Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/erWAm4DTNCzXLaUsDszPK1fvI2c.roa
File:                     erWAm4DTNCzXLaUsDszPK1fvI2c.roa (raw, json)
Hash identifier:          Glwe3xA9TDP2B19lWfrM26uy4oDuCvyHtpyl5ePD6Ls=
Subject key identifier:   7A:B5:80:9B:80:D3:34:2C:D7:2D:A5:2C:0E:CC:CF:2B:57:EF:23:67
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0188CEFB204443980F8002F791AB1F6D0481
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/erWAm4DTNCzXLaUsDszPK1fvI2c.roa
Signing time:             Sun 18 Jun 2023 14:49:04 +0000
ROA not before:           Sun 18 Jun 2023 14:49:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8851
IP address blocks:        89.213.64.0/18 maxlen: 24
                          37.252.24.0/21 maxlen: 24
                          80.240.80.0/20 maxlen: 20
                          77.107.64.0/18 maxlen: 24
                          213.210.0.0/18 maxlen: 24
                          85.159.128.0/21 maxlen: 24
                          212.38.64.0/19 maxlen: 24
                          37.98.144.0/21 maxlen: 24
                          37.98.144.0/22 maxlen: 24
                          109.176.0.0/16 maxlen: 16
                          89.213.48.0/20 maxlen: 24
                          213.218.208.0/20 maxlen: 24
                          89.213.192.0/18 maxlen: 24
                          89.31.232.0/21 maxlen: 24
                          79.99.72.0/21 maxlen: 24
                          185.20.32.0/22 maxlen: 24
                          185.20.34.0/24 maxlen: 24
                          185.20.35.0/24 maxlen: 24
                          213.218.224.0/19 maxlen: 24
                          81.168.0.0/17 maxlen: 17
                          82.163.0.0/19 maxlen: 24
                          217.144.144.0/20 maxlen: 24
                          217.145.64.0/20 maxlen: 24
                          185.24.84.0/22 maxlen: 24
                          213.130.128.0/19 maxlen: 24
                          194.105.64.0/19 maxlen: 24
                          81.5.128.0/18 maxlen: 18
                          82.152.0.0/15 maxlen: 15
                          195.128.138.0/24 maxlen: 24
                          213.152.32.0/19 maxlen: 19
                          2a02:21f8::/32 maxlen: 32
                          2a00:c60::/32 maxlen: 32
                          2001:1a90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 20 Sep 2023 00:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ce:fb:20:44:43:98:0f:80:02:f7:91:ab:1f:6d:04:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jun 18 14:49:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ab5809b80d3342cd72da52c0ecccf2b57ef2367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:79:f2:97:60:d3:42:5f:c9:43:29:db:a2:
                    ea:dd:bc:2a:5d:c1:4c:b1:a0:19:9a:14:fa:e3:82:
                    15:d4:2d:a5:4a:94:31:d6:2f:95:d1:50:33:df:48:
                    0e:ee:38:8c:1b:e5:8c:a6:d6:d0:4e:dc:e4:21:0a:
                    c1:36:1d:0b:b0:80:f6:0b:0a:ff:16:c2:2f:b0:eb:
                    96:e5:01:79:fc:a9:fd:40:d5:ed:b0:a3:48:1b:22:
                    ca:a8:91:96:1b:b8:0e:1d:fc:5b:0d:29:8e:07:01:
                    02:8f:d6:f5:8a:32:03:de:66:68:19:c6:3f:ad:9e:
                    0f:ae:ff:17:b1:0a:05:c4:e9:3a:16:62:86:7c:51:
                    e9:56:34:74:8c:93:15:59:98:da:50:a5:34:9f:2a:
                    e5:e4:c7:5a:c5:28:d1:36:2a:d5:a5:9e:43:51:18:
                    34:71:75:91:2c:85:3b:2e:cb:a3:7b:3b:0b:e0:fb:
                    b9:c2:d5:58:2a:3b:c1:29:23:73:66:f4:1f:84:d3:
                    ce:05:36:f5:d1:57:49:bd:10:04:7d:86:25:e6:b5:
                    81:c9:56:5b:17:1b:80:ef:96:f4:ee:d0:10:d1:8d:
                    ca:13:f1:c6:3e:6b:ae:55:13:42:30:ea:2e:fb:2b:
                    a2:0c:28:ba:b2:cc:14:0e:fe:8a:21:29:d8:97:1d:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B5:80:9B:80:D3:34:2C:D7:2D:A5:2C:0E:CC:CF:2B:57:EF:23:67
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/erWAm4DTNCzXLaUsDszPK1fvI2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.98.144.0/21
                  37.252.24.0/21
                  77.107.64.0/18
                  79.99.72.0/21
                  80.240.80.0/20
                  81.5.128.0/18
                  81.168.0.0/17
                  82.152.0.0/15
                  82.163.0.0/19
                  85.159.128.0/21
                  89.31.232.0/21
                  89.213.48.0-89.213.127.255
                  89.213.192.0/18
                  109.176.0.0/16
                  185.20.32.0/22
                  185.24.84.0/22
                  194.105.64.0/19
                  195.128.138.0/24
                  212.38.64.0/19
                  213.130.128.0/19
                  213.152.32.0/19
                  213.210.0.0/18
                  213.218.208.0-213.218.255.255
                  217.144.144.0/20
                  217.145.64.0/20
                IPv6:
                  2001:1a90::/32
                  2a00:c60::/32
                  2a02:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:80:db:d6:20:45:ec:f8:f5:c0:f7:07:5b:27:89:84:3a:bd:
         c2:dc:38:63:9f:83:e7:35:b3:ff:20:37:e4:73:2c:d2:37:41:
         9a:bc:94:fa:cc:5c:2f:7c:12:49:83:0b:be:02:82:3d:47:ba:
         30:87:6f:af:19:6f:fd:23:d8:2b:9a:12:af:6d:88:fa:3a:91:
         19:e0:4d:ac:cb:4f:13:74:4e:63:38:a4:4c:cf:ca:ca:93:2a:
         c6:87:08:d9:41:13:73:c6:a8:f7:b5:e9:89:b9:71:ce:05:95:
         5b:62:a4:67:ff:ea:ec:17:49:3c:4f:18:4b:5e:00:86:86:70:
         3b:27:c9:d0:5c:eb:e8:e2:8d:89:08:95:dd:e7:a0:13:75:be:
         0b:35:86:d7:42:78:91:76:c2:e7:68:06:ed:02:82:be:c0:5a:
         dd:48:57:a9:93:01:bd:9b:68:22:ce:ca:37:4a:c4:24:c7:38:
         f7:7e:0d:ac:96:61:a9:b2:09:e8:df:eb:8e:d8:b8:33:69:6d:
         bc:34:9b:93:73:b7:6d:4c:e1:dc:ad:c7:cd:68:1f:d9:ca:73:
         86:7f:eb:20:a2:35:9a:6b:75:2a:31:bb:c5:c4:d9:58:cc:e8:
         85:c2:92:a4:ee:d4:8a:a7:14:4f:41:e0:18:9d:52:4c:b5:24:
         b5:ce:73:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org