Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ovd8im1l6ywyyDWwXcm3ViYDxLo.roa
File:                     ovd8im1l6ywyyDWwXcm3ViYDxLo.roa (raw, json)
Hash identifier:          mcMCtPB8lQ836lb/E10XkHCXULd+2cbiIA+ol6dOK4E=
Subject key identifier:   A2:F7:7C:8A:6D:65:EB:2C:32:C8:35:B0:5D:C9:B7:56:26:03:C4:BA
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F53324F043E38FB4B043253BDB5CE73E8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ovd8im1l6ywyyDWwXcm3ViYDxLo.roa
Signing time:             Tue 07 May 2024 13:15:56 +0000
ROA not before:           Tue 07 May 2024 13:15:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5511
IP address blocks:        82.153.51.0/24 maxlen: 24
                          82.153.148.0/24 maxlen: 24
                          89.213.107.0/24 maxlen: 24
                          89.213.112.0/24 maxlen: 24
                          89.213.113.0/24 maxlen: 24
                          89.213.114.0/24 maxlen: 24
                          89.213.116.0/24 maxlen: 24
                          89.213.121.0/24 maxlen: 24
                          89.213.157.0/24 maxlen: 24
                          89.213.227.0/24 maxlen: 24
                          213.130.137.0/24 maxlen: 24
                          213.130.152.0/24 maxlen: 24
                          213.130.153.0/24 maxlen: 24
                          213.130.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 May 2024 06:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:32:4f:04:3e:38:fb:4b:04:32:53:bd:b5:ce:73:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May  7 13:15:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a2f77c8a6d65eb2c32c835b05dc9b7562603c4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:87:09:a0:1c:a4:9c:79:88:d3:92:a7:aa:
                    62:ed:3a:a0:86:d1:59:b2:64:1a:ed:d9:1c:50:5a:
                    d1:d3:d4:a5:2e:92:21:0a:78:a9:d3:89:0d:49:b7:
                    19:67:6c:0e:bd:01:5b:07:6a:7f:94:d1:59:3b:71:
                    5c:08:39:53:40:b6:31:5e:f4:66:75:8a:d4:ca:e3:
                    e4:04:2f:18:eb:b0:cd:70:bb:c1:ea:1f:61:e5:cf:
                    76:fe:8d:2f:52:4c:cd:10:cb:81:63:6b:fd:9c:a1:
                    dd:cd:2e:18:fe:8e:99:a0:e1:74:f7:68:b1:32:81:
                    c7:2b:58:7e:bc:26:24:17:ae:7a:e8:c8:36:12:d6:
                    b8:68:b3:d0:31:b5:db:c5:35:49:47:ee:87:37:63:
                    31:ba:b4:d0:39:83:92:7e:4b:20:83:7c:db:27:70:
                    e4:3f:68:d0:4d:0f:01:a3:96:ea:52:57:a7:84:ef:
                    fd:fb:59:83:54:f8:17:7f:f3:f3:6f:5b:4c:34:4f:
                    ac:6a:25:76:25:35:4f:c7:aa:f3:43:e9:25:a8:ab:
                    c2:7d:ba:bb:f3:a2:a4:2e:e9:6d:fc:04:0f:a6:59:
                    6a:ca:3e:78:11:b9:af:4a:dd:20:86:2c:ae:18:6f:
                    df:91:2b:c4:fc:97:77:fc:2b:82:d6:50:98:19:60:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:7C:8A:6D:65:EB:2C:32:C8:35:B0:5D:C9:B7:56:26:03:C4:BA
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ovd8im1l6ywyyDWwXcm3ViYDxLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.51.0/24
                  82.153.148.0/24
                  89.213.107.0/24
                  89.213.112.0-89.213.114.255
                  89.213.116.0/24
                  89.213.121.0/24
                  89.213.157.0/24
                  89.213.227.0/24
                  213.130.137.0/24
                  213.130.152.0-213.130.154.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:c3:21:d9:1b:8a:91:1c:b5:31:e3:7e:26:25:7a:a5:86:81:
         c4:1d:c0:cb:b1:f9:d1:92:ab:3c:35:b7:44:01:97:3b:94:62:
         24:4a:e6:1a:f9:10:10:46:b9:8d:00:ee:58:8a:81:0e:83:52:
         fb:21:7f:1c:0a:99:03:ff:3c:6f:d6:78:4c:6e:3b:d9:c6:4c:
         9d:4f:20:97:58:40:a2:e0:4f:86:de:fc:44:cb:39:56:7f:f7:
         4a:d0:e3:77:a6:c1:c0:79:87:f9:12:ea:9a:a3:54:a4:3d:d8:
         a5:40:55:7e:c7:b3:43:f7:99:f7:9d:66:71:5e:28:de:cb:6c:
         d0:af:3e:bb:a6:78:62:25:61:63:e5:7a:46:f5:b4:0d:b8:f2:
         6b:d1:6c:e3:cf:66:dc:35:1f:48:09:33:e8:4a:40:14:be:b2:
         b7:00:79:ed:da:7d:77:4c:00:ff:b2:8b:18:25:f4:ef:28:ac:
         ff:b2:45:1e:a6:2d:38:54:67:a6:09:b7:04:9e:5b:3e:41:14:
         81:dd:c5:2c:01:ba:a4:fb:d9:e8:31:49:39:82:3d:57:d7:1e:
         dd:6d:f7:ba:1a:d3:97:1e:7b:26:1a:4e:1b:de:42:90:7f:fb:
         7b:66:cc:1a:ce:05:32:31:dc:18:fc:e0:d9:d0:7d:4b:47:2a:
         44:f9:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org