Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wKhP_HRIVzCbfZ0QN17g5kEocMk.roa
File:                     wKhP_HRIVzCbfZ0QN17g5kEocMk.roa (raw, json)
Hash identifier:          XozQf5wxqhzQmUum9TigAs8ZjMyq2/YwyIXSyl5rsb0=
Subject key identifier:   C0:A8:4F:FC:74:48:57:30:9B:7D:9D:10:37:5E:E0:E6:41:28:70:C9
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F5471D593D7B9FBCDC9ED39A58CBB3D8C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wKhP_HRIVzCbfZ0QN17g5kEocMk.roa
Signing time:             Tue 07 May 2024 19:04:57 +0000
ROA not before:           Tue 07 May 2024 19:04:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400866
IP address blocks:        37.252.27.0/24 maxlen: 24
                          81.168.50.0/24 maxlen: 24
                          82.152.54.0/24 maxlen: 24
                          82.152.98.0/24 maxlen: 24
                          82.153.35.0/24 maxlen: 24
                          82.163.15.0/24 maxlen: 24
                          89.213.98.0/24 maxlen: 24
                          109.176.201.0/24 maxlen: 24
                          109.176.202.0/24 maxlen: 24
                          212.38.84.0/24 maxlen: 24
                          213.130.130.0/24 maxlen: 24
                          213.130.149.0/24 maxlen: 24
                          213.130.150.0/24 maxlen: 24
                          213.130.151.0/24 maxlen: 24
                          213.130.156.0/24 maxlen: 24
                          213.210.58.0/24 maxlen: 24
                          213.210.59.0/24 maxlen: 24
                          213.218.227.0/24 maxlen: 24
                          213.218.231.0/24 maxlen: 24
                          217.144.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 08:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:71:d5:93:d7:b9:fb:cd:c9:ed:39:a5:8c:bb:3d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May  7 19:04:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c0a84ffc744857309b7d9d10375ee0e6412870c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:7d:f8:08:1f:86:91:57:d6:08:02:2a:cb:
                    18:9a:32:a8:09:74:b7:83:9c:9b:3b:f3:78:bd:87:
                    7e:c2:ab:6e:0e:40:83:39:93:b1:da:26:f2:1e:80:
                    be:c3:b1:58:24:c0:39:e2:47:7e:10:4f:91:37:2d:
                    d3:f4:8e:80:d8:9f:49:23:f7:f8:79:dc:d4:4d:38:
                    88:f6:4e:6c:02:c5:2b:57:ce:0c:b0:11:d6:c0:4d:
                    1f:0e:c6:33:f9:10:d1:8f:39:6e:ad:d0:64:58:92:
                    56:9b:64:46:d3:5e:1c:ac:c3:03:57:d3:eb:0a:ce:
                    2a:5f:07:72:b5:a0:e0:b9:0b:d8:b6:30:35:f2:51:
                    be:62:e2:10:d3:8b:4d:be:b4:38:8a:d8:b2:99:b8:
                    ae:56:ce:ac:88:c5:3b:24:a4:4e:01:bc:22:2f:b9:
                    cf:d9:00:ac:2f:5b:c2:63:f4:a2:78:2c:e6:13:35:
                    8d:63:d1:dd:cf:a1:2e:8c:7c:5a:a9:13:83:35:49:
                    77:3a:21:a5:07:40:8d:38:af:35:84:1a:a5:9c:f6:
                    39:1f:f5:27:43:06:88:50:37:cf:0d:24:13:f9:85:
                    2b:c2:f8:9e:ed:0b:ba:04:99:95:1c:9f:30:34:7d:
                    4f:3f:9a:0b:8f:63:fb:25:e3:59:49:bf:ac:ac:3b:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A8:4F:FC:74:48:57:30:9B:7D:9D:10:37:5E:E0:E6:41:28:70:C9
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wKhP_HRIVzCbfZ0QN17g5kEocMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.252.27.0/24
                  81.168.50.0/24
                  82.152.54.0/24
                  82.152.98.0/24
                  82.153.35.0/24
                  82.163.15.0/24
                  89.213.98.0/24
                  109.176.201.0-109.176.202.255
                  212.38.84.0/24
                  213.130.130.0/24
                  213.130.149.0-213.130.151.255
                  213.130.156.0/24
                  213.210.58.0/23
                  213.218.227.0/24
                  213.218.231.0/24
                  217.144.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:9b:d2:11:ee:55:4c:ef:ee:b7:f8:87:e1:0b:0e:83:a3:
         3a:80:8f:45:5f:66:54:e8:b0:d6:db:c2:03:18:e2:33:4c:c6:
         d9:f0:13:68:c4:bd:93:03:52:b4:19:4a:d7:1d:09:fc:0d:09:
         18:a7:a7:26:12:c0:a3:2c:2c:97:eb:61:09:8e:e5:c5:f3:cb:
         52:6e:8b:5a:cb:05:99:66:f4:4d:44:e2:e3:e1:12:fe:ed:7a:
         cf:54:17:05:d1:56:de:62:6d:ea:86:9a:e4:b6:8a:86:db:79:
         07:d7:e1:cb:2e:be:88:87:23:5d:ba:e6:08:13:fb:f0:70:87:
         9f:3f:48:88:19:56:f3:d2:b5:2d:d0:48:24:54:f4:3a:54:e6:
         c2:fe:b1:93:90:a0:09:f8:40:79:4c:f2:11:f7:4b:17:e6:12:
         20:bd:2d:be:b6:12:b9:10:9c:3d:16:94:98:e9:e2:50:27:21:
         6e:20:69:d8:3b:71:bc:84:a1:b4:94:51:b4:2d:a3:72:31:e6:
         a8:25:94:35:8e:1d:68:4f:fd:61:6a:b8:66:be:6e:77:b9:ef:
         89:02:8c:0b:20:3e:88:6a:bb:16:8d:c2:7b:89:3d:86:24:ec:
         c2:92:75:bc:81:be:15:e0:7c:59:d6:99:f4:08:8f:b7:ae:f7:
         cc:77:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org