Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p4o3JnLBDqnGQ7ix25Nxvi_3Qow.roa
File:                     p4o3JnLBDqnGQ7ix25Nxvi_3Qow.roa (raw, json)
Hash identifier:          0IOKs5ifz+2XzrEmMLEjaYgazxEwyzBZ1aKn19p/GAg=
Subject key identifier:   A7:8A:37:26:72:C1:0E:A9:C6:43:B8:B1:DB:93:71:BE:2F:F7:42:8C
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01899637800C108E9FF4A64386F17D43130A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p4o3JnLBDqnGQ7ix25Nxvi_3Qow.roa
Signing time:             Thu 27 Jul 2023 07:19:26 +0000
ROA not before:           Thu 27 Jul 2023 07:19:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        82.152.178.0/24 maxlen: 24
                          82.153.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 13 Aug 2023 15:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:96:37:80:0c:10:8e:9f:f4:a6:43:86:f1:7d:43:13:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jul 27 07:19:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a78a372672c10ea9c643b8b1db9371be2ff7428c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:93:b4:5d:fd:b2:a8:e4:94:5b:98:00:9a:ac:
                    57:74:21:70:74:26:5a:f0:81:ef:12:2e:dd:17:c4:
                    46:d6:76:8c:c7:cd:f1:b2:e0:eb:6a:94:80:24:81:
                    5d:70:7e:5f:9d:5d:29:3b:19:5e:51:f5:d6:66:11:
                    b7:d8:30:bf:0c:07:4e:ff:f2:3b:35:b2:59:a4:16:
                    7e:9b:a6:4d:46:f4:74:64:97:a8:99:2b:24:77:8f:
                    0e:b8:0d:f5:84:08:1e:0e:c8:ac:0a:59:b9:73:32:
                    1a:21:c2:76:67:5f:95:69:25:94:6e:a5:e0:1c:9a:
                    d4:f6:ff:4f:22:f6:98:df:62:c8:64:0e:12:6a:6e:
                    c2:59:e8:7e:8d:a8:8e:0e:79:15:57:38:cf:58:51:
                    5c:f8:1c:a8:58:51:40:5a:8b:59:65:03:49:80:c1:
                    4f:fd:24:b6:d4:31:3d:88:5a:0f:8c:bb:2f:9e:fd:
                    40:18:34:a3:43:a3:1d:da:c6:7d:ef:95:e2:bc:41:
                    ca:5d:8a:6e:14:38:e7:79:82:38:de:3b:49:c7:3f:
                    13:38:3f:2b:53:f0:8f:15:d7:b1:30:c7:6d:50:10:
                    a5:95:73:ef:ff:51:f6:0a:56:a6:32:28:33:be:58:
                    25:94:de:05:1e:3f:b7:37:6f:f2:27:a2:89:9a:c1:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:37:26:72:C1:0E:A9:C6:43:B8:B1:DB:93:71:BE:2F:F7:42:8C
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/p4o3JnLBDqnGQ7ix25Nxvi_3Qow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.178.0/24
                  82.153.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:7d:12:66:46:fc:41:90:4c:14:e0:ec:f1:63:2e:82:3f:
         e2:17:51:e3:21:08:38:f3:fc:88:5a:14:54:1f:24:1a:d5:2d:
         42:b8:56:1d:df:ab:98:8b:32:62:bf:d1:88:4b:18:b6:cf:f7:
         6f:b6:32:10:d0:2c:c9:7e:b2:d4:b9:3e:da:59:e9:0b:19:5b:
         69:b5:9c:a3:14:e1:08:25:cf:6f:e9:81:53:a1:84:25:7b:cd:
         7b:54:6a:de:47:8b:4f:e2:93:34:a7:84:27:c5:71:8f:ee:2c:
         10:8f:4f:76:ca:71:f9:72:23:1d:66:17:01:19:35:2f:61:52:
         6f:af:39:53:52:53:85:af:03:a7:f3:75:a3:7d:1c:25:95:9f:
         6d:d6:28:92:59:b5:77:15:87:72:71:e3:7e:04:9b:eb:02:21:
         89:bc:45:08:c8:a2:df:8a:1d:16:d7:e2:07:7e:6a:44:18:a0:
         09:7f:16:0f:08:3b:0f:dc:5b:a4:f6:fd:be:2d:23:ed:47:7c:
         4e:0d:a9:9e:ed:f9:96:c4:34:37:67:9e:49:ef:e0:94:ab:02:
         d3:90:c2:b0:9e:05:0d:f6:93:30:34:2d:74:63:2a:8c:43:dc:
         0d:d4:64:79:90:53:e9:21:f1:dc:b4:ee:1e:40:39:6e:26:7d:
         2f:10:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org