Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tGrvXNI1krDRay1_v2jod8ZQzNc.roa
File:                     tGrvXNI1krDRay1_v2jod8ZQzNc.roa (raw, json)
Hash identifier:          I4I2gZ+rJQ/x0yd5rn9qOVNCjNmSkX+3vFN8k5X+aiM=
Subject key identifier:   B4:6A:EF:5C:D2:35:92:B0:D1:6B:2D:7F:BF:68:E8:77:C6:50:CC:D7
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018E570A20DC8852FBB36E6868001F7C9CE1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tGrvXNI1krDRay1_v2jod8ZQzNc.roa
Signing time:             Tue 19 Mar 2024 14:07:45 +0000
ROA not before:           Tue 19 Mar 2024 14:07:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198448
IP address blocks:        81.168.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 May 2024 07:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:57:0a:20:dc:88:52:fb:b3:6e:68:68:00:1f:7c:9c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Mar 19 14:07:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b46aef5cd23592b0d16b2d7fbf68e877c650ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:c6:0a:7d:f0:fc:12:40:49:cc:c2:90:ad:
                    07:ed:02:ef:d8:4f:91:48:9e:7f:1c:0b:b8:12:fd:
                    73:d7:3d:1b:94:ab:07:6a:fa:7b:93:7d:22:1f:86:
                    d5:5d:e4:59:14:15:1e:a1:21:5f:c8:16:74:41:a9:
                    7e:cf:35:59:ce:bd:5d:3c:1b:e8:60:b3:6a:a4:c4:
                    b5:0c:f1:81:2c:0c:e9:e3:37:27:03:68:74:63:34:
                    f5:69:fd:f0:49:48:ad:d0:99:98:f2:9e:0e:2e:87:
                    6a:7e:a6:ae:d8:bb:f7:5f:3f:6e:59:55:70:16:79:
                    0d:5b:a4:09:12:87:fe:20:4c:ed:11:28:dc:eb:fa:
                    31:b2:fe:e6:b2:11:08:7f:d8:ee:1a:62:f4:15:93:
                    4b:08:74:6f:ec:29:35:ac:1f:bf:0d:8a:56:ed:19:
                    1c:77:85:c9:f9:f3:6e:cb:32:bc:09:d2:ed:1d:95:
                    d6:25:12:99:50:c4:9b:39:a3:0b:e5:4a:42:00:08:
                    d0:09:87:1b:6f:ba:c3:27:b9:da:68:27:4d:3d:50:
                    7c:3b:8c:e1:50:46:5a:cc:23:47:67:a6:b5:53:05:
                    4e:4b:1f:f2:2d:64:35:29:2c:e6:5f:bf:60:55:7b:
                    10:07:e3:6d:9e:af:3f:da:d9:62:2c:7d:b1:c1:81:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6A:EF:5C:D2:35:92:B0:D1:6B:2D:7F:BF:68:E8:77:C6:50:CC:D7
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tGrvXNI1krDRay1_v2jod8ZQzNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:8e:a2:fd:05:35:90:3c:48:d2:c6:f6:23:31:15:0c:bb:
         f5:9f:d3:4f:1a:a4:de:2b:15:b7:bb:40:3b:6e:7c:81:0e:4f:
         0a:75:82:3a:27:37:1a:ec:d7:d6:28:f2:db:00:cc:27:32:ea:
         c0:3e:31:18:90:6e:42:c6:eb:9c:11:3f:b7:32:f7:a0:f9:3d:
         ce:9f:5c:15:6d:fe:4f:f1:7a:c4:10:d2:de:c1:19:3d:91:36:
         ca:2d:84:79:dd:54:26:30:ab:d2:e1:b4:77:3b:0a:46:79:6c:
         9f:2c:92:41:65:6a:39:e4:c4:b2:98:83:64:93:66:65:db:b1:
         c3:44:84:45:80:2a:0c:41:20:ee:5d:d3:47:55:9e:32:ad:41:
         c5:c3:21:3c:ba:20:30:25:30:fb:58:8d:b6:21:b9:0d:65:f6:
         6b:33:55:59:b1:6a:26:be:33:61:e7:90:0a:56:21:5c:bb:a8:
         76:bf:fd:6c:1d:75:30:29:90:28:c0:60:12:ff:a8:a8:31:77:
         a9:c0:58:81:99:35:74:34:d7:48:76:e7:6a:54:e5:e9:6f:57:
         17:f0:35:1a:15:d9:c7:8f:b3:cc:88:b1:57:70:7c:92:4a:51:
         0b:8f:1c:2e:11:7e:b2:db:ac:07:ab:79:15:84:86:0c:43:d5:
         3a:22:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org