Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bySs-hDbGCV-im1TrBSKmukmfaE.roa
File:                     bySs-hDbGCV-im1TrBSKmukmfaE.roa (raw, json)
Hash identifier:          cKCc94i6CFB5qRtMI6neHuwXInoBXmNa9u845cXPuR8=
Subject key identifier:   6F:24:AC:FA:10:DB:18:25:7E:8A:6D:53:AC:14:8A:9A:E9:26:7D:A1
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018D3AEB8BED77F3A10E9B6111F70EAB1115
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bySs-hDbGCV-im1TrBSKmukmfaE.roa
Signing time:             Wed 24 Jan 2024 10:02:11 +0000
ROA not before:           Wed 24 Jan 2024 10:02:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        81.168.119.0/24 maxlen: 24
                          82.153.1.0/24 maxlen: 24
                          82.153.50.0/24 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.165.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.173.0/24 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jan 2024 13:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3a:eb:8b:ed:77:f3:a1:0e:9b:61:11:f7:0e:ab:11:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan 24 10:02:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6f24acfa10db18257e8a6d53ac148a9ae9267da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:23:36:c9:45:d9:e0:40:89:b5:f0:de:2c:28:
                    f4:56:e5:b0:c3:02:cb:4c:79:79:5c:ce:52:ed:38:
                    38:47:1e:4e:79:83:0c:32:ee:fd:2e:de:77:6d:ad:
                    bb:2c:c3:51:9e:90:b7:66:1a:f5:c3:6c:88:f6:35:
                    eb:36:4a:bb:9c:34:c3:a8:1b:1e:ae:a2:19:53:dd:
                    60:46:3e:ca:44:4d:44:e7:be:a0:9f:99:84:21:d4:
                    15:33:24:af:bc:26:6d:94:41:e8:19:13:de:d6:d4:
                    4f:55:3a:78:e1:eb:85:d5:4c:81:68:3e:6f:62:7b:
                    72:64:7b:e6:2a:46:38:5d:e6:7a:9a:f3:1d:4d:ec:
                    d0:f4:53:d0:fd:7d:39:46:52:00:ef:8d:58:8c:34:
                    9e:20:b8:04:35:b0:b8:b5:d0:59:bf:c2:bb:e0:4d:
                    15:ad:91:30:b7:e1:64:70:81:29:ee:24:1f:22:18:
                    67:1e:a4:48:43:29:cc:96:ef:49:60:23:c3:e9:29:
                    59:f2:ed:79:f6:cf:ac:11:4c:f1:0e:13:7b:32:db:
                    1e:13:84:18:bd:3d:88:8c:24:36:75:d4:04:cb:33:
                    4c:83:ea:2a:3d:db:e7:c9:0a:0c:cb:fc:5f:52:ab:
                    10:62:dc:be:51:a1:6c:5c:74:50:bc:28:56:f4:4b:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:AC:FA:10:DB:18:25:7E:8A:6D:53:AC:14:8A:9A:E9:26:7D:A1
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bySs-hDbGCV-im1TrBSKmukmfaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  82.153.1.0/24
                  82.153.50.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.165.0/24
                  89.213.172.0/22
                  89.213.180.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:57:06:70:58:ee:65:76:55:10:df:00:48:8d:11:95:15:
         9e:6c:8a:3c:c0:4f:d8:35:f9:12:5d:84:4b:74:46:73:41:66:
         67:cb:b6:a0:a1:cc:cd:e7:d7:b8:04:06:5f:2f:83:29:d2:5e:
         ee:f1:86:87:b0:67:4c:02:c8:18:a8:5b:98:83:c2:f6:5c:d4:
         84:ca:e5:60:b2:bf:e0:ef:61:45:85:aa:32:58:73:9f:9b:cc:
         08:c1:59:76:f7:5f:30:74:90:02:08:14:71:58:53:46:48:f5:
         d2:13:bb:62:6e:fa:c5:fb:6a:06:79:d5:7b:d9:19:c0:3c:ed:
         1a:fd:ab:a2:2c:92:4c:b1:62:43:2e:d3:23:9b:b5:60:4f:d6:
         7c:54:27:b2:de:5d:d3:9d:f9:ae:4e:ff:1d:41:9a:e4:21:42:
         5d:10:4b:8c:e6:11:8a:4e:74:f6:ed:58:f1:1a:96:78:03:ad:
         f3:5f:ae:ea:a8:37:54:9a:83:89:63:21:07:69:20:fb:4a:ce:
         ac:12:d9:f6:6d:0a:f8:6e:92:c0:a9:fe:31:1f:12:b7:44:4b:
         fa:df:f3:d1:45:09:ce:3e:61:b3:4c:6d:7a:52:2e:39:be:0a:
         a5:23:e5:78:4d:a7:36:c0:1a:5e:d7:6e:6e:4f:21:f6:01:f0:
         24:c0:5c:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org