Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/83dvStWjQ80zvJ00_N514YoMJG0.roa
File:                     83dvStWjQ80zvJ00_N514YoMJG0.roa (raw, json)
Hash identifier:          ot5sAO5hqIKJ2SVCFaZyoGfRfwShZNe/r5fltYhCmS8=
Subject key identifier:   F3:77:6F:4A:D5:A3:43:CD:33:BC:9D:34:FC:DE:75:E1:8A:0C:24:6D
Certificate issuer:       /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial:       01856D13C8B40A434A20AAB9F805A8654BCB
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/83dvStWjQ80zvJ00_N514YoMJG0.roa
Signing time:             Sun 01 Jan 2023 11:24:51 +0000
ROA not before:           Sun 01 Jan 2023 11:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13190
IP address blocks:        185.117.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:13:c8:b4:0a:43:4a:20:aa:b9:f8:05:a8:65:4b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
        Validity
            Not Before: Jan  1 11:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3776f4ad5a343cd33bc9d34fcde75e18a0c246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:3e:64:fd:a6:ce:8c:82:cf:2f:52:60:46:
                    49:5c:8d:52:15:50:3a:4e:e2:ad:2a:7c:75:c1:24:
                    48:af:24:91:09:d8:5a:89:66:09:a5:8e:7b:67:a9:
                    d3:9e:31:0c:d8:6e:91:7a:15:a8:b4:bc:68:76:b3:
                    ae:19:e6:55:97:f9:52:a4:88:27:de:9d:ca:08:5e:
                    15:e7:01:08:4c:b5:08:9e:62:6b:41:cb:50:4e:9b:
                    f4:44:48:e8:0e:d7:cc:cb:2d:cb:cf:cd:6f:28:b6:
                    8e:34:5f:64:43:63:3c:df:73:e7:99:de:d3:0f:f9:
                    ac:09:6a:54:6f:6d:43:71:8e:fd:92:5a:21:e0:cf:
                    51:1d:38:a6:80:8c:97:99:9f:17:36:1a:4f:9e:b4:
                    b4:9d:02:74:d0:5a:3c:8a:b5:3c:6d:52:84:26:3b:
                    92:22:0f:f5:23:70:f2:e8:d0:20:79:41:47:6e:a7:
                    98:97:9e:b5:67:85:b0:84:14:4f:21:7f:1a:e3:d5:
                    14:ee:20:ca:d5:81:5a:22:e9:a4:21:6c:1a:43:75:
                    da:00:1b:e9:57:d8:ed:71:d7:f8:3b:02:18:87:f7:
                    54:86:64:6e:bb:51:a2:48:39:ed:dd:70:eb:fb:b6:
                    9c:82:9b:eb:0b:0d:04:10:c6:88:a2:bd:4b:ae:0b:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:6F:4A:D5:A3:43:CD:33:BC:9D:34:FC:DE:75:E1:8A:0C:24:6D
            X509v3 Authority Key Identifier:
                keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/83dvStWjQ80zvJ00_N514YoMJG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:07:9d:48:9a:be:00:88:6b:4e:c3:ee:15:ea:0f:4c:23:f5:
         8f:1a:40:c0:19:d4:42:43:0f:a9:b2:ef:25:d5:cd:44:4b:95:
         32:5a:d7:aa:89:b5:e2:4c:62:18:e9:6c:0d:b3:22:64:e7:b0:
         9b:1c:c0:64:3b:99:73:a4:6a:aa:ed:9a:a2:ea:da:93:85:04:
         80:d0:74:a1:2c:78:e7:39:fc:44:2a:ab:89:56:38:af:29:47:
         e6:56:63:fa:18:52:7c:ad:b4:aa:4e:68:39:f9:5e:62:af:f2:
         df:43:72:4a:ff:4c:58:fa:6b:ec:af:a7:2c:2e:15:af:5d:b5:
         00:7a:73:41:b3:9a:25:3f:c9:2a:5d:20:e4:d7:ad:eb:b8:52:
         20:0d:66:e1:60:e1:67:f5:3c:ad:e6:0d:e2:1c:86:2e:28:84:
         3d:23:58:e6:d9:b0:7c:c4:b0:41:4a:9d:39:4b:57:6d:df:ea:
         48:98:26:9c:06:f8:e3:24:85:52:bf:65:f0:e4:fd:f8:7a:ea:
         9e:28:6d:7a:38:9f:a8:4a:e3:75:55:2c:d4:00:20:e5:74:8d:
         cb:b4:fe:ce:8d:50:ea:a7:0a:32:82:4f:e8:5d:18:45:58:39:
         d3:dd:50:05:b9:9b:8e:d0:13:bb:00:0f:5d:54:4c:f2:4b:e9:
         50:2b:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:26 2024 by rpki-client on console-fra.rpki-client.org