Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa
File:                     cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa (raw, json)
Hash identifier:          KbRgi/hfjAPmDyogzseNhJaQ6Ww5vMdOrA2wkh5K/pk=
Subject key identifier:   70:6D:97:FE:D2:51:86:2E:AA:5F:43:C9:2B:78:76:94:7F:A0:A5:49
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018E51071FAA2F3DBBFFC0DAFA975549A53A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa
Signing time:             Mon 18 Mar 2024 10:06:45 +0000
ROA not before:           Mon 18 Mar 2024 10:06:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        81.168.126.0/24 maxlen: 24
                          82.152.176.0/23 maxlen: 23
                          82.153.136.0/22 maxlen: 22
                          89.213.148.0/22 maxlen: 24
                          89.213.150.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.165.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          109.176.245.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 14:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:51:07:1f:aa:2f:3d:bb:ff:c0:da:fa:97:55:49:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Mar 18 10:06:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=706d97fed251862eaa5f43c92b7876947fa0a549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:14:63:8f:5b:e7:8f:40:41:4f:b4:6d:3f:f0:
                    18:67:60:92:98:73:2b:c7:cc:2e:dd:2d:b4:20:3e:
                    a1:93:fe:52:c0:33:74:be:19:c5:1d:ae:71:19:b1:
                    2d:57:21:ad:ab:bd:bd:77:13:8c:ba:67:fa:a2:d8:
                    c6:0d:71:61:5e:5e:81:ab:2e:fa:d9:be:be:6e:65:
                    2c:a6:55:42:b3:30:f9:44:85:07:e2:e9:0a:bf:dc:
                    9d:b6:5c:59:6b:86:3d:35:0c:18:90:15:06:c7:78:
                    ae:a2:6d:78:1d:21:ef:20:81:a6:c9:87:fd:b5:91:
                    63:6e:ae:65:11:b8:63:90:a0:08:93:84:e9:e9:c1:
                    c8:fe:30:42:a4:71:6d:76:a3:40:fa:da:4d:4b:40:
                    0d:b0:f7:2d:b9:da:50:b9:9b:db:26:72:a0:b9:da:
                    ea:c2:f1:d0:b2:a6:9d:2e:cc:8b:13:a1:fb:07:ce:
                    3c:92:f8:0d:ff:b6:e8:f4:60:0c:04:2e:2c:9b:66:
                    02:90:7c:3e:7c:1d:f8:fd:d5:87:2e:f3:28:3c:1b:
                    de:6f:c0:d7:95:69:9d:98:e4:4f:66:bc:92:f2:48:
                    53:bd:fc:11:b3:4b:fd:8f:2e:22:41:73:ba:c7:17:
                    3d:da:83:18:e7:91:d9:5b:c6:49:c8:5f:a4:e0:45:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:97:FE:D2:51:86:2E:AA:5F:43:C9:2B:78:76:94:7F:A0:A5:49
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cG2X_tJRhi6qX0PJK3h2lH-gpUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.126.0/24
                  82.152.176.0/23
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.165.0/24
                  89.213.172.0/22
                  89.213.180.0/24
                  109.176.245.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:73:3e:e9:46:55:ad:fb:cf:41:43:b9:7c:5b:64:2d:25:01:
         5d:e6:55:61:ce:d5:b9:31:3b:5c:45:1a:e2:b0:bf:3d:eb:c0:
         c1:93:04:fd:4d:d7:04:85:11:73:15:b0:21:81:15:44:04:c0:
         d6:bc:6b:db:28:bc:bc:8a:94:99:e2:6b:90:a2:8f:73:00:bb:
         93:6d:5b:c4:1a:da:ce:a1:64:05:8c:3d:c7:17:b5:7e:22:bb:
         b1:45:84:49:70:a1:23:02:59:3d:3a:47:a8:b1:95:1b:89:1c:
         14:1a:3d:2e:10:5f:6a:8d:7e:b4:88:09:55:ea:4f:95:41:18:
         64:cd:bb:3b:18:13:17:93:4c:6d:f9:98:4c:30:7f:e4:89:9a:
         e3:f4:3d:62:58:9a:17:b6:1e:10:a7:74:48:52:e1:04:e5:e9:
         1e:6e:0a:18:d4:0e:07:fe:6d:aa:e0:7f:07:72:16:ee:e7:3b:
         c8:ea:d8:dc:bb:3f:9b:00:85:9b:04:98:13:5f:d7:cd:1f:71:
         cb:c2:0f:06:53:d0:b5:39:d6:57:1f:35:ec:ec:00:22:aa:3d:
         76:5e:81:d4:cd:87:0d:ee:89:90:6e:2d:8f:e1:24:a0:b9:e4:
         32:10:da:a7:4b:94:9d:4c:3c:a5:62:bd:0f:cd:08:25:03:d5:
         07:8f:1b:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org