Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuZWz7-gPBIVREivrPl3GspzrpU.roa
File:                     UuZWz7-gPBIVREivrPl3GspzrpU.roa (raw, json)
Hash identifier:          PelwhRw7mtTwLRu99xIJcqy+WHqICRwP0p4HOXe7Hxs=
Subject key identifier:   52:E6:56:CF:BF:A0:3C:12:15:44:48:AF:AC:F9:77:1A:CA:73:AE:95
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01894A7AD80487B0A6946FD472752AC7030B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuZWz7-gPBIVREivrPl3GspzrpU.roa
Signing time:             Wed 12 Jul 2023 14:21:51 +0000
ROA not before:           Wed 12 Jul 2023 14:21:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        82.153.136.0/22 maxlen: 22
                          82.152.108.0/24 maxlen: 24
                          82.152.111.0/24 maxlen: 24
                          82.153.73.0/24 maxlen: 24
                          82.153.78.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          109.176.253.0/24 maxlen: 24
                          82.153.242.0/24 maxlen: 24
                          82.153.246.0/24 maxlen: 24
                          82.153.248.0/24 maxlen: 24
                          82.153.249.0/24 maxlen: 24
                          82.152.253.0/24 maxlen: 24
                          82.152.252.0/24 maxlen: 24
                          81.5.156.0/24 maxlen: 24
                          82.153.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 15:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4a:7a:d8:04:87:b0:a6:94:6f:d4:72:75:2a:c7:03:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jul 12 14:21:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52e656cfbfa03c12154448afacf9771aca73ae95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:26:d3:dc:61:a3:21:84:d8:25:8f:95:71:
                    c6:b1:11:91:3c:65:c8:76:fc:9e:7b:fc:7d:a8:68:
                    a1:53:70:04:a3:7e:48:f9:38:52:34:13:06:c0:a5:
                    50:b9:36:37:0b:83:6c:83:48:d7:f4:69:ef:3f:51:
                    9b:1e:95:04:c1:e3:cf:9f:8e:f3:f2:03:19:97:38:
                    bb:46:e5:c1:72:59:a6:54:65:17:0c:34:0f:2d:59:
                    e8:e0:c4:d1:fa:67:67:9d:39:fe:62:33:b8:58:fe:
                    8a:af:fa:eb:06:5e:ff:8e:29:46:cd:a2:6d:b8:c8:
                    46:4f:a0:a8:42:13:ff:6c:00:ce:b2:bf:a1:fa:0a:
                    a8:e2:31:ec:a1:dd:4a:4c:26:20:ad:6c:ed:1f:c8:
                    71:f1:3e:7c:ec:74:e0:f9:34:2c:4f:de:8c:b3:cc:
                    84:4e:00:af:3b:32:86:15:4a:a3:94:07:2b:12:3b:
                    42:40:57:d7:4d:d6:4b:7c:ef:e1:a1:18:52:2d:ec:
                    56:75:9e:06:0e:1f:87:af:20:22:41:ef:f4:4e:ca:
                    2a:f2:ed:36:af:6f:64:d6:bb:e0:18:25:cd:63:c1:
                    e6:8f:f6:40:49:58:c9:83:1d:57:9b:53:f5:37:59:
                    51:4a:e8:32:67:37:b1:2b:c2:a3:1c:95:a1:fd:63:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:56:CF:BF:A0:3C:12:15:44:48:AF:AC:F9:77:1A:CA:73:AE:95
