Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/KzagarXXK3l9EpO6gYBh5qLwXwg.roa
File:                     KzagarXXK3l9EpO6gYBh5qLwXwg.roa (raw, json)
Hash identifier:          Ia7ExvceknH7GHLbiBy3bjDyVhCLczhQdZ1EdXFmYmE=
Subject key identifier:   2B:36:A0:6A:B5:D7:2B:79:7D:12:93:BA:81:80:61:E6:A2:F0:5F:08
Certificate issuer:       /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial:       01929A1A70368D03491056E7CEF18A72C44B
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/KzagarXXK3l9EpO6gYBh5qLwXwg.roa
Signing time:             Thu 17 Oct 2024 10:51:16 +0000
ROA not before:           Thu 17 Oct 2024 10:51:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60439
IP address blocks:        45.151.80.0/24 maxlen: 24
                          45.151.81.0/24 maxlen: 24
                          45.151.83.0/24 maxlen: 24
                          85.208.196.0/24 maxlen: 24
                          85.208.197.0/24 maxlen: 24
                          85.208.198.0/24 maxlen: 24
                          85.208.199.0/24 maxlen: 24
                          139.28.16.0/24 maxlen: 24
                          139.28.17.0/24 maxlen: 24
                          139.28.18.0/24 maxlen: 24
                          139.28.19.0/24 maxlen: 24
                          193.160.22.0/24 maxlen: 24
                          193.160.23.0/24 maxlen: 24
                          193.160.30.0/24 maxlen: 24
                          193.160.31.0/24 maxlen: 24
                          2a13:8240::/40 maxlen: 48
                          2a13:8240:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:9a:1a:70:36:8d:03:49:10:56:e7:ce:f1:8a:72:c4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
        Validity
            Not Before: Oct 17 10:51:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2b36a06ab5d72b797d1293ba818061e6a2f05f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:af:42:76:a2:94:df:8c:16:09:67:42:a3:
                    16:47:e1:b8:a2:e8:45:70:bb:f2:04:af:ab:6c:2a:
                    2a:63:b8:51:a5:e5:4a:4a:a0:5e:7c:61:dc:cb:21:
                    0f:b5:21:b7:b5:61:d7:f0:3d:cf:22:45:6c:a3:f7:
                    e4:0d:f3:b2:f8:6d:d4:b3:59:0a:4b:bc:49:03:aa:
                    be:6f:29:e3:d6:63:a0:af:0c:0f:84:1f:ea:3d:ec:
                    47:e0:8d:0b:67:ec:cf:07:f0:c4:34:0e:fb:e5:7f:
                    d9:e6:98:8b:42:71:d0:51:65:fb:ce:35:30:6a:ce:
                    86:30:9f:16:25:47:37:da:0e:3b:bc:a0:b7:86:db:
                    3a:c2:70:8c:46:f9:97:40:dd:5e:7d:e8:78:ec:8e:
                    81:e7:d8:0b:d1:e8:93:2c:b3:ef:61:a6:a9:ce:56:
                    75:69:76:70:af:7f:6a:d5:c2:9b:6d:6c:3e:76:33:
                    fe:2a:b7:9d:31:5e:1d:c5:55:83:9f:3d:5e:35:f1:
                    78:7d:7a:8c:29:14:ab:6f:56:8c:4f:b2:4f:75:f1:
                    a9:6f:54:fc:dc:a0:07:84:d9:7f:e7:fa:14:84:c0:
                    1f:dc:25:9c:5a:e9:c3:fb:e2:6e:b9:48:b5:a6:fb:
                    85:7b:5a:bc:e1:28:35:71:52:86:6c:d8:19:30:b2:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:36:A0:6A:B5:D7:2B:79:7D:12:93:BA:81:80:61:E6:A2:F0:5F:08
            X509v3 Authority Key Identifier:
                keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/KzagarXXK3l9EpO6gYBh5qLwXwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.80.0/23
                  45.151.83.0/24
                  85.208.196.0/22
                  139.28.16.0/22
                  193.160.22.0/23
                  193.160.30.0/23
                IPv6:
                  2a13:8240::/39

    Signature Algorithm: sha256WithRSAEncryption
         ae:bf:2f:ad:8b:3a:1d:0b:78:cc:f8:a4:da:46:a9:bc:03:c0:
         62:81:32:60:c1:7b:28:88:31:d2:82:e1:79:35:68:cc:fc:13:
         99:ec:d7:5e:31:6c:2a:66:cb:aa:dd:57:7b:71:b4:78:3d:01:
         37:69:b4:83:13:49:95:2e:7a:52:02:cf:74:28:7d:39:10:41:
         9e:70:a7:34:6f:45:a6:d2:0a:41:21:9d:a2:21:9d:fb:44:f9:
         04:35:93:07:1a:45:c1:9f:f9:91:17:bf:8b:74:e9:70:57:ab:
         6b:74:27:97:c1:5e:b3:be:c9:71:fc:38:ec:cb:4a:2e:bd:94:
         ec:eb:ea:54:c2:81:86:40:56:31:6d:87:7a:8e:f1:46:e0:b4:
         40:94:a4:88:48:e7:b8:7a:45:e5:18:10:34:b4:a7:ed:44:22:
         93:b9:a6:58:dc:39:d7:2c:cd:de:cb:c1:2b:d0:63:ec:00:aa:
         c5:63:b5:12:da:8f:7b:76:cd:3a:0c:c1:62:dc:b5:94:a0:b2:
         51:c5:8e:af:ca:22:94:7f:6d:29:82:7f:a6:47:69:af:e4:75:
         ca:8c:75:05:00:13:ec:4b:e2:93:e4:36:5a:24:11:77:f2:99:
         ae:f0:d0:28:3f:f5:0c:8d:a2:47:0c:85:87:7d:6d:e7:12:f7:
         7b:9b:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 10:57:34 2024 by rpki-client on console-ams.rpki-client.org