55:4e:7e:0b:35:29:
                    25:c5:99:f1:62:4c:5d:9e:ab:02:49:7e:e6:20:48:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:43:54:23:AD:A7:D1:76:25:22:04:9C:C7:77:81:D4:26:50:F2:EF
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SENUI62n0XYlIgScx3eB1CZQ8u8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:2c:f3:2f:46:3d:d1:76:d2:1a:ee:31:bd:dc:b3:6f:26:
         67:28:99:26:f1:37:49:ab:7d:9b:63:10:61:69:b1:d9:7c:47:
         71:32:e8:cd:89:7d:8d:3e:f5:f8:1b:20:ee:b3:05:0e:78:7c:
         3f:4f:29:fb:49:59:51:63:e1:23:e6:67:88:05:93:0a:3c:1f:
         7b:42:ea:40:59:3b:71:77:71:fd:b7:28:fa:5a:2e:7c:e0:d9:
         86:ae:9e:c2:1e:6b:67:16:3a:e8:df:94:9e:9a:c7:90:32:97:
         20:0f:f3:7f:3c:c6:01:5c:cb:db:e8:24:b2:c7:43:e0:f0:18:
         21:9b:1f:ab:2c:84:80:d3:60:53:4d:8a:d5:91:e7:76:78:75:
         0a:4b:64:f7:21:19:15:b6:7f:9f:99:a9:aa:ac:75:b6:72:4d:
         97:85:e3:cc:f3:a4:01:62:5c:ee:46:6f:0c:0a:2f:22:d6:e3:
         09:e2:7b:ce:69:20:bd:93:1c:c1:f6:c6:3b:79:2d:10:7a:79:
         9f:c4:ac:7e:50:ff:78:79:65:4d:1f:09:6e:50:65:36:64:36:
         fa:b6:68:8e:4a:67:7c:3b:1d:0a:99:dc:d1:b9:88:d4:76:f0:
         9f:46:6b:d0:a5:3a:0b:f8:fb:27:d0:6f:0f:43:d3:a2:41:4f:
         60:d2:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org