Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gRm68UD_bS8IqCVyECA1sn3SU08.roa
File:                     gRm68UD_bS8IqCVyECA1sn3SU08.roa (raw, json)
Hash identifier:          T8AhWJkr9PXpc2oWPKWM+lcGRImQAIaL5jrvGxQ7678=
Subject key identifier:   81:19:BA:F1:40:FF:6D:2F:08:A8:25:72:10:20:35:B2:7D:D2:53:4F
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018C005BBE1C94EF27C2B70E3CBD071F06FB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gRm68UD_bS8IqCVyECA1sn3SU08.roa
Signing time:             Fri 24 Nov 2023 08:04:21 +0000
ROA not before:           Fri 24 Nov 2023 08:04:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        82.153.136.0/22 maxlen: 22
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          89.213.180.0/22 maxlen: 24
                          89.213.182.0/23 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          213.152.42.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          82.153.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Nov 2023 09:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:00:5b:be:1c:94:ef:27:c2:b7:0e:3c:bd:07:1f:06:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 24 08:04:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8119baf140ff6d2f08a82572102035b27dd2534f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:95:52:e2:00:93:e8:9b:2e:49:2b:22:cc:
                    54:fb:63:3e:21:4c:de:6e:5b:4a:6f:32:3a:ca:20:
                    d2:d9:00:9f:e1:cb:5b:de:2b:6d:82:ea:e2:59:3b:
                    3d:35:58:d5:1d:ee:ef:2f:7b:03:4a:ef:dc:a5:65:
                    01:73:39:53:52:db:4a:ed:ff:a3:0b:aa:7a:4d:fc:
                    a5:fc:e0:2b:98:36:c1:79:33:74:ff:92:a6:47:00:
                    dc:e6:e2:42:cd:1f:5b:71:d5:d1:71:bb:7d:52:dd:
                    44:3c:3d:6e:c2:bd:46:08:7d:b6:4c:e4:e6:aa:6d:
                    e4:b9:da:ae:c3:5d:b2:23:6e:78:24:c1:d3:12:3c:
                    51:f9:2a:a2:56:48:a8:ae:c0:1e:39:04:cd:9b:ce:
                    cd:cd:3f:77:8e:46:02:cb:4c:e2:55:52:fe:bd:a0:
                    ee:7f:61:6f:08:f3:e4:c4:2b:38:d9:9e:97:f0:ae:
                    49:a8:25:50:b9:78:c8:0f:f4:3c:e7:3e:7b:cc:9d:
                    1a:89:a3:4e:b5:b8:f1:e8:7f:e8:85:bf:cd:64:8e:
                    81:32:28:dd:79:31:d4:90:98:8d:5b:e9:0f:fe:2b:
                    61:3c:f0:da:59:5f:89:cd:f7:b8:c9:ea:3e:0c:0c:
                    ba:54:d9:fc:be:95:51:2e:57:c5:57:e2:45:02:6c:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:BA:F1:40:FF:6D:2F:08:A8:25:72:10:20:35:B2:7D:D2:53:4F
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gRm68UD_bS8IqCVyECA1sn3SU08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.153.10.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.172.0/22
                  89.213.180.0/22
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:16:cc:74:ce:60:ec:88:09:6c:13:f4:db:06:f8:c2:ba:36:
         75:35:35:ac:67:47:df:5e:9b:4a:f9:f3:23:ba:06:0e:b6:d5:
         86:ac:cc:af:29:90:38:ef:f9:0d:c5:88:96:ed:71:54:05:72:
         50:80:cd:83:fd:ec:c3:60:e1:43:38:d1:0a:df:4f:a6:5a:15:
         35:e8:cc:39:9d:e6:9e:a3:af:5f:5f:63:4d:cb:fd:71:6f:f6:
         77:03:a8:d0:00:5d:d5:0d:b3:ff:c5:ef:34:f7:82:02:06:18:
         61:7b:65:1f:f6:f0:4e:d2:53:9f:88:b5:34:d1:e4:35:12:c3:
         4e:ef:75:f4:07:9d:cc:46:a7:fd:ef:bc:cf:dc:4d:f9:c8:3e:
         8b:ae:0c:65:47:42:6e:ca:5a:ee:27:af:6e:1d:dc:69:6c:57:
         69:f9:aa:5f:e0:a5:69:be:7f:06:38:7c:51:f0:65:67:06:45:
         0e:fd:25:d1:e0:71:94:26:62:f9:22:69:be:bc:1e:d6:4d:b4:
         e8:fc:23:3d:98:25:6d:87:62:b5:2a:1d:17:14:dd:7c:2b:19:
         2f:3f:2d:95:87:40:a8:b3:a9:f8:32:0d:83:13:67:2e:43:4a:
         77:e4:1a:ad:e2:18:e6:36:9c:08:3c:17:d1:e5:35:04:fd:e5:
         88:78:be:f1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYwAW74clO8nwrcOPL0HHwb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMTI0MDgwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTE5YmFmMTQwZmY2ZDJmMDhhODI1NzIxMDIwMzViMjdkZDI1MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWeVUuIAk+ibLkkrIsxU+2M+IUze
bltKbzI6yiDS2QCf4ctb3ittguriWTs9NVjVHe7vL3sDSu/cpWUBczlTUttK7f+j
C6p6Tfyl/OArmDbBeTN0/5KmRwDc5uJCzR9bcdXRcbt9Ut1EPD1uwr1GCH22TOTm
qm3kudquw12yI254JMHTEjxR+SqiVkiorsAeOQTNm87NzT93jkYCy0ziVVL+vaDu
f2FvCPPkxCs42Z6X8K5JqCVQuXjID/Q85z57zJ0aiaNOtbjx6H/ohb/NZI6BMijd
eTHUkJiNW+kP/ithPPDaWV+Jzfe4yeo+DAy6VNn8vpVRLlfFV+JFAmy9iQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFIEZuvFA/20vCKglchAgNbJ90lNPMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ1JtNjhVRF9iUzhJcUNWeUVDQTFzbjNTVTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAUah3AwQA
Uah7AwQAUpkKAwQCUpmIMAwDBAJZ1ZQDBAVZ1YADBAJZ1awDBAJZ1bQDBAG5MX4D
BADVmCowDQYJKoZIhvcNAQELBQADggEBACgWzHTOYOyICWwT9NsG+MK6NnU1Naxn
R99em0r58yO6Bg621YaszK8pkDjv+Q3FiJbtcVQFclCAzYP97MNg4UM40QrfT6Za
FTXozDmd5p6jr19fY03L/XFv9ncDqNAAXdUNs//F7zT3ggIGGGF7ZR/28E7SU5+I
tTTR5DUSw07vdfQHncxGp/3vvM/cTfnIPouuDGVHQm7KWu4nr24d3GlsV2n5ql/g
pWm+fwY4fFHwZWcGRQ79JdHgcZQmYvkiab68HtZNtOj8Iz2YJW2HYrUqHRcU3Xwr
GS8/LZWHQKizqfgyDYMTZy5DSnfkGq3iGOY2nAg8F9HlNQT95Yh4vvE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org