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuZWz7-gPBIVREivrPl3GspzrpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.5.156.0/24
                  81.168.119.0/24
                  81.168.123.0/24
                  82.152.108.0/24
                  82.152.111.0/24
                  82.152.252.0/23
                  82.153.73.0/24
                  82.153.78.0/24
                  82.153.136.0/22
                  82.153.223.0/24
                  82.153.242.0/24
                  82.153.246.0/24
                  82.153.248.0/23
                  109.176.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:f4:19:5e:f7:ed:87:67:3d:58:47:40:ae:4a:ac:9b:cd:
         f4:07:0c:35:f3:34:ff:0b:ab:c4:d5:1d:0f:f3:42:dd:f4:83:
         47:e8:95:75:d5:bc:ef:58:5b:4d:8c:ba:ae:15:84:a4:38:fa:
         98:88:7c:c2:d8:b8:e7:82:14:e0:1f:35:87:0b:c3:bd:9c:ae:
         ba:18:70:85:1f:d5:20:0d:74:4d:64:55:5c:8f:2b:4b:3f:78:
         79:8f:77:84:7b:78:df:8f:c9:56:6f:92:6c:c0:aa:c4:33:7d:
         f4:65:35:30:a5:fa:4e:30:dd:ad:8a:82:7d:3b:0b:2e:56:1b:
         af:b1:bd:15:0f:68:f0:6f:77:64:21:07:d4:89:0b:11:f8:e6:
         d5:db:63:12:22:ec:39:70:1b:e5:bb:b0:2c:ca:be:b8:e2:ed:
         cc:e4:cb:50:cc:98:f0:83:c7:f0:e1:83:71:d5:74:47:2f:91:
         fe:33:ac:10:92:8e:f0:ac:6d:62:7f:82:46:37:53:a1:fb:db:
         05:2d:09:98:58:b9:60:a3:5a:07:f3:2e:a8:03:b4:57:26:7d:
         a8:db:f5:a9:de:2d:60:c0:7f:f8:45:92:90:e5:10:c4:32:70:
         94:5c:4b:2c:c3:58:a3:2e:72:1c:36:b4:a6:33:7e:fc:0f:e4:
         e3:22:aa:7e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYlKetgEh7CmlG/UcnUqxwMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNzEyMTQyMTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmU2NTZjZmJmYTAzYzEyMTU0NDQ4YWZhY2Y5NzcxYWNhNzNhZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIAm09xhoyGE2CWPlXHGsRGRPGXI
dvyee/x9qGihU3AEo35I+ThSNBMGwKVQuTY3C4Nsg0jX9GnvP1GbHpUEwePPn47z
8gMZlzi7RuXBclmmVGUXDDQPLVno4MTR+mdnnTn+YjO4WP6Kr/rrBl7/jilGzaJt
uMhGT6CoQhP/bADOsr+h+gqo4jHsod1KTCYgrWztH8hx8T587HTg+TQsT96Ms8yE
TgCvOzKGFUqjlAcrEjtCQFfXTdZLfO/hoRhSLexWdZ4GDh+HryAiQe/0Tsoq8u02
r29k1rvgGCXNY8Hmj/ZASVjJgx1Xm1P1N1lRSugyZzexK8KjHJWh/WMgqQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFFLmVs+/oDwSFURIr6z5dxrKc66VMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvVXVaV3o3LWdQQklWUkVpdnJQbDNHc3B6cnBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAUQWcAwQA
Uah3AwQAUah7AwQAUphsAwQAUphvAwQBUpj8AwQAUplJAwQAUplOAwQCUpmIAwQA
UpnfAwQAUpnyAwQAUpn2AwQBUpn4AwQAbbD9MA0GCSqGSIb3DQEBCwUAA4IBAQAa
XPQZXvfth2c9WEdArkqsm830Bww18zT/C6vE1R0P80Ld9INH6JV11bzvWFtNjLqu
FYSkOPqYiHzC2LjnghTgHzWHC8O9nK66GHCFH9UgDXRNZFVcjytLP3h5j3eEe3jf
j8lWb5JswKrEM330ZTUwpfpOMN2tioJ9OwsuVhuvsb0VD2jwb3dkIQfUiQsR+ObV
22MSIuw5cBvlu7Asyr644u3M5MtQzJjwg8fw4YNx1XRHL5H+M6wQko7wrG1if4JG
N1Oh+9sFLQmYWLlgo1oH8y6oA7RXJn2o2/Wp3i1gwH/4RZKQ5RDEMnCUXEssw1ij
LnIcNrSmM378D+TjIqp+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org