Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wrslj3W-MmQw3doitnG_PB5tO1w.roa
File:                     wrslj3W-MmQw3doitnG_PB5tO1w.roa (raw, json)
Hash identifier:          U19Jp3I6cIJNcPACC6UANvQPCoJlLvvFMWT9+5Jejss=
Subject key identifier:   C2:BB:25:8F:75:BE:32:64:30:DD:DA:22:B6:71:BF:3C:1E:6D:3B:5C
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018DF4A71B553CB9642C94784FA70A396C4E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wrslj3W-MmQw3doitnG_PB5tO1w.roa
Signing time:             Thu 29 Feb 2024 11:36:48 +0000
ROA not before:           Thu 29 Feb 2024 11:36:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.153.64.0/24 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.165.0/24 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          89.213.173.0/24 maxlen: 24
                          89.213.180.0/24 maxlen: 24
                          89.213.191.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          213.152.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 14:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f4:a7:1b:55:3c:b9:64:2c:94:78:4f:a7:0a:39:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Feb 29 11:36:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2bb258f75be326430ddda22b671bf3c1e6d3b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:32:d4:07:3a:98:f6:fe:f1:56:01:36:98:
                    b0:08:32:15:69:8b:5a:fe:24:18:80:de:d9:0f:53:
                    67:2d:8e:31:10:eb:ed:a5:55:70:45:e6:43:70:33:
                    02:e5:f6:ad:d5:76:ee:2c:8e:af:af:bc:ea:b9:b0:
                    ee:4a:b3:30:fa:93:e7:35:56:82:91:7b:f8:66:81:
                    5e:6d:55:9b:ac:93:ce:8a:a3:8d:31:5a:57:5e:7b:
                    1e:a8:2b:db:5a:23:61:92:9b:2a:ec:b3:02:e0:d9:
                    87:b1:50:cc:2f:48:af:56:ae:94:96:b5:a9:bc:eb:
                    b1:2a:d2:90:e3:65:89:79:63:95:6b:43:fb:19:04:
                    2b:55:b0:99:9a:1f:f5:8e:95:5b:75:f1:37:97:cd:
                    6b:1f:65:43:25:aa:1c:d0:64:ef:4a:af:40:90:a7:
                    28:1f:0f:e5:66:54:aa:dd:31:08:cb:48:46:4b:85:
                    3f:09:be:6f:fd:b4:40:b5:71:c9:02:04:eb:73:40:
                    55:a4:f5:3e:ad:fe:2b:47:ca:2a:07:ad:c3:a6:a1:
                    ad:08:8c:45:71:d0:a9:36:c9:69:84:06:9e:a0:ed:
                    52:15:69:e3:39:aa:5c:18:ae:a1:3b:12:c0:9d:c8:
                    d7:d3:03:fc:6e:d7:07:14:a4:74:0b:b6:01:52:14:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BB:25:8F:75:BE:32:64:30:DD:DA:22:B6:71:BF:3C:1E:6D:3B:5C
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wrslj3W-MmQw3doitnG_PB5tO1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.153.64.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.159.255
                  89.213.165.0/24
                  89.213.172.0/22
                  89.213.180.0/24
                  89.213.191.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:9c:e3:90:91:03:b6:4f:24:51:ff:91:be:9f:06:8f:1f:
         77:15:2f:db:d0:3d:fa:d0:5a:08:f8:7b:3b:9e:1b:20:3b:6d:
         9d:62:fc:60:e0:ab:69:7c:a3:57:bd:0c:48:aa:42:39:62:cd:
         63:a5:3e:84:a8:6a:51:b1:fd:a0:26:53:bd:25:6f:50:14:91:
         52:93:8a:e6:32:92:55:22:f3:56:1d:50:97:bf:67:28:4c:9f:
         37:fa:0e:e7:ed:6f:60:dc:ce:dc:94:22:63:ce:ae:19:69:3a:
         25:6b:62:4e:d7:29:67:25:74:cc:3f:fc:d0:bb:5a:32:f8:87:
         cb:68:40:8c:83:49:4b:f0:69:54:5c:11:dc:f2:cf:64:bf:d1:
         1f:cf:fc:a9:93:20:e7:cb:06:a3:9d:45:6f:94:ee:7a:db:c9:
         cc:5b:c0:e6:ba:26:2e:1d:48:8d:a0:e3:3a:b6:22:39:a7:d2:
         9c:62:80:61:e0:5e:cd:89:f4:0d:fc:17:b8:9a:ff:86:05:70:
         1d:1f:5a:8a:69:2f:7b:6a:a5:c2:db:52:1e:0b:ed:2f:16:24:
         30:4d:8d:cb:29:3e:6d:b5:cc:e1:90:af:71:c6:24:c9:ac:1b:
         b2:67:72:4f:af:61:ce:c2:76:95:0f:57:46:a0:d5:42:be:c6:
         a1:e0:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org