Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b1dtQvk-f7bOnxg6C5ug_shuno8.roa
File:                     b1dtQvk-f7bOnxg6C5ug_shuno8.roa (raw, json)
Hash identifier:          Tg7LyJBL9GedXPTJgKF/lKMKXdwe7sBCOK70mwM1lds=
Subject key identifier:   6F:57:6D:42:F9:3E:7F:B6:CE:9F:18:3A:0B:9B:A0:FE:C8:6E:9E:8F
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01867EAF847E5A9EF02C1C38529D4585E951
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b1dtQvk-f7bOnxg6C5ug_shuno8.roa
Signing time:             Thu 23 Feb 2023 14:31:17 +0000
ROA not before:           Thu 23 Feb 2023 14:31:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        82.153.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 Mar 2023 09:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7e:af:84:7e:5a:9e:f0:2c:1c:38:52:9d:45:85:e9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Feb 23 14:31:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f576d42f93e7fb6ce9f183a0b9ba0fec86e9e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:79:01:5b:4b:2f:2c:10:43:f7:4d:75:1f:
                    98:e2:36:6c:b3:15:4c:cf:56:0f:3f:0b:32:89:e7:
                    a8:a6:74:de:86:2c:f7:c1:2f:ca:f4:10:1e:17:62:
                    cc:cd:f9:6a:e7:c7:a6:58:78:32:46:af:b9:50:d8:
                    9b:c0:6d:8b:55:c0:2d:c1:5d:6a:ad:b5:65:c3:da:
                    1c:bd:cc:53:7d:83:2b:d4:ba:91:70:73:53:3f:6e:
                    62:6a:56:37:c4:0e:7e:ac:a0:7d:79:39:5a:47:aa:
                    d6:44:98:64:a6:27:8e:45:0d:4b:f8:ba:96:7f:92:
                    08:7c:ea:7e:30:37:42:58:9f:63:5d:ba:2a:76:a8:
                    6a:b3:ee:1c:26:de:87:7f:c6:97:d7:2b:3b:0d:ea:
                    7d:70:1f:15:bc:1c:37:11:5f:5e:f3:a4:9d:b1:ae:
                    46:0b:ec:8c:31:7a:d9:7b:f2:fa:ce:99:b3:c3:5e:
                    3d:b8:93:e5:f7:7c:4e:d3:8a:9e:13:93:2e:25:de:
                    be:83:2e:56:0e:eb:3e:54:68:47:3a:45:7e:5b:21:
                    17:8d:b7:65:ed:8c:56:c4:87:b7:ce:8a:bc:e4:b2:
                    43:9f:cb:74:d6:04:30:72:40:8a:c3:f1:c9:03:66:
                    cd:51:e8:bc:e3:d1:14:a2:95:2e:4a:2c:f4:be:4b:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:6D:42:F9:3E:7F:B6:CE:9F:18:3A:0B:9B:A0:FE:C8:6E:9E:8F
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b1dtQvk-f7bOnxg6C5ug_shuno8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:f6:13:a1:ad:2a:e8:9a:d9:5d:30:c0:57:d6:c7:81:4c:
         47:1a:fd:a9:6c:fb:a6:6b:85:b2:7c:ed:5b:67:c5:5f:06:08:
         c6:a0:58:2c:e0:ca:be:84:9d:f7:89:f7:e1:0b:45:3d:94:69:
         7a:2a:dc:a0:01:da:bf:56:ec:b7:82:14:3b:8a:9c:05:b7:c6:
         99:62:8a:a7:24:21:07:c5:b7:14:09:e0:8b:b1:f2:75:2b:56:
         15:b7:fc:b9:8d:96:d4:68:0a:fc:d3:98:34:a2:da:2c:45:3e:
         88:59:3a:52:77:f4:b4:8b:c8:b7:de:4b:10:0d:57:bc:82:e8:
         04:42:76:37:28:c3:ca:3f:1d:ec:a3:7d:e6:7a:8b:0a:e7:59:
         39:85:b2:c3:86:87:46:06:9a:dd:bf:82:12:de:10:19:6a:07:
         f5:94:e0:38:2c:84:84:44:bc:c2:be:16:77:a9:8b:1a:28:b9:
         53:f1:41:9c:4e:d6:6b:4d:0c:c2:14:da:c8:4f:4f:5d:45:86:
         dd:41:56:3e:bf:38:71:1f:84:8f:ef:8a:26:2f:40:3b:42:cb:
         67:1f:62:6d:91:07:97:48:dc:81:95:07:1b:df:c9:41:9b:88:
         0a:c2:15:b8:23:74:90:87:cd:57:36:1d:79:8e:0c:82:a1:57:
         64:a9:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org