Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zb1f3V2aDMBNieI7O3hFcHv-4X8.roa
File:                     Zb1f3V2aDMBNieI7O3hFcHv-4X8.roa (raw, json)
Hash identifier:          nKyBW+TStsAftqQZ+Z1xCZc8oVWKoR4/FJRnRes9wAA=
Subject key identifier:   65:BD:5F:DD:5D:9A:0C:C0:4D:89:E2:3B:3B:78:45:70:7B:FE:E1:7F
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F94E7691EC42CA658EE374F67DCC5F2F1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zb1f3V2aDMBNieI7O3hFcHv-4X8.roa
Signing time:             Mon 20 May 2024 07:29:04 +0000
ROA not before:           Mon 20 May 2024 07:29:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.152.176.0/23 maxlen: 23
                          82.152.176.0/24 maxlen: 24
                          82.153.50.0/24 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          89.213.98.0/24 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.196.0/22 maxlen: 24
                          89.213.200.0/22 maxlen: 24
                          89.213.204.0/22 maxlen: 24
                          89.213.228.0/22 maxlen: 24
                          89.213.232.0/22 maxlen: 24
                          89.213.236.0/22 maxlen: 24
                          109.176.16.0/21 maxlen: 24
                          109.176.250.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          194.105.80.0/20 maxlen: 20
                          213.130.130.0/24 maxlen: 24
                          213.130.149.0/24 maxlen: 24
                          213.218.210.0/24 maxlen: 24
                          213.218.211.0/24 maxlen: 24
                          213.218.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 May 2024 10:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:e7:69:1e:c4:2c:a6:58:ee:37:4f:67:dc:c5:f2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May 20 07:29:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=65bd5fdd5d9a0cc04d89e23b3b7845707bfee17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:18:31:cd:ff:58:b8:cf:dc:23:c3:08:44:
                    9d:01:c0:95:de:e0:fa:4b:39:8d:f4:85:f8:ce:49:
                    e9:f8:35:f8:84:0f:f6:9a:24:ef:62:45:01:9a:02:
                    08:8b:a1:47:6c:b2:a9:7a:10:e6:e9:aa:a0:69:7d:
                    7f:19:eb:45:0c:52:2d:7a:61:ab:5a:ce:83:9b:ee:
                    78:5d:83:ee:93:5e:2f:8a:c1:88:1e:ea:85:a1:67:
                    3d:3c:b5:69:d5:84:74:7b:0d:94:7d:a5:d3:6f:31:
                    ea:4f:87:d1:ec:d3:32:84:f1:d2:77:5d:a0:05:cb:
                    0e:b6:dd:19:77:d2:b0:63:62:92:89:21:46:7c:7d:
                    36:11:40:07:b8:32:86:0c:00:bf:17:26:24:b9:05:
                    96:8e:e2:07:bc:42:b0:6d:ae:ce:88:41:5d:6d:e0:
                    06:1a:62:68:0d:42:9d:e0:2c:8f:91:d2:be:eb:fa:
                    e4:ab:be:d6:f9:ee:5e:53:2d:eb:45:46:fc:ee:64:
                    59:8f:89:e1:cf:c1:08:5a:fb:2d:f6:16:99:ee:cf:
                    c9:db:9b:ca:1f:8c:4d:4c:69:18:a7:e5:05:f8:d7:
                    ec:83:a7:3f:30:9f:74:2e:73:a2:b8:1c:03:9d:7c:
                    fc:a9:34:95:28:a9:f1:a3:64:79:fa:14:53:5a:01:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:5F:DD:5D:9A:0C:C0:4D:89:E2:3B:3B:78:45:70:7B:FE:E1:7F
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Zb1f3V2aDMBNieI7O3hFcHv-4X8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.176.0/23
                  82.153.50.0/24
                  82.153.136.0/22
                  89.213.98.0/24
                  89.213.148.0-89.213.159.255
                  89.213.172.0/22
                  89.213.196.0-89.213.207.255
                  89.213.228.0-89.213.239.255
                  109.176.16.0/21
                  109.176.250.0/24
                  185.49.126.0/23
                  194.105.80.0/20
                  213.130.130.0/24
                  213.130.149.0/24
                  213.218.210.0/23
                  213.218.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:44:ca:11:a1:1f:1b:98:a8:37:87:d1:a5:00:60:c8:ec:f7:
         59:46:ad:6a:ad:bc:96:8e:b3:52:2a:e8:87:28:b7:74:f5:34:
         57:7c:4a:62:91:18:09:df:12:6f:ae:db:2b:b0:43:f6:df:fc:
         90:84:3c:ea:8c:9b:bd:84:ff:60:94:86:bc:90:c1:84:e0:64:
         d5:37:9e:ae:17:ce:73:0d:30:12:46:54:7f:a9:99:a6:30:94:
         0f:63:3b:72:ef:60:de:bb:d8:19:bc:14:f0:b9:b9:d2:a6:80:
         96:51:f6:28:a5:92:e4:ca:8d:83:cf:c7:d9:fb:d7:cb:c2:9e:
         88:52:92:42:33:3e:cb:f1:b7:9d:e5:ad:e5:80:5d:21:35:ae:
         35:b3:b8:53:37:41:73:63:2b:2a:ee:e2:95:35:43:84:1e:c1:
         4a:a0:29:64:c3:4a:dd:fb:f9:4f:04:f8:86:81:79:34:2c:94:
         6b:1f:b3:9f:7b:61:2a:3e:f9:24:15:8e:84:78:19:3b:6c:a5:
         84:af:d2:56:45:bb:21:96:40:1d:c2:43:96:eb:7f:ac:ed:9a:
         5b:c8:96:e1:32:15:74:b4:64:68:4a:d8:e3:65:5c:56:ab:6e:
         aa:20:82:c7:86:c9:1a:91:bd:9d:0c:42:db:e0:ec:a7:0b:7c:
         8a:40:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org