Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XfKXM-KM1BEs5t7pr6yu84bdXNI.roa
File:                     XfKXM-KM1BEs5t7pr6yu84bdXNI.roa (raw, json)
Hash identifier:          vDxJoYb80GJDUhm14NJL8CZPXEW7hvCEzkQHuuShjns=
Subject key identifier:   5D:F2:97:33:E2:8C:D4:11:2C:E6:DE:E9:AF:AC:AE:F3:86:DD:5C:D2
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018E1E1DEDC8CE645E0497B3F3433C2CC108
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XfKXM-KM1BEs5t7pr6yu84bdXNI.roa
Signing time:             Fri 08 Mar 2024 12:51:01 +0000
ROA not before:           Fri 08 Mar 2024 12:51:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29802
IP address blocks:        82.153.225.0/24 maxlen: 24
                          89.213.43.0/24 maxlen: 24
                          89.213.145.0/24 maxlen: 24
                          89.213.146.0/24 maxlen: 24
                          109.176.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 19:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:1e:1d:ed:c8:ce:64:5e:04:97:b3:f3:43:3c:2c:c1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Mar  8 12:51:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5df29733e28cd4112ce6dee9afacaef386dd5cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:d8:e6:57:1d:85:24:c0:7b:e8:49:08:4c:
                    e2:ed:82:8e:ff:fe:6d:20:9e:97:e2:06:ac:b5:11:
                    02:c8:59:47:c2:24:b6:5a:a1:c6:4b:f0:df:59:37:
                    40:45:10:cc:af:36:4a:4d:4f:37:89:81:3a:78:79:
                    10:9d:6c:5f:0b:0a:5d:fc:1c:3d:e5:50:63:73:35:
                    8d:38:c1:30:f1:c1:36:55:39:68:38:7d:ed:3c:18:
                    be:42:27:75:af:4f:56:01:32:78:d0:73:62:0b:57:
                    b9:22:cb:b8:87:49:44:63:40:17:96:0f:0f:8f:9c:
                    5b:ff:9d:57:74:ff:ed:4d:f2:e7:a7:9c:6f:87:f5:
                    3b:40:20:f0:65:4f:c8:6b:ed:4a:99:d3:da:05:3a:
                    8a:b9:86:30:35:81:5b:72:c1:5d:fe:f4:eb:5a:49:
                    d2:2b:3b:9b:f8:fd:52:9c:eb:1e:e2:49:ae:36:c8:
                    ef:7d:9e:b2:04:2f:ad:54:97:09:b8:2b:98:58:3e:
                    14:bd:86:6e:4c:42:ca:59:b1:65:cc:52:5a:5a:fd:
                    98:9e:36:23:b8:0f:aa:1c:f3:af:97:8e:ac:bc:55:
                    27:e2:3d:9c:0d:e4:e3:40:cf:92:40:e5:e8:c4:e5:
                    3f:74:22:08:b6:44:dd:5e:90:62:31:36:fa:f7:3e:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:97:33:E2:8C:D4:11:2C:E6:DE:E9:AF:AC:AE:F3:86:DD:5C:D2
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XfKXM-KM1BEs5t7pr6yu84bdXNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.225.0/24
                  89.213.43.0/24
                  89.213.145.0-89.213.146.255
                  109.176.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:18:04:b5:ae:55:20:6f:7a:b6:c8:13:2b:65:39:78:b9:
         30:33:6b:b9:3d:93:b5:d9:78:2a:75:e6:0d:f2:71:a1:7e:57:
         36:b4:0a:05:23:80:30:ae:d6:32:7c:51:d9:f9:9e:76:2e:23:
         d7:af:7d:63:16:f8:99:a5:d4:0f:76:6e:6b:f4:57:8b:81:e3:
         55:42:30:4f:49:28:46:8d:bb:92:67:c9:6b:74:3d:cf:50:3e:
         84:c5:1b:40:be:65:5a:77:78:9b:79:04:74:5d:f2:0d:81:98:
         7e:60:2a:46:1c:7b:d1:0d:2a:36:64:10:b7:ab:b7:52:cd:dd:
         e0:d0:1e:f2:44:3c:63:7c:e3:ff:a0:0f:e8:e7:40:a0:a0:0d:
         9f:ec:f2:96:2c:59:69:d2:8c:8b:39:72:9b:4a:13:5d:0c:27:
         a3:b4:7c:03:4d:6e:76:68:a3:16:7b:8a:97:c7:54:83:50:2b:
         bc:76:75:b7:5d:6a:9a:c8:36:e2:c7:10:3a:00:2e:54:58:a1:
         3b:c6:ae:af:56:4f:8f:3e:98:f1:54:86:51:51:32:ae:0e:74:
         77:d8:0f:47:01:d6:7d:41:09:97:1a:bc:ba:a0:f4:15:5c:a6:
         83:37:3a:1f:48:0e:63:29:92:e9:a3:3b:c0:ec:7f:02:9e:81:
         6e:e6:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org