Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yU5wo42tWMeI9UQG9yJWTSdJDNg.roa
File:                     yU5wo42tWMeI9UQG9yJWTSdJDNg.roa (raw, json)
Hash identifier:          Jy0rdZ8Nn0opaE28pTe5bRX5xF6E8uU0CmWRdGGlWS8=
Subject key identifier:   C9:4E:70:A3:8D:AD:58:C7:88:F5:44:06:F7:22:56:4D:27:49:0C:D8
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018AD0677C4F209D389F7FCDE6AF2841F7F5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yU5wo42tWMeI9UQG9yJWTSdJDNg.roa
Signing time:             Tue 26 Sep 2023 07:32:37 +0000
ROA not before:           Tue 26 Sep 2023 07:32:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212783
IP address blocks:        81.168.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d0:67:7c:4f:20:9d:38:9f:7f:cd:e6:af:28:41:f7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Sep 26 07:32:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c94e70a38dad58c788f54406f722564d27490cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:33:41:5b:fd:0d:8d:e3:fb:63:45:61:b2:
                    9c:26:a3:9d:6c:ea:c3:63:67:37:5b:02:8f:48:30:
                    c0:89:87:96:f7:77:c6:80:b7:fa:d6:9f:c9:2c:dc:
                    11:0f:d0:ce:38:1e:09:47:07:74:0d:1a:fb:47:d6:
                    1a:2b:e9:38:a6:55:32:98:92:8a:21:e2:42:94:ff:
                    71:3f:a7:01:d1:39:ac:03:19:64:f9:7a:ec:27:75:
                    b0:02:ef:fa:c3:fa:ee:14:b8:c7:8e:0c:8b:27:10:
                    f0:d3:23:db:0c:2b:fb:f3:e1:34:be:dc:93:98:99:
                    e0:2c:b1:52:bc:6e:6a:7a:03:90:d0:25:29:14:be:
                    af:be:05:84:15:81:cb:8a:72:a1:74:21:57:74:d4:
                    e6:dc:a7:42:3a:f0:24:3b:6b:0e:5b:19:67:66:ff:
                    60:35:9c:7a:10:f8:74:c6:a4:83:61:5a:a5:9d:bd:
                    ef:41:86:90:57:2e:23:6d:63:7d:43:cf:15:ec:c1:
                    f9:09:9f:0b:6f:fc:49:ec:20:fc:e1:68:46:6e:dc:
                    41:bd:90:48:17:58:88:98:04:8f:fe:9d:78:c2:b3:
                    40:d7:40:34:06:2d:b4:c2:ef:7a:89:14:01:cc:22:
                    23:1c:19:f2:85:0d:bf:ca:2f:fd:8a:90:77:f3:3e:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4E:70:A3:8D:AD:58:C7:88:F5:44:06:F7:22:56:4D:27:49:0C:D8
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yU5wo42tWMeI9UQG9yJWTSdJDNg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:ce:97:0b:99:2c:79:60:7e:86:51:73:96:74:75:6c:00:
         5f:d1:3b:85:cb:60:3f:22:cb:65:e9:10:0c:4d:f8:e7:12:60:
         58:7a:52:6d:f9:97:05:42:dd:aa:26:c6:79:fa:74:f8:d2:1b:
         cb:a8:d7:71:ef:51:54:7d:d1:9b:61:a2:05:34:3d:e6:e0:4f:
         04:75:44:7b:30:dc:fc:57:de:8e:82:e6:20:3d:57:12:95:90:
         9e:c9:fe:73:5a:af:8e:71:bb:a1:fc:71:1e:8a:99:54:54:42:
         b4:2c:30:09:ed:e9:26:59:66:59:06:84:ce:fc:e9:61:2e:e1:
         85:44:fb:bc:9c:f5:1a:91:bd:2f:2b:1a:a5:16:d2:17:f0:87:
         45:39:c3:7e:4e:30:8c:a4:76:50:81:10:b0:ff:bb:0d:36:25:
         8f:8d:d7:35:ca:6e:b1:2a:76:53:f8:49:a7:bd:03:97:eb:24:
         b0:85:ed:1a:f7:76:3f:af:46:2e:6c:aa:dd:77:50:b8:14:f3:
         9e:ba:49:3c:3d:20:9f:49:fc:e4:1b:7d:43:67:64:55:65:70:
         3e:e9:01:8e:b2:ce:3f:06:cd:0b:57:71:40:0c:c3:7f:c8:98:
         85:f9:ed:df:f2:0e:2f:2e:93:8e:68:df:79:f5:ae:02:7b:b1:
         7e:8d:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org