Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x50GWARbRqS7wV8L4e6O3TZWmjg.roa
File:                     x50GWARbRqS7wV8L4e6O3TZWmjg.roa (raw, json)
Hash identifier:          sg8RmPDDHh/N3ykoGdHnPCDOENpHhrGW4t+t1ncTIuo=
Subject key identifier:   C7:9D:06:58:04:5B:46:A4:BB:C1:5F:0B:E1:EE:8E:DD:36:56:9A:38
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0189F7B78B9C494434C2EB3E74BD60620A18
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x50GWARbRqS7wV8L4e6O3TZWmjg.roa
Signing time:             Tue 15 Aug 2023 05:42:28 +0000
ROA not before:           Tue 15 Aug 2023 05:42:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209806
IP address blocks:        83.143.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f7:b7:8b:9c:49:44:34:c2:eb:3e:74:bd:60:62:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Aug 15 05:42:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c79d0658045b46a4bbc15f0be1ee8edd36569a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:f2:1c:0d:09:75:17:93:80:2d:52:46:d3:
                    80:b6:40:f7:8d:2d:e3:b2:f3:0a:08:40:3c:25:fd:
                    0d:6f:3e:49:be:67:29:f9:8f:c0:89:fe:2b:02:d1:
                    fe:68:4b:48:08:b4:da:74:ce:47:ee:4e:cf:0e:35:
                    3f:da:89:d1:26:19:3c:3a:aa:9a:57:b4:38:d6:cf:
                    5f:e9:d0:38:75:aa:81:06:ae:4e:ca:56:34:e1:e0:
                    52:8c:21:df:ab:a0:a1:ef:90:ba:81:8a:02:4f:00:
                    89:8f:a7:d0:13:04:05:cb:e3:d6:7c:03:5d:98:8d:
                    a6:f7:c4:dc:bc:c0:74:e0:e1:ba:b3:68:fc:77:76:
                    5a:f6:9b:eb:74:8c:56:77:09:a7:c9:af:a0:6d:d5:
                    54:e7:a6:4e:5e:a3:d2:ec:69:af:66:4e:6f:5a:c4:
                    13:70:40:e1:47:d2:77:e8:49:b0:50:84:70:98:ff:
                    47:50:af:e4:9e:9c:e5:df:97:0d:7f:9a:19:e0:db:
                    b4:14:7c:a4:26:6b:d0:32:33:ce:ba:a4:3d:0c:fb:
                    d4:8f:ea:2a:b7:68:f8:6c:d4:53:22:75:74:d3:02:
                    10:4c:14:66:ab:1c:e7:29:7f:3b:52:98:fe:5e:6d:
                    1c:e3:13:db:47:0f:f2:29:86:2a:f0:81:9a:6a:43:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:06:58:04:5B:46:A4:BB:C1:5F:0B:E1:EE:8E:DD:36:56:9A:38
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/x50GWARbRqS7wV8L4e6O3TZWmjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.143.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:0b:58:a8:89:93:6b:ac:1c:e3:6f:ce:71:c0:dc:58:ab:
         ff:f7:c9:ef:0c:5b:71:25:0d:42:66:0c:3b:32:71:aa:82:41:
         ce:47:7a:bc:63:f1:e9:1c:da:ed:13:90:df:52:cb:7e:02:81:
         00:ff:65:51:e6:3f:7c:22:ae:08:9f:c6:94:8d:e0:54:67:09:
         f0:fc:7c:03:15:3e:56:d4:0c:5b:9e:27:16:03:77:ce:d7:67:
         82:e3:17:06:ce:6a:01:65:f1:2e:22:b3:c4:74:95:94:d9:bb:
         d9:4d:23:2f:e8:00:ec:59:95:31:a9:ff:8a:8a:e6:94:38:a7:
         59:ee:b4:46:40:f4:22:a3:ef:24:d4:78:c2:32:a1:68:5c:27:
         14:df:1b:82:63:0a:ae:38:54:a7:d3:14:1c:1e:f2:75:4c:aa:
         45:3b:d3:1c:22:6d:d6:b5:8e:3d:3c:4d:68:cc:7f:85:3d:09:
         77:0d:1d:f0:2e:22:33:5f:48:d7:f5:fe:53:58:be:48:d9:c1:
         1c:08:e3:b4:d1:7e:ae:94:75:a5:e3:cf:32:e7:93:3e:11:99:
         84:e4:cd:ae:8a:7a:1c:98:5d:5c:c3:75:c0:32:f6:d1:4d:7e:
         0e:15:71:28:2e:f9:e3:af:28:aa:b5:b3:ae:57:29:55:2e:1f:
         5a:d3:bb:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn3t4ucSUQ0wus+dL1gYgoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODE1MDU0MjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzlkMDY1ODA0NWI0NmE0YmJjMTVmMGJlMWVlOGVkZDM2NTY5YTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/yHA0JdReTgC1SRtOAtkD3jS3j
svMKCEA8Jf0Nbz5Jvmcp+Y/Aif4rAtH+aEtICLTadM5H7k7PDjU/2onRJhk8Oqqa
V7Q41s9f6dA4daqBBq5OylY04eBSjCHfq6Ch75C6gYoCTwCJj6fQEwQFy+PWfANd
mI2m98TcvMB04OG6s2j8d3Za9pvrdIxWdwmnya+gbdVU56ZOXqPS7GmvZk5vWsQT
cEDhR9J36EmwUIRwmP9HUK/knpzl35cNf5oZ4Nu0FHykJmvQMjPOuqQ9DPvUj+oq
t2j4bNRTInV00wIQTBRmqxznKX87Upj+Xm0c4xPbRw/yKYYq8IGaakNHBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMedBlgEW0aku8FfC+Hujt02Vpo4MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveDUwR1dBUmJScVM3d1Y4TDRlNk8zVFpXbWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU49wMA0G
CSqGSIb3DQEBCwUAA4IBAQAPhwtYqImTa6wc42/OccDcWKv/98nvDFtxJQ1CZgw7
MnGqgkHOR3q8Y/HpHNrtE5DfUst+AoEA/2VR5j98Iq4In8aUjeBUZwnw/HwDFT5W
1AxbnicWA3fO12eC4xcGzmoBZfEuIrPEdJWU2bvZTSMv6ADsWZUxqf+KiuaUOKdZ
7rRGQPQio+8k1HjCMqFoXCcU3xuCYwquOFSn0xQcHvJ1TKpFO9McIm3WtY49PE1o
zH+FPQl3DR3wLiIzX0jX9f5TWL5I2cEcCOO00X6ulHWl488y55M+EZmE5M2uinoc
mF1cw3XAMvbRTX4OFXEoLvnjryiqtbOuVylVLh9a07tA
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:46 2024 by rpki-client on console-ams.rpki-client.org