Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/SLZvnIyQt6kY80F3ypO9Bxo7o7Y.roa
File:                     SLZvnIyQt6kY80F3ypO9Bxo7o7Y.roa (raw, json)
Hash identifier:          AmP1j4s2x/d+X95R/PU3+VtSSrD8o6vi0CjS52OpjM8=
Subject key identifier:   48:B6:6F:9C:8C:90:B7:A9:18:F3:41:77:CA:93:BD:07:1A:3B:A3:B6
Certificate issuer:       /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial:       0186B8844EC5B1DF812CFF42DA3C82FD2D1C
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/SLZvnIyQt6kY80F3ypO9Bxo7o7Y.roa
Signing time:             Mon 06 Mar 2023 20:02:03 +0000
ROA not before:           Mon 06 Mar 2023 20:02:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        185.90.220.0/22 maxlen: 24
                          83.229.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 09:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b8:84:4e:c5:b1:df:81:2c:ff:42:da:3c:82:fd:2d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
        Validity
            Not Before: Mar  6 20:02:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48b66f9c8c90b7a918f34177ca93bd071a3ba3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:d9:46:72:3d:a3:50:44:3d:33:01:6c:ed:
                    5f:d9:1c:88:e4:1f:60:19:54:ca:84:15:50:ab:a8:
                    2e:39:42:78:69:a7:c6:ea:1e:92:ee:d1:74:78:a3:
                    7a:2f:dc:58:98:a5:df:b3:92:61:a7:1f:46:5f:2d:
                    90:0d:6f:02:bc:c6:ce:cb:c0:eb:a7:2c:39:3b:3f:
                    52:72:0a:0a:73:b3:53:97:8d:6b:22:a6:40:cf:00:
                    de:72:f2:85:a7:3d:47:51:d5:6c:e6:06:e5:20:44:
                    fa:d8:1b:f4:8e:2c:a6:c7:73:c6:37:f1:42:6d:94:
                    9e:55:9e:3f:2a:00:26:ac:26:f9:3c:3b:7f:97:bb:
                    44:fc:d1:22:35:bb:03:3a:1a:74:77:1f:d2:dc:22:
                    b7:4f:58:03:1e:55:c1:65:cc:cb:28:f6:37:fa:38:
                    7f:87:60:70:77:57:26:e3:3e:81:49:25:6b:a1:ec:
                    d1:fb:01:4f:75:bc:cc:c5:d9:22:65:82:5e:ef:14:
                    36:dd:62:f3:f1:ad:f3:d2:cc:8a:c6:c2:f7:a0:ad:
                    5c:28:e8:d4:d7:be:61:ae:f5:9b:43:8c:77:ef:a9:
                    7b:33:4e:ee:11:80:12:3a:59:83:cf:94:65:d5:80:
                    92:89:a2:48:ce:83:c6:e3:e9:a1:05:ed:b3:4a:e6:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B6:6F:9C:8C:90:B7:A9:18:F3:41:77:CA:93:BD:07:1A:3B:A3:B6
            X509v3 Authority Key Identifier:
                keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/SLZvnIyQt6kY80F3ypO9Bxo7o7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.113.0/24
                  185.90.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:d0:9f:a5:d2:51:c1:6d:57:bd:e0:69:d9:52:80:1f:f8:
         13:e5:00:1e:c8:d1:b8:0c:8f:bf:24:c9:d2:5c:50:f2:3f:d9:
         1b:87:9e:06:78:aa:b1:5e:f7:ac:73:23:3e:67:ff:67:6b:b0:
         47:63:d7:c0:5f:81:0f:73:9e:67:e7:fb:67:07:40:73:16:bc:
         dc:1a:11:67:dc:86:dd:5c:a8:19:5e:74:51:56:55:29:f0:cf:
         1b:5b:ab:06:72:5f:d1:16:e0:ad:45:da:c5:71:b9:3b:24:46:
         46:2c:e7:53:c2:ac:0d:10:d6:58:46:67:7c:16:69:fc:6c:3e:
         fe:23:36:30:d1:7c:d9:e8:90:30:21:e1:73:83:71:fc:0c:99:
         af:87:f8:5f:6f:50:c2:bd:6b:0a:20:c2:f0:aa:cd:c5:4d:b7:
         9a:24:52:87:91:10:fe:c4:9f:2b:4e:52:b1:9f:9f:da:19:e6:
         2b:6a:67:0c:60:df:ab:32:c9:59:a4:46:d7:ee:25:fa:5e:e2:
         6a:55:9c:69:22:56:3f:85:39:a3:bb:d0:e4:3a:23:29:0a:b1:
         8b:a3:c3:86:95:62:3f:7f:2f:62:37:01:5e:b3:da:22:52:1d:
         9d:61:52:47:50:ba:51:a7:f3:6a:9c:e6:b8:44:92:9a:2d:6d:
         85:0d:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org