Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r7nGXzBZ_rH-Jrzi_EOfI9r8BxY.roa
File:                     r7nGXzBZ_rH-Jrzi_EOfI9r8BxY.roa (raw, json)
Hash identifier:          OdGi9hopqosn8qnPGMYf7YVynNynOnl16ag+F6jOA5o=
Subject key identifier:   AF:B9:C6:5F:30:59:FE:B1:FE:26:BC:E2:FC:43:9F:23:DA:FC:07:16
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018E75F3F2617CDB0CC9A8B6C02021943AE3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r7nGXzBZ_rH-Jrzi_EOfI9r8BxY.roa
Signing time:             Mon 25 Mar 2024 14:11:45 +0000
ROA not before:           Mon 25 Mar 2024 14:11:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.152.176.0/23 maxlen: 23
                          82.153.136.0/22 maxlen: 22
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.165.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          109.176.245.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 07:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:75:f3:f2:61:7c:db:0c:c9:a8:b6:c0:20:21:94:3a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Mar 25 14:11:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=afb9c65f3059feb1fe26bce2fc439f23dafc0716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:89:9d:86:f4:e0:6d:28:fe:4e:a2:bb:2f:
                    f2:5b:de:58:06:c5:02:ed:96:96:fb:2a:67:4a:f6:
                    7f:ec:d2:ae:5e:08:ec:06:fe:5a:1f:08:8b:ab:a4:
                    9c:ad:80:9a:1c:ee:e4:1c:91:be:1d:ed:9f:9d:d1:
                    a7:c5:b6:5e:d1:05:94:25:4e:8d:f1:c6:7d:36:05:
                    04:d6:c7:b0:2b:19:20:46:24:13:54:8e:53:8f:8a:
                    e2:1a:db:6e:09:0e:4f:26:a3:d7:12:01:8f:ec:e9:
                    f4:78:93:0f:3c:1f:bf:81:eb:7e:70:66:d0:33:9f:
                    18:86:97:15:68:c8:ab:80:d6:3b:94:b7:a8:13:ad:
                    8e:a4:9b:ce:ce:55:72:11:51:0a:f5:b3:bc:eb:9b:
                    f2:8c:49:c7:75:7c:4b:33:13:f6:54:a0:9a:ff:95:
                    74:60:2f:97:78:0f:bc:75:73:b8:d2:29:e9:95:91:
                    8c:ec:c4:4f:a3:a5:c5:83:5b:ae:98:77:d5:7b:1d:
                    eb:7e:8a:b4:e7:07:1f:7c:4e:26:d5:a0:e6:4b:68:
                    2d:b6:8b:bd:8e:63:0b:a9:1e:ca:e9:95:21:e3:e2:
                    53:27:a9:24:79:8f:0b:c1:70:8f:5f:6a:70:90:49:
                    ae:ed:c5:f4:8e:08:43:ce:33:91:4f:69:71:11:5a:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B9:C6:5F:30:59:FE:B1:FE:26:BC:E2:FC:43:9F:23:DA:FC:07:16
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/r7nGXzBZ_rH-Jrzi_EOfI9r8BxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.176.0/23
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.165.0/24
                  89.213.172.0/22
                  89.213.180.0/24
                  109.176.245.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:55:b7:c4:eb:e7:30:33:0d:93:7c:71:46:b0:4e:a8:6a:b3:
         a8:83:2d:d9:4b:8a:a6:91:0d:a1:9c:dd:72:a4:2c:12:2d:4f:
         5c:7c:d4:93:38:23:62:a2:9d:10:45:9f:c0:db:61:a4:2d:6d:
         a2:76:2e:36:81:20:86:7a:e8:df:85:1c:a6:21:92:27:05:c2:
         42:b6:6d:7a:68:8c:16:fb:ae:88:ea:85:08:cf:bd:0f:48:b1:
         79:73:5d:ae:e7:23:87:84:81:4e:2f:4a:c6:cb:18:e4:a0:fd:
         a1:33:38:3d:e9:5c:35:e8:f6:d0:a1:fb:11:78:f9:db:7d:3a:
         e1:20:b3:55:08:0f:00:cd:6c:a0:17:26:16:b6:5b:70:7f:30:
         c8:ac:c2:c1:3f:c4:ed:9a:77:00:4a:60:34:0c:6e:a6:88:58:
         ff:8f:3a:97:c3:94:d6:74:dd:8d:6b:4e:df:14:d5:df:60:1c:
         0a:9c:45:11:22:85:e6:39:47:a2:13:ef:25:87:ba:3f:a0:cd:
         91:49:ee:3b:a2:ef:0d:b1:19:6e:14:ea:e2:15:60:ef:51:f6:
         55:18:b1:56:37:e9:bd:97:bd:92:25:61:b6:2d:b2:6b:17:a8:
         87:ff:8c:6b:dd:a5:2e:8f:05:bc:ee:70:6a:e8:22:14:2f:b0:
         3f:7e:60:a1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY518/JhfNsMyai2wCAhlDrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMzI1MTQxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmI5YzY1ZjMwNTlmZWIxZmUyNmJjZTJmYzQzOWYyM2RhZmMwNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeOJnYb04G0o/k6iuy/yW95YBsUC
7ZaW+ypnSvZ/7NKuXgjsBv5aHwiLq6ScrYCaHO7kHJG+He2fndGnxbZe0QWUJU6N
8cZ9NgUE1sewKxkgRiQTVI5Tj4riGttuCQ5PJqPXEgGP7On0eJMPPB+/get+cGbQ
M58YhpcVaMirgNY7lLeoE62OpJvOzlVyEVEK9bO865vyjEnHdXxLMxP2VKCa/5V0
YC+XeA+8dXO40inplZGM7MRPo6XFg1uumHfVex3rfoq05wcffE4m1aDmS2gttou9
jmMLqR7K6ZUh4+JTJ6kkeY8LwXCPX2pwkEmu7cX0jghDzjORT2lxEVopMwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFK+5xl8wWf6x/ia84vxDnyPa/AcWMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcjduR1h6QlpfckgtSnJ6aV9FT2ZJOXI4QnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBUpiwAwQC
UpmIMAwDBAJZ1ZQDBAVZ1YADBABZ1aUDBAJZ1awDBABZ1bQDBABtsPUDBAG5MX4D
BADVmCowDQYJKoZIhvcNAQELBQADggEBAC5Vt8Tr5zAzDZN8cUawTqhqs6iDLdlL
iqaRDaGc3XKkLBItT1x81JM4I2KinRBFn8DbYaQtbaJ2LjaBIIZ66N+FHKYhkicF
wkK2bXpojBb7rojqhQjPvQ9IsXlzXa7nI4eEgU4vSsbLGOSg/aEzOD3pXDXo9tCh
+xF4+dt9OuEgs1UIDwDNbKAXJha2W3B/MMiswsE/xO2adwBKYDQMbqaIWP+POpfD
lNZ03Y1rTt8U1d9gHAqcRREiheY5R6IT7yWHuj+gzZFJ7jui7w2xGW4U6uIVYO9R
9lUYsVY36b2XvZIlYbYtsmsXqIf/jGvdpS6PBbzucGroIhQvsD9+YKE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org