Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vpxJC9HIf3hqHc-NeXn73hfjCCo.roa
File:                     vpxJC9HIf3hqHc-NeXn73hfjCCo.roa (raw, json)
Hash identifier:          5exqD7GOXRXtzD5wUu9TaCIVpdclw8k8Cg3iWN9TKaQ=
Subject key identifier:   BE:9C:49:0B:D1:C8:7F:78:6A:1D:CF:8D:79:79:FB:DE:17:E3:08:2A
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018BD20137F41B421A9502630743A8C9DD2C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vpxJC9HIf3hqHc-NeXn73hfjCCo.roa
Signing time:             Wed 15 Nov 2023 08:02:57 +0000
ROA not before:           Wed 15 Nov 2023 08:02:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        89.213.180.0/22 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          82.152.179.0/24 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          109.176.248.0/24 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          213.152.42.0/24 maxlen: 24
                          89.213.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 11:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:01:37:f4:1b:42:1a:95:02:63:07:43:a8:c9:dd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Nov 15 08:02:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be9c490bd1c87f786a1dcf8d7979fbde17e3082a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:7a:4d:40:cf:70:ac:b1:b8:df:6f:d6:47:
                    9c:f6:f2:cf:02:da:4d:0c:10:ee:20:8a:b4:63:72:
                    ae:94:ef:8d:e6:2f:95:cb:ae:e3:9d:cb:bb:cb:33:
                    eb:c3:ef:07:2f:67:7b:c0:37:d9:53:3c:aa:f9:79:
                    80:4a:22:d6:cc:7b:2c:5a:a5:a0:87:f8:4e:71:27:
                    74:f8:45:0b:29:f9:ef:4e:ee:ff:80:53:c3:a9:da:
                    c2:45:71:88:37:df:76:d8:8e:5e:4e:b6:fa:95:45:
                    d3:dd:8a:76:af:36:33:04:b8:4b:1a:73:5a:5a:3d:
                    bf:ed:33:eb:c2:70:07:ed:af:64:7d:10:44:a5:8f:
                    f1:78:06:62:2d:bf:5c:e5:82:44:5e:1a:c1:47:cb:
                    67:88:7d:31:27:ac:12:bc:3f:7b:b1:5c:2f:0b:74:
                    33:cc:70:bb:5f:36:96:d3:8f:c4:f5:4d:f4:54:cc:
                    f4:09:3a:10:de:a7:d7:f4:78:c9:6a:b2:51:9f:5a:
                    02:d6:67:3f:41:11:ef:7b:81:0f:8c:c8:7d:f8:08:
                    d8:ce:1a:6c:72:ea:5c:20:e6:29:ba:49:6d:f2:82:
                    67:80:eb:c1:df:f3:23:5e:cc:64:f3:4f:fc:41:4a:
                    6b:60:5b:42:02:dd:99:71:46:8e:65:d3:9e:d9:99:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9C:49:0B:D1:C8:7F:78:6A:1D:CF:8D:79:79:FB:DE:17:E3:08:2A
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vpxJC9HIf3hqHc-NeXn73hfjCCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.152.179.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.162.0/24
                  89.213.180.0/22
                  109.176.248.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a5:71:f6:f6:30:0f:28:a4:d1:1c:99:9a:b9:5a:4c:00:4f:
         aa:06:f4:54:c4:48:5f:63:1f:6b:c8:fd:50:66:be:81:69:e5:
         f6:bd:d1:a0:bd:38:50:74:bc:dd:42:be:f2:b2:c5:7e:bc:dd:
         39:9a:f6:9e:69:b0:f6:17:21:5c:6e:b9:25:5b:81:2f:64:19:
         b2:5a:22:04:f1:30:c1:c0:23:ce:ad:4a:a6:4a:1c:45:0c:ba:
         44:01:e8:e3:03:8d:bd:92:60:ec:6e:49:f3:a8:9e:b6:7f:b5:
         48:10:48:1a:9b:b8:a7:62:74:c7:dc:61:ac:c5:bb:b8:eb:4e:
         a1:c2:9f:95:72:f0:63:46:00:27:9c:52:fa:f2:3e:78:4f:31:
         49:79:d3:13:da:b4:aa:68:64:1b:80:3e:3d:e0:44:2e:55:27:
         26:29:c7:d5:aa:2d:35:da:25:74:b0:7e:3f:02:2a:68:b4:47:
         72:99:44:57:60:0a:8e:36:02:9f:44:9d:ba:9b:63:fc:25:5d:
         d2:e3:72:30:27:4c:0e:59:46:d0:b0:d6:96:56:1d:3a:ea:21:
         fa:74:38:96:87:55:e4:4b:6e:6f:ce:b0:e0:e3:fd:7a:0f:c7:
         1b:5f:02:fd:f1:d9:d9:77:7a:07:44:65:30:d0:83:3d:43:3c:
         5a:ce:ac:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org