Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4tiPf2SXGIla_SSwL69KSi-641k.roa
File:                     4tiPf2SXGIla_SSwL69KSi-641k.roa (raw, json)
Hash identifier:          iaLKTPqWIuEeXae6Mli9UgvNQwzGYpU5duE6XjIBqrs=
Subject key identifier:   E2:D8:8F:7F:64:97:18:89:5A:FD:24:B0:2F:AF:4A:4A:2F:BA:E3:59
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       0187C831D443756A3D73E0B29D253034585E
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4tiPf2SXGIla_SSwL69KSi-641k.roa
Signing time:             Fri 28 Apr 2023 14:08:41 +0000
ROA not before:           Fri 28 Apr 2023 14:08:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        83.136.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c8:31:d4:43:75:6a:3d:73:e0:b2:9d:25:30:34:58:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Apr 28 14:08:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e2d88f7f649718895afd24b02faf4a4a2fbae359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:f4:5a:78:86:ac:bc:7e:cf:31:8e:25:4a:
                    f5:4b:f2:c2:72:94:40:f4:17:ae:f1:49:c9:ad:aa:
                    b3:fd:97:3