Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGJlgY5ACz8yNS3OlrBws2aHbc8.roa
File:                     mGJlgY5ACz8yNS3OlrBws2aHbc8.roa (raw, json)
Hash identifier:          gbwlLIvQJVWtF5PX82DGz1wky8d5oN0HP792e4Dvfj0=
Subject key identifier:   98:62:65:81:8E:40:0B:3F:32:35:2D:CE:96:B0:70:B3:66:87:6D:CF
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0187FF9F19E26867437E72D2F808FB297F4B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGJlgY5ACz8yNS3OlrBws2aHbc8.roa
Signing time:             Tue 09 May 2023 08:27:09 +0000
ROA not before:           Tue 09 May 2023 08:27:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        82.152.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 15:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ff:9f:19:e2:68:67:43:7e:72:d2:f8:08:fb:29:7f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May  9 08:27:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=986265818e400b3f32352dce96b070b366876dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:96:ab:76:6f:f8:c8:f1:eb:8c:a9:b0:ba:
                    68:17:aa:64:8c:7e:d0:0e:ed:2a:1e:76:dc:89:dd:
                    33:c3:27:f1:59:c8:b4:5f:3a:92:f8:29:c6:74:e2:
                    b5:fd:b2:92:3a:69:2c:6e:e5:13:0b:41:32:0f:59:
                    6b:6d:40:90:e9:50:c6:0c:64:27:52:da:cf:bb:7b:
                    b1:99:e5:27:32:97:d9:14:4d:bb:5a:32:7f:f9:46:
                    fe:dc:32:75:c8:1f:f3:af:30:b7:68:a4:62:01:be:
                    be:7d:41:53:64:56:20:62:06:04:6b:dd:bc:13:c4:
                    bb:07:de:97:5f:6f:63:83:df:46:7d:50:e2:8e:68:
                    a9:3c:21:66:06:36:85:eb:86:5b:57:41:ce:f3:c4:
                    cf:05:b8:5f:b6:83:d4:d6:f8:56:89:f3:17:80:6d:
                    0d:98:d8:33:80:e4:24:65:cc:db:ec:d8:b8:4d:11:
                    0a:36:16:8c:a2:20:6b:7b:8c:28:48:e2:65:ac:93:
                    25:6a:c7:b3:99:bc:c3:8a:e1:94:82:34:1f:bb:30:
                    9b:40:9f:39:f1:4a:d3:e0:84:da:ac:80:be:82:04:
                    cb:e0:69:09:15:81:18:ad:0e:a8:ce:ea:fa:89:65:
                    1c:ed:15:bc:65:5d:b3:f0:27:3a:1d:f6:73:19:54:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:62:65:81:8E:40:0B:3F:32:35:2D:CE:96:B0:70:B3:66:87:6D:CF
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGJlgY5ACz8yNS3OlrBws2aHbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:13:4c:8f:99:53:ac:00:27:84:45:05:3c:d7:cb:7c:b0:c0:
         18:71:92:a5:df:59:04:40:b4:96:b8:cb:21:4a:8e:87:ac:b1:
         44:6b:34:72:32:3a:cc:5e:cb:6f:97:9b:76:f9:f2:d8:47:ff:
         82:2e:39:e6:73:56:4f:04:05:58:61:b1:22:84:72:91:97:6f:
         9f:fc:1c:a5:c0:28:d3:3c:59:99:af:9d:16:a1:e2:ff:9c:d4:
         61:44:e2:bd:e5:05:33:a5:f3:dc:3a:96:d9:69:ea:22:1d:57:
         f1:55:f8:a2:e2:08:3e:a6:08:0a:3d:8b:69:6b:c1:03:9d:6a:
         d9:c4:aa:79:80:ac:cd:4a:e9:15:62:90:6c:69:bc:d5:cd:69:
         44:a8:88:0f:92:0b:7b:42:2f:f2:0a:d1:0d:48:b8:ba:2c:8f:
         b3:18:ea:01:0c:4c:72:6f:d1:af:4f:91:5d:b0:71:78:bc:ec:
         24:4d:ea:6b:76:37:b7:74:e5:2c:84:dc:43:e3:39:c9:4c:20:
         4f:c4:65:d6:eb:fd:ad:7f:d8:cf:0a:4a:28:2c:fd:19:2a:a2:
         a7:7a:94:f3:eb:52:78:f6:64:52:b5:61:17:55:31:d3:bc:29:
         d5:e6:37:87:9e:0a:b3:c9:45:ad:cc:f2:03:f3:9f:32:a5:14:
         28:83:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org