Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ycsH-fryrn1OATxwIRqgbhZS0uY.roa
File:                     ycsH-fryrn1OATxwIRqgbhZS0uY.roa (raw, json)
Hash identifier:          b5nNggb/ZLTFduovTOm0zEIJI9kN+cujdVJb9CTXSvI=
Subject key identifier:   C9:CB:07:F9:FA:F2:AE:7D:4E:01:3C:70:21:1A:A0:6E:16:52:D2:E6
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018F614ECD5A1B14EB4086EA0BB8D03E03EE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ycsH-fryrn1OATxwIRqgbhZS0uY.roa
Signing time:             Fri 10 May 2024 07:01:45 +0000
ROA not before:           Fri 10 May 2024 07:01:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.152.54.0/24 maxlen: 24
                          82.152.160.0/21 maxlen: 24
                          82.152.176.0/23 maxlen: 23
                          82.153.50.0/24 maxlen: 24
                          82.153.136.0/22 maxlen: 22
                          82.163.21.0/24 maxlen: 24
                          89.213.98.0/24 maxlen: 24
                          89.213.148.0/22 maxlen: 24
                          89.213.152.0/22 maxlen: 24
                          89.213.156.0/22 maxlen: 24
                          89.213.172.0/22 maxlen: 24
                          109.176.16.0/21 maxlen: 24
                          109.176.201.0/24 maxlen: 24
                          185.49.126.0/23 maxlen: 24
                          194.105.80.0/20 maxlen: 20
                          213.130.130.0/24 maxlen: 24
                          213.130.149.0/24 maxlen: 24
                          213.130.156.0/24 maxlen: 24
                          213.210.59.0/24 maxlen: 24
                          213.218.210.0/24 maxlen: 24
                          213.218.211.0/24 maxlen: 24
                          213.218.213.0/24 maxlen: 24
                          213.218.227.0/24 maxlen: 24
                          213.218.231.0/24 maxlen: 24
                          213.218.249.0/24 maxlen: 24
                          217.144.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 10:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:61:4e:cd:5a:1b:14:eb:40:86:ea:0b:b8:d0:3e:03:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: May 10 07:01:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c9cb07f9faf2ae7d4e013c70211aa06e1652d2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:67:a3:65:7b:a3:ae:85:45:0a:ce:16:4b:
                    c5:0b:d6:0e:c1:25:f2:1d:98:3a:f1:6e:e7:6e:9c:
                    66:94:09:8f:b9:67:2e:17:77:cd:b9:ca:5f:fb:e5:
                    96:3e:20:7d:c5:28:c6:df:74:37:dc:52:68:b1:93:
                    a8:c2:37:ac:47:e1:ad:32:3b:60:99:86:95:fd:11:
                    85:5c:d7:b0:e6:63:0e:c5:02:1a:7a:d8:1d:b3:07:
                    fb:67:24:25:f7:58:43:88:84:c5:47:4c:c1:7e:8a:
                    70:5e:66:f5:24:cb:21:95:72:df:ee:77:ba:f6:f7:
                    e1:f1:57:0f:d4:8f:07:ed:74:6f:64:ec:15:a8:6c:
                    4b:28:4e:81:05:fb:da:bd:75:5c:11:67:be:56:ae:
                    31:78:34:7b:1c:63:5b:24:98:b2:ac:76:eb:33:2d:
                    42:08:3e:dc:cd:00:97:6f:6c:6b:52:55:65:aa:63:
                    b7:6a:cc:3e:83:ee:7e:50:8f:8d:23:37:3e:d4:ea:
                    52:84:5d:69:a4:95:91:89:85:31:df:3b:63:cd:0f:
                    a4:f2:8c:ba:b1:3b:4d:62:83:ca:8e:d5:26:cc:a1:
                    18:ff:63:e0:40:2d:2a:b1:75:4a:70:47:b4:26:12:
                    60:40:94:6a:69:b6:74:31:43:a0:76:66:81:77:25:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:07:F9:FA:F2:AE:7D:4E:01:3C:70:21:1A:A0:6E:16:52:D2:E6
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ycsH-fryrn1OATxwIRqgbhZS0uY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.54.0/24
                  82.152.160.0/21
                  82.152.176.0/23
                  82.153.50.0/24
                  82.153.136.0/22
                  82.163.21.0/24
                  89.213.98.0/24
                  89.213.148.0-89.213.159.255
                  89.213.172.0/22
                  109.176.16.0/21
                  109.176.201.0/24
                  185.49.126.0/23
                  194.105.80.0/20
                  213.130.130.0/24
                  213.130.149.0/24
                  213.130.156.0/24
                  213.210.59.0/24
                  213.218.210.0/23
                  213.218.213.0/24
                  213.218.227.0/24
                  213.218.231.0/24
                  213.218.249.0/24
                  217.144.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:a1:2a:d3:46:64:00:40:3f:db:3f:b1:31:d5:30:ed:36:
         af:5f:ec:a5:67:d6:86:ac:a3:3c:b2:06:5d:3b:a5:a9:8a:5c:
         6b:4a:bf:13:ea:a8:51:02:18:a2:c6:63:7e:6d:83:b2:cd:5a:
         cb:eb:7c:17:87:47:98:81:81:85:3a:0b:5e:40:d1:0e:99:0c:
         89:a0:2c:b7:e8:9b:dd:5f:71:06:f5:26:a0:92:7b:ca:e8:29:
         8b:68:7a:33:a7:64:94:3d:65:48:a0:40:9e:5f:ce:07:b9:b3:
         de:ee:dc:8c:c0:89:fa:d9:3a:7b:a4:8c:0d:69:ff:34:3d:d8:
         7d:ca:ba:8b:e8:38:18:c5:53:b1:1d:82:70:ef:0d:32:c4:bf:
         0d:85:82:5a:98:9a:b7:36:76:3d:e7:99:3f:bf:9d:a1:f1:6e:
         51:30:20:d1:bf:72:aa:90:41:9d:c3:43:44:e9:71:09:36:05:
         27:76:44:4e:ed:a3:ec:cc:b7:9a:fd:05:46:a1:1a:fa:a4:8d:
         df:d0:95:d8:5f:3d:73:91:8e:37:0b:d1:3d:05:39:c0:0f:a1:
         56:27:f0:b1:7b:37:e8:5e:43:4e:45:9b:c6:d7:fa:3f:4c:98:
         1b:ff:5f:97:e8:96:7b:80:bf:b1:7d:e5:78:c9:f7:11:e0:0b:
         18:aa:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org