Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xOG2gg9aPzMa4i8QSIcH8doixqY.roa
File:                     xOG2gg9aPzMa4i8QSIcH8doixqY.roa (raw, json)
Hash identifier:          9Q2QEIeqwfjt9aG3tb4QDLJuDLqNekIcE6hkepz/yXM=
Subject key identifier:   C4:E1:B6:82:0F:5A:3F:33:1A:E2:2F:10:48:87:07:F1:DA:22:C6:A6
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018B03EAD6CD342A56C56E6DECE706965CA3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xOG2gg9aPzMa4i8QSIcH8doixqY.roa
Signing time:             Fri 06 Oct 2023 07:36:43 +0000
ROA not before:           Fri 06 Oct 2023 07:36:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        89.213.176.0/22 maxlen: 24
                          89.213.180.0/22 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          82.153.66.0/24 maxlen: 24
                          81.168.123.0/24 maxlen: 24
                          81.168.119.0/24 maxlen: 24
                          109.176.240.0/24 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          213.152.42.0/24 maxlen: 24
                          89.213.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 08 Oct 2023 15:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:03:ea:d6:cd:34:2a:56:c5:6e:6d:ec:e7:06:96:5c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct  6 07:36:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c4e1b6820f5a3f331ae22f10488707f1da22c6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:94:59:4e:60:60:92:a0:f8:6f:bd:aa:ea:
                    51:0c:13:31:31:0e:5d:0e:4a:a3:d7:8e:b7:25:62:
                    d5:3e:90:08:37:11:a6:ba:b1:29:0e:bd:c9:26:2b:
                    5e:86:9c:59:ae:d9:c1:d2:6c:cc:b5:dc:88:41:3f:
                    9d:75:b1:66:5e:27:5c:86:c4:8f:70:6f:f0:57:6d:
                    99:51:1e:00:47:69:d7:a9:16:e2:7c:4a:0b:96:22:
                    a8:83:63:ee:76:34:62:c7:5a:6e:d5:04:bc:f0:28:
                    a2:36:10:55:90:e1:b9:96:27:b7:ef:ad:03:37:ec:
                    4c:e8:2f:50:2e:bf:71:e4:cb:58:59:95:56:33:7b:
                    fe:9a:18:77:26:20:1e:74:16:62:cd:2e:53:9c:62:
                    d0:a9:75:e7:36:a6:bb:92:1e:d1:ce:2b:f4:1e:6c:
                    e2:d3:ff:34:85:47:92:56:34:a9:3a:84:89:1e:95:
                    52:f1:72:df:35:fe:e9:02:21:66:da:e1:34:c3:af:
                    72:0e:5a:00:33:7d:23:ae:de:a5:23:6d:75:c9:56:
                    5a:78:bc:5b:6a:ea:77:71:88:e9:f8:6b:77:5e:7e:
                    52:7f:ef:38:d0:4a:6a:0c:d3:9a:d1:9d:91:cd:b0:
                    45:ec:d3:91:a0:a7:d4:c4:72:4e:8e:99:6d:71:eb:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E1:B6:82:0F:5A:3F:33:1A:E2:2F:10:48:87:07:F1:DA:22:C6:A6
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xOG2gg9aPzMa4i8QSIcH8doixqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.119.0/24
                  81.168.123.0/24
                  82.153.66.0/24
                  82.153.136.0/22
                  89.213.148.0-89.213.155.255
                  89.213.167.0/24
                  89.213.176.0/21
                  109.176.240.0/24
                  185.49.126.0/23
                  213.152.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:56:41:14:6a:4f:0c:03:17:56:d6:fa:9f:9e:bb:c6:0f:ac:
         71:c4:dd:88:55:c6:4a:94:77:65:31:9b:0e:5c:0d:e0:21:da:
         51:e1:79:f8:78:48:3f:ae:19:bd:93:80:39:78:b2:d4:95:c7:
         76:f4:6c:46:08:ba:4f:9b:4f:bf:1f:9d:39:51:d7:80:c3:a2:
         e4:c4:97:cd:b7:b9:e5:ab:d4:a7:ac:fa:7e:ff:fc:cc:3f:93:
         f8:8b:e5:98:b6:75:97:ac:d7:40:97:97:9e:74:22:22:4f:c1:
         2e:db:83:2d:c7:bf:22:aa:17:c1:1e:21:07:98:88:c4:7e:41:
         c8:19:35:3c:d9:09:aa:d5:ba:09:98:95:47:8e:60:82:35:2a:
         b9:fa:fe:20:db:92:95:c0:36:fa:47:05:50:d0:11:79:b3:37:
         8f:9b:ea:82:65:e5:3d:17:07:78:70:84:48:f7:0b:52:ce:6e:
         0a:ba:c5:76:41:a8:38:38:a1:44:e9:95:24:77:a8:6f:e5:9b:
         7c:1e:62:15:c1:83:10:c6:6e:74:dc:ce:19:4f:5f:14:27:87:
         e4:e1:cf:0b:c9:65:a7:c0:d7:2b:76:90:52:fa:fe:0b:88:b5:
         52:37:68:a1:7f:1a:e7:8b:4e:04:1f:e3:16:00:be:25:45:f8:
         05:ed:3f:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org