Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/JlMOdKXLr_F2NQv9St5ik-0Itbw.roa
File:                     JlMOdKXLr_F2NQv9St5ik-0Itbw.roa (raw, json)
Hash identifier:          UnwY7QmoBmxEitbVJXOq6lBV0wusF7fha507mnWwd/E=
Subject key identifier:   26:53:0E:74:A5:CB:AF:F1:76:35:0B:FD:4A:DE:62:93:ED:08:B5:BC
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       018B28207679C00CE15C85414831E76C3246
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/JlMOdKXLr_F2NQv9St5ik-0Itbw.roa
Signing time:             Fri 13 Oct 2023 08:21:38 +0000
ROA not before:           Fri 13 Oct 2023 08:21:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3302
IP address blocks:        185.82.0.0/22 maxlen: 22
                          81.92.32.0/20 maxlen: 20
                          213.136.128.0/18 maxlen: 24
                          217.29.160.0/20 maxlen: 20
                          193.219.30.0/24 maxlen: 24
                          194.20.0.0/16 maxlen: 24
                          217.15.208.0/20 maxlen: 24
                          213.149.192.0/19 maxlen: 19
                          212.90.0.0/19 maxlen: 24
                          213.183.128.0/19 maxlen: 19
                          194.21.0.0/18 maxlen: 24
                          194.153.192.0/20 maxlen: 24
                          83.211.0.0/16 maxlen: 24
                          212.110.0.0/19 maxlen: 24
                          62.94.0.0/16 maxlen: 24
                          195.62.224.0/19 maxlen: 24
                          194.153.208.0/22 maxlen: 24
                          213.198.128.0/18 maxlen: 24
                          2001:750::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:28:20:76:79:c0:0c:e1:5c:85:41:48:31:e7:6c:32:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Oct 13 08:21:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26530e74a5cbaff176350bfd4ade6293ed08b5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:5b:68:5e:ca:e7:2f:ff:e7:a6:bc:da:5f:
                    ce:0f:82:29:ee:53:38:77:a8:09:f1:3e:22:dc:c9:
                    7c:4a:62:e8:97:b2:2d:3e:00:24:94:6f:aa:04:e8:
                    98:93:94:e7:95:af:47:d4:3b:97:44:20:fd:94:39:
                    78:11:ab:82:a9:16:ce:ab:df:7b:7d:98:f6:cc:5d:
                    43:17:f5:db:f3:a9:26:a9:a9:51:0b:ee:16:03:f7:
                    db:99:f4:55:ca:98:03:9d:1a:72:2e:45:11:4c:5f:
                    38:1b:75:51:57:4b:56:fb:28:21:9c:43:3c:ee:fe:
                    d1:37:83:59:93:c4:5e:f2:0d:86:eb:74:eb:a7:43:
                    75:1e:42:72:12:c0:cc:0b:fa:d9:26:37:e4:43:7d:
                    02:5c:69:b0:8d:cd:b1:e6:ae:20:b6:e5:3d:e4:70:
                    0b:c9:69:aa:82:5a:f5:d9:a3:a0:3a:b3:93:0b:d7:
                    8d:17:b3:1a:11:1f:38:9d:27:88:73:be:73:f8:b7:
                    3e:2a:fc:56:e5:55:f7:1a:0c:ea:4d:a6:b2:7b:0f:
                    79:1b:ce:ef:5d:54:53:53:3d:5c:53:26:f4:2c:30:
                    b3:e8:f9:ad:24:23:46:65:d9:65:95:f0:6c:31:a0:
                    83:ad:bc:7f:04:41:64:ec:61:73:fb:2c:6b:83:ef:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:0E:74:A5:CB:AF:F1:76:35:0B:FD:4A:DE:62:93:ED:08:B5:BC
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/JlMOdKXLr_F2NQv9St5ik-0Itbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.94.0.0/16
                  81.92.32.0/20
                  83.211.0.0/16
                  185.82.0.0/22
                  193.219.30.0/24
                  194.20.0.0-194.21.63.255
                  194.153.192.0-194.153.211.255
                  195.62.224.0/19
                  212.90.0.0/19
                  212.110.0.0/19
                  213.136.128.0/18
                  213.149.192.0/19
                  213.183.128.0/19
                  213.198.128.0/18
                  217.15.208.0/20
                  217.29.160.0/20
                IPv6:
                  2001:750::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:ac:1a:79:cf:f6:bf:74:f0:66:95:5a:31:e0:47:7f:52:
         b9:60:96:4b:53:31:68:8e:3f:e3:e7:f6:45:2a:9c:1e:2d:32:
         20:b1:17:67:c1:5e:a0:81:5c:e1:c8:fd:87:90:66:ca:31:5d:
         97:f8:af:ba:35:d4:25:1e:60:3f:be:f7:e3:b4:b9:26:3f:ad:
         17:eb:89:b7:76:ca:d6:7b:5e:1f:c7:13:f5:57:3f:46:f6:4a:
         01:1b:81:77:a0:28:d6:1a:db:fa:71:b3:5f:01:88:71:b2:06:
         75:d5:a3:6a:15:ff:85:03:ab:5f:a9:bc:60:9c:e7:42:83:e3:
         57:d3:49:a9:19:ec:cd:29:0f:a1:d6:3f:f1:7b:10:14:e6:4f:
         fe:2e:f8:23:87:f5:b6:38:d4:65:88:d1:7c:a8:78:61:4a:a3:
         d7:af:9d:bd:be:cd:f1:c0:91:dc:1d:ab:03:ea:5f:dd:ca:3a:
         52:ce:30:b8:88:ec:79:b3:83:01:6a:e6:09:cc:6d:87:4d:40:
         b8:e1:49:26:32:60:45:32:20:45:79:96:85:f7:13:70:5c:7a:
         ad:94:21:04:6b:b2:5d:d4:86:02:ac:40:c9:e2:f2:88:dd:fa:
         62:28:3f:44:3b:ca:7d:f0:43:75:11:69:66:b9:df:e4:8f:ed:
         c2:83:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net