Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GB-jY_UBpFysOVmL1JfHJZ-cX6o.roa
File:                     GB-jY_UBpFysOVmL1JfHJZ-cX6o.roa (raw, json)
Hash identifier:          OeYizbpKz1UWPNTGH1PuZdYUTQnZo6JLygaOKBmHahA=
Subject key identifier:   18:1F:A3:63:F5:01:A4:5C:AC:39:59:8B:D4:97:C7:25:9F:9C:5F:AA
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018B24EA989982850FDDB2800CD93A528D3E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GB-jY_UBpFysOVmL1JfHJZ-cX6o.roa
Signing time:             Thu 12 Oct 2023 17:23:56 +0000
ROA not before:           Thu 12 Oct 2023 17:23:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54252
IP address blocks:        83.219.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:24:ea:98:99:82:85:0f:dd:b2:80:0c:d9:3a:52:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Oct 12 17:23:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=181fa363f501a45cac39598bd497c7259f9c5faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:97:a4:6f:d1:cb:c9:12:ff:73:11:b8:f9:
                    e2:16:25:f8:cb:48:9f:93:73:62:11:d4:f2:9b:a1:
                    04:2f:68:c2:16:86:be:82:96:f6:8f:6d:4d:88:c0:
                    72:ef:ae:63:54:96:c4:18:57:b3:a8:57:0d:2c:0d:
                    cc:48:58:96:d9:59:68:3b:c4:01:7b:2f:df:50:68:
                    84:d8:9c:4f:5f:a4:4e:65:08:25:9a:05:b1:e6:64:
                    9e:9c:03:5f:97:18:c2:38:c8:44:38:9d:ab:f1:51:
                    38:ac:be:d5:ef:be:5e:02:4f:02:1f:63:bb:d7:b5:
                    7a:ad:e5:7f:f2:d0:6f:65:12:05:44:64:04:d7:02:
                    1f:f2:25:d9:10:de:c3:97:1d:89:11:28:9f:c2:cc:
                    34:6f:e9:3c:a2:3b:c0:30:c8:d8:ac:bb:da:6c:15:
                    74:b6:da:87:6d:b7:12:07:bd:84:3b:96:da:3b:c8:
                    0b:12:52:42:e9:9f:55:68:2a:e7:bb:e7:0b:2a:d8:
                    fb:f4:b7:7e:72:a7:c7:af:7b:fc:ee:02:2f:0c:d9:
                    b0:60:b7:c8:51:24:a2:75:60:81:ff:c4:2e:bc:f3:
                    2c:a3:77:f7:0d:a8:f8:0e:bb:06:76:e4:5e:e1:47:
                    64:78:f3:c6:d4:c8:7c:30:1c:22:9c:af:8b:b9:ba:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1F:A3:63:F5:01:A4:5C:AC:39:59:8B:D4:97:C7:25:9F:9C:5F:AA
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GB-jY_UBpFysOVmL1JfHJZ-cX6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.219.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:25:c1:a1:18:0a:3a:b0:3d:0c:1d:df:52:57:21:cc:91:a4:
         03:1b:6c:33:c0:96:9a:dd:fc:03:33:b8:d1:34:fb:fb:59:38:
         ff:2c:bc:f6:ee:9c:28:a6:20:99:c8:e0:4f:07:45:c7:3c:a4:
         00:00:fd:3a:c2:3e:2e:fd:03:ed:0b:d0:0a:b8:ab:9e:3c:ca:
         04:a0:b7:f2:6a:80:37:df:67:4c:9b:12:5e:6b:a1:21:63:47:
         5c:e5:47:29:e3:9c:e3:86:b8:d3:5e:62:f5:e3:45:25:28:77:
         5d:f5:94:c5:26:3c:23:19:d5:ec:99:75:f7:fd:12:8a:23:ad:
         1b:b9:4d:b7:59:b5:be:7b:11:e1:23:58:11:a9:4f:43:7f:1a:
         b7:f1:6c:f9:3a:c1:bb:0b:b0:6a:11:3e:fc:d5:77:51:e2:0c:
         ae:ef:7a:01:fe:c1:15:f2:55:24:76:80:c6:53:b6:6a:bd:d1:
         f9:20:1f:6f:a8:ee:0d:37:80:5e:80:d9:28:cb:d7:1e:3f:15:
         86:b5:e8:b1:82:21:50:90:1c:f4:55:ac:87:6e:2c:72:da:be:
         7f:5e:f6:4b:c2:4e:ec:88:22:74:72:93:b7:96:e7:40:a2:51:
         91:b1:2f:b1:2b:3e:a8:a7:92:f9:a9:e5:4d:07:d3:24:3d:b7:
         9c:cd:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:28 2024 by rpki-client on console-ams.rpki-client.org