Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fa4el2CikfeH2SHjiD3RSkmj0pU.roa
File:                     fa4el2CikfeH2SHjiD3RSkmj0pU.roa (raw, json)
Hash identifier:          jXxnF2WkP70BbuL2WfpkGOI6Dj9cp9mb3BHY+c1qJSM=
Subject key identifier:   7D:AE:1E:97:60:A2:91:F7:87:D9:21:E3:88:3D:D1:4A:49:A3:D2:95
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018DE4FC2E8E192987D016E1D443D0463F93
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fa4el2CikfeH2SHjiD3RSkmj0pU.roa
Signing time:             Mon 26 Feb 2024 10:35:48 +0000
ROA not before:           Mon 26 Feb 2024 10:35:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     398465
IP address blocks:        81.168.119.0/24 maxlen: 24
                          89.213.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 10:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e4:fc:2e:8e:19:29:87:d0:16:e1:d4:43:d0:46:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Feb 26 10:35:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7dae1e9760a291f787d921e3883dd14a49a3d295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:44:c7:aa:e6:1e:ef:60:50:2b:d5:99:5e:
                    ce:75:bc:49:71:c8:90:3d:fa:e3:9a:e0:d5:61:03:
                    09:96:5c:33:e0:4f:a0:82:ce:21:10:8e:fd:4a:ed:
                    98:9d:ff:18:0b:7f:5c:cf:c2:cf:d0:43:31:8f:11:
                    c4:47:72:20:b2:74:4a:a6:94:30:4b:29:77:e0:56:
                    e0:b6:60:fe:3a:4a:f8:64:73:dd:25:d0:ac:1a:d3:
                    c7:38:be:09:58:37:6d:12:02:ce:6d:42:a3:1a:07:
                    64:c1:df:b1:4d:5a:0b:42:cb:a7:63:7d:97:dd:e3:
                    e5:ae:55:69:cd:e1:3a:ad:a1:b5:ba:bb:c8:90:bd:
                    2a:e0:7d:1f:5d:42:35:3b:f3:46:c2:a9:e2:0a:2f:
                    d4:ba:33:ff:f2:e2:20:39:75:ab:ae:3e:24:51:69:
                    ac:52:ed:d5:d7:73:b6:eb:6d:17:2a:a6:fb:04:d3:
                    b2:4c:0b:a9:6f:28:41:25:45:1d:05:c2:90:38:64:
                    e5:03:9a:38:b9:12:54:4f:67:35:c0:cf:5f:aa:14:
                    0d:ae:14:85:4a:1e:c8:dd:8d:7a:1d:6e:ef:61:d3:
                    fe:c7:82:05:e6:8b:c4:1c:5f:87:47:9e:85:d2:7a:
                    44:5e:49:55:6c:ed:ed:2b:a4:87:bb:6b:1e:2f:6e:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:1E:97:60:A2:91:F7:87:D9:21:E3:88:3D:D1:4A:49:A3:D2:95
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fa4el2CikfeH2SHjiD3RSkmj0pU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  89.213.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:27:7a:77:be:e4:bb:8c:fd:1a:7b:de:8e:f5:85:e3:b4:62:
         93:e4:43:3a:84:38:e5:c5:69:f9:8c:9e:bc:48:a0:66:bb:e0:
         d8:ff:99:26:39:20:1b:7e:35:99:12:af:c3:fc:87:e3:47:a8:
         09:eb:7d:33:ce:4e:4d:57:dd:96:99:fa:9b:dd:24:00:b7:88:
         c4:09:b0:9d:de:c1:b3:12:dc:e4:41:c8:e1:2e:74:d4:66:a1:
         d5:71:d4:eb:d0:85:e7:4a:c3:6d:f9:c0:4f:26:cf:2d:cc:e3:
         d4:84:f0:fe:26:89:4a:12:71:44:9f:31:8a:81:87:bf:4d:e0:
         08:54:e1:57:ec:4f:80:ba:ea:aa:5e:2a:23:a7:57:19:97:5e:
         ab:44:a0:c9:dc:18:ee:c2:ae:ae:49:08:0f:73:ab:95:b6:a2:
         6f:bf:98:c0:54:a5:99:2a:2c:ce:cd:b8:c2:96:49:79:c2:8a:
         fa:65:b1:80:78:97:13:9c:ea:f1:6c:58:62:58:d7:fb:a0:28:
         e3:36:0a:b6:b7:30:62:fe:2c:6e:42:de:14:f4:26:8d:59:90:
         43:22:77:f5:a6:14:f8:47:56:91:22:3d:ed:c0:71:c8:0c:48:
         dd:68:64:ae:3d:d8:21:b8:2e:f1:6a:61:4b:9e:9a:ce:44:7f:
         3f:d0:57:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3k/C6OGSmH0Bbh1EPQRj+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMjI2MTAzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGFlMWU5NzYwYTI5MWY3ODdkOTIxZTM4ODNkZDE0YTQ5YTNkMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUNEx6rmHu9gUCvVmV7OdbxJcciQ
PfrjmuDVYQMJllwz4E+ggs4hEI79Su2Ynf8YC39cz8LP0EMxjxHER3IgsnRKppQw
Syl34FbgtmD+Okr4ZHPdJdCsGtPHOL4JWDdtEgLObUKjGgdkwd+xTVoLQsunY32X
3ePlrlVpzeE6raG1urvIkL0q4H0fXUI1O/NGwqniCi/UujP/8uIgOXWrrj4kUWms
Uu3V13O2620XKqb7BNOyTAupbyhBJUUdBcKQOGTlA5o4uRJUT2c1wM9fqhQNrhSF
Sh7I3Y16HW7vYdP+x4IF5ovEHF+HR56F0npEXklVbO3tK6SHu2seL25wEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH2uHpdgopH3h9kh44g90UpJo9KVMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZmE0ZWwyQ2lrZmVIMlNIamlEM1JTa21qMHBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUah3AwQA
WdWFMA0GCSqGSIb3DQEBCwUAA4IBAQAxJ3p3vuS7jP0ae96O9YXjtGKT5EM6hDjl
xWn5jJ68SKBmu+DY/5kmOSAbfjWZEq/D/IfjR6gJ630zzk5NV92Wmfqb3SQAt4jE
CbCd3sGzEtzkQcjhLnTUZqHVcdTr0IXnSsNt+cBPJs8tzOPUhPD+JolKEnFEnzGK
gYe/TeAIVOFX7E+AuuqqXiojp1cZl16rRKDJ3Bjuwq6uSQgPc6uVtqJvv5jAVKWZ
KizOzbjClkl5wor6ZbGAeJcTnOrxbFhiWNf7oCjjNgq2tzBi/ixuQt4U9CaNWZBD
Inf1phT4R1aRIj3twHHIDEjdaGSuPdghuC7xamFLnprORH8/0Ffw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org