Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa
File:                     Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa (raw, json)
Hash identifier:          atTwiRBS7FDWBIfPXFLJTsoIahF+tHd+OHcnZHMUUGk=
Subject key identifier:   67:43:7B:08:F0:65:A0:36:1C:D6:FD:D3:98:FC:08:A7:AC:D4:7C:61
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F2DFDDE5D0920CC280BC9060482574502
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa
Signing time:             Tue 30 Apr 2024 07:52:43 +0000
ROA not before:           Tue 30 Apr 2024 07:52:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64267
IP address blocks:        80.240.85.0/24 maxlen: 24
                          80.240.87.0/24 maxlen: 24
                          82.163.23.0/24 maxlen: 24
                          89.213.211.0/24 maxlen: 24
                          217.145.69.0/24 maxlen: 24
                          217.145.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 May 2024 12:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:fd:de:5d:09:20:cc:28:0b:c9:06:04:82:57:45:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Apr 30 07:52:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67437b08f065a0361cd6fdd398fc08a7acd47c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:5b:fa:75:9b:9c:ba:02:26:41:45:44:b4:
                    bd:bd:d7:b3:e3:62:b9:9a:f3:40:88:48:9c:2b:c9:
                    e0:6a:0f:9a:94:45:2a:d0:1f:04:21:da:19:a4:e2:
                    fb:0e:59:1a:fa:ed:81:7b:dd:e5:cd:02:69:a2:ff:
                    41:a1:d8:c7:fc:4d:c4:63:4a:b9:76:27:92:fe:b5:
                    c5:0a:b9:ae:c3:f1:cb:4e:b2:cf:9e:d6:b7:0c:f3:
                    09:4e:87:02:fa:5b:fa:91:14:4d:b8:03:e6:d0:6b:
                    5c:3f:67:79:6d:f3:13:da:64:33:06:32:f4:a5:2c:
                    60:c4:32:39:f3:d4:7f:b6:10:3d:a0:8d:50:32:b3:
                    cc:f6:b8:c3:7c:d8:65:01:2b:1c:77:fe:14:1f:5b:
                    d4:7f:a4:95:fc:04:d8:c2:cb:7c:94:46:df:6d:85:
                    9e:ac:98:11:85:9e:c3:d0:ce:bb:2a:30:37:17:26:
                    9a:37:51:0f:0a:59:48:18:35:4a:e6:d9:a5:a7:38:
                    c4:2a:38:da:ee:f0:c0:03:e2:13:a7:8b:1f:26:ee:
                    e5:6e:47:22:ff:5a:dd:4a:18:66:26:09:43:68:44:
                    1b:74:21:4f:6b:d9:20:6f:24:37:28:16:3d:37:e4:
                    e6:55:2d:7d:c9:db:61:58:3f:e2:b2:73:5c:0a:1a:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:7B:08:F0:65:A0:36:1C:D6:FD:D3:98:FC:08:A7:AC:D4:7C:61
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.240.85.0/24
                  80.240.87.0/24
                  82.163.23.0/24
                  89.213.211.0/24
                  217.145.69.0/24
                  217.145.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:52:ca:79:54:77:1c:f8:8b:5d:62:87:eb:44:a2:6f:64:21:
         b7:48:f5:d4:44:09:de:4e:aa:31:17:2f:27:b4:99:ef:0b:bd:
         8c:4c:1f:ac:29:2b:da:44:44:2d:a3:4f:4d:8f:ce:ed:23:4e:
         ef:49:96:5b:80:91:58:a1:24:20:47:94:7f:15:0c:a8:25:69:
         4f:a3:38:41:f7:c8:a4:1c:bf:a2:24:26:6e:79:95:dc:d1:01:
         ec:c0:f1:48:8d:da:a1:e1:a3:a8:48:85:f4:01:75:61:e5:14:
         74:b5:2e:ad:cd:f3:52:26:8a:3d:2d:43:0b:44:56:f2:46:a7:
         2d:1f:df:04:a1:a0:10:91:aa:1d:d3:17:85:80:cc:cc:18:9e:
         81:9b:c4:c6:be:d8:c4:94:f0:ac:d7:a8:bf:08:f7:14:d6:e8:
         e5:58:8c:13:08:26:72:0a:b9:ca:15:b5:36:62:4f:99:dc:e6:
         26:4a:9f:ae:69:07:2b:e2:b7:15:95:ff:64:55:9b:75:f1:aa:
         d3:e9:19:56:74:ad:ca:5c:43:25:70:dc:b0:10:a2:f2:3c:65:
         74:f0:ee:f4:df:4a:53:cc:22:fe:87:9b:e2:eb:8e:a5:7e:72:
         4d:fe:08:9e:89:0d:94:52:eb:9d:23:d3:42:e0:09:bd:07:8b:
         47:15:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org