Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_H1kP_0kkTxbSpCVNPGr92_UDho.roa
File:                     _H1kP_0kkTxbSpCVNPGr92_UDho.roa (raw, json)
Hash identifier:          090mYM8tBv4lU85o/FRdIyhY0YAhUPVgEmoBJFs/Ri4=
Subject key identifier:   FC:7D:64:3F:FD:24:91:3C:5B:4A:90:95:34:F1:AB:F7:6F:D4:0E:1A
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B5B8357F7E1C735676F3B7B05F9DA2954
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_H1kP_0kkTxbSpCVNPGr92_UDho.roa
Signing time:             Mon 23 Oct 2023 07:50:16 +0000
ROA not before:           Mon 23 Oct 2023 07:50:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        89.213.176.0/22 maxlen: 24
                          89.213.180.0/22 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          82.152.108.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          109.176.248.0/24 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 16:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:83:57:f7:e1:c7:35:67:6f:3b:7b:05:f9:da:29:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 23 07:50:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc7d643ffd24913c5b4a909534f1abf76fd40e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:a5:ef:bd:a6:93:52:5b:2c:0b:cf:7c:3f:
                    22:36:84:be:0b:d4:bc:c0:1c:4d:2a:d0:dd:6b:00:
                    42:22:0b:ed:57:48:5d:41:ab:98:bb:1f:52:59:38:
                    c1:72:59:da:43:80:66:7d:a7:89:40:5c:d8:0d:0b:
                    2f:e2:ec:ce:e1:c1:2d:cb:d1:70:05:7c:f8:0c:f8:
                    fc:3a:8a:8f:17:e1:55:29:a5:29:72:74:73:c9:71:
                    4a:9c:ba:23:97:e8:ba:5b:4b:1a:72:08:8c:0f:81:
                    d4:a4:ca:e1:34:05:64:23:d4:6f:af:a6:9a:22:b3:
                    fc:98:e6:9c:70:8f:3e:25:90:5a:35:13:ff:28:d7:
                    9d:5a:55:1e:41:b5:7e:ab:65:fc:8e:2e:0b:73:f8:
                    67:4e:40:5b:00:1c:cc:6e:a2:32:db:4b:3a:79:c9:
                    46:d1:e9:25:f1:54:b6:4d:3d:26:67:a9:e0:8f:26:
                    c6:2e:a1:1c:e8:97:a2:4f:71:50:c0:64:28:01:31:
                    15:3c:6d:99:39:89:c0:97:fd:88:43:d5:f6:55:b7:
                    87:73:6e:5c:ef:b7:59:f6:60:fd:13:0e:01:3b:3e:
                    db:d2:3e:a4:f1:71:fb:13:7f:a3:dc:c7:8a:25:8a:
                    2e:e3:a8:1a:6a:b0:5d:b2:84:be:08:f8:fc:e5:c0:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7D:64:3F:FD:24:91:3C:5B:4A:90:95:34:F1:AB:F7:6F:D4:0E:1A
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_H1kP_0kkTxbSpCVNPGr92_UDho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.152.108.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.176.0/21
                  109.176.248.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:7a:6e:98:c6:4b:62:28:27:ef:94:ae:63:bb:8e:b2:86:
         46:d4:c2:d9:0d:91:53:0b:fd:66:75:e3:b1:cf:d9:37:1c:23:
         c9:b3:12:4d:a0:e4:95:18:2c:ef:40:34:78:6c:30:fe:71:a2:
         44:d5:e9:08:f9:ec:c4:3b:f4:18:ef:fb:7a:40:cc:5f:85:b8:
         06:3e:2e:4a:04:89:c6:1d:20:1a:54:3c:8c:fa:ea:5c:da:d4:
         ec:f8:cb:9f:cd:3e:8f:ac:05:44:a6:6e:bf:31:18:8b:b1:3c:
         db:37:c7:d2:9a:58:52:cd:7f:0d:8c:c7:f3:75:ec:e4:67:e3:
         0e:56:77:bc:3b:9c:40:94:51:c0:5f:fa:42:69:93:1d:42:8c:
         15:a3:5c:6f:1f:29:0d:b1:cb:c6:3e:cc:69:be:f2:b3:9b:7a:
         e5:2d:40:61:a1:b6:7a:1b:a0:f1:1a:a5:a4:59:dc:12:20:99:
         61:83:1c:71:6c:d8:45:f3:9f:b9:34:09:11:44:b3:97:7b:21:
         04:b4:f3:4d:7b:74:c8:e8:f0:19:e4:97:86:1d:89:d1:58:b6:
         f0:97:23:08:64:6f:0d:5c:df:cd:68:8d:17:02:8c:0d:36:96:
         d4:f1:6d:70:76:03:a5:cf:1a:94:c9:40:c9:1f:21:1c:63:a0:
         4d:63:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org