Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zTqRjp7qE93obn3t-Id0VQSf_MI.roa
File:                     zTqRjp7qE93obn3t-Id0VQSf_MI.roa (raw, json)
Hash identifier:          PIXB6NL0YmeBFX0Gj09yO0yakcEVaqAnkMdB+HCY4nc=
Subject key identifier:   CD:3A:91:8E:9E:EA:13:DD:E8:6E:7D:ED:F8:87:74:55:04:9F:FC:C2
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0187BC9348E09B68A6F9D619C31D267623F0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zTqRjp7qE93obn3t-Id0VQSf_MI.roa
Signing time:             Wed 26 Apr 2023 07:59:41 +0000
ROA not before:           Wed 26 Apr 2023 07:59:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     393427
IP address blocks:        82.153.240.0/24 maxlen: 24
                          81.5.189.0/24 maxlen: 24
                          82.152.178.0/24 maxlen: 24
                          82.153.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 May 2023 06:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bc:93:48:e0:9b:68:a6:f9:d6:19:c3:1d:26:76:23:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Apr 26 07:59:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd3a918e9eea13dde86e7dedf8877455049ffcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:bc:82:e9:81:3d:dc:f0:c6:cb:ba:04:83:
                    cc:3c:40:19:e8:60:91:47:41:2e:13:06:74:b7:51:
                    21:5f:17:24:5d:1c:a8:5b:d2:ee:7d:c6:99:ec:11:
                    24:72:2c:37:a8:fd:75:00:c0:e0:31:58:48:63:74:
                    ee:39:97:75:63:67:fb:b5:b0:9a:ec:e0:31:86:bd:
                    85:f2:ea:cf:9d:dd:3e:c4:62:e0:b9:79:9a:aa:3b:
                    b9:49:0c:1d:70:d9:e5:a8:4f:90:e6:31:e6:41:45:
                    75:17:a2:57:16:f9:51:0b:bb:a8:2b:54:bf:e1:27:
                    f7:20:98:10:8e:45:3e:e4:ab:a3:8e:4c:c8:07:3f:
                    2f:b9:2a:9e:56:1d:56:3d:02:4f:7f:8b:35:4a:c1:
                    3d:89:51:11:3e:3f:83:3e:8e:cf:9d:8c:e7:55:cb:
                    ae:ab:70:36:62:08:98:2a:88:da:18:89:d8:fe:4d:
                    9e:c2:80:ca:64:42:5b:d8:d9:ed:84:9f:ba:64:03:
                    60:5a:a6:6a:63:48:79:c1:f6:bc:1c:03:7d:76:a0:
                    ea:f3:27:c2:3a:00:7a:63:78:30:4e:bb:5d:87:c8:
                    a3:c8:43:b8:ba:5e:4b:d2:f8:dd:10:4c:de:c1:9d:
                    b2:57:a2:33:12:d6:54:5e:f2:58:22:fe:3b:04:0b:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:91:8E:9E:EA:13:DD:E8:6E:7D:ED:F8:87:74:55:04:9F:FC:C2
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zTqRjp7qE93obn3t-Id0VQSf_MI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.5.189.0/24
                  82.152.178.0/24
                  82.153.69.0/24
                  82.153.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:7a:79:6a:f9:5c:91:02:40:60:77:8e:16:1f:c7:d2:ec:
         5f:eb:47:ba:2d:7a:62:d4:74:40:bd:99:03:39:c9:aa:9b:6b:
         d2:b5:2b:df:6f:a3:0f:04:2d:8d:cb:a3:b4:a6:c2:27:16:8a:
         2c:b5:f4:08:1e:f0:39:ae:96:d5:97:70:48:1a:96:e0:8a:1e:
         1a:ac:15:03:fa:78:ae:5e:06:e9:d7:50:93:8e:f9:e3:86:81:
         73:8b:24:e4:ce:1a:9d:bd:05:86:1a:93:e2:00:e8:2b:3e:a7:
         4c:fb:de:cf:2c:ff:e2:a8:b0:81:fa:b5:4b:e8:be:80:db:ff:
         aa:c0:87:e1:ce:2e:a5:8f:8f:61:80:91:a7:4d:d3:a1:b0:21:
         99:bd:47:51:38:6a:62:eb:a6:72:30:3f:82:ee:aa:dc:be:a0:
         0a:a2:96:12:53:ed:f9:a4:35:59:c9:e7:2d:2e:74:a3:6d:81:
         fd:fb:15:ee:31:f6:fd:0a:57:ec:a5:36:39:8c:94:aa:cb:0c:
         7c:1d:36:b4:16:b5:f9:58:ea:2e:f1:22:a2:be:e5:2d:ad:28:
         f0:cf:2d:4d:20:88:fb:09:a9:bd:cf:a3:26:32:9d:f7:d1:e9:
         71:58:9f:d0:a9:4e:9f:57:82:dc:e5:0e:c3:e7:31:d7:63:93:
         ae:07:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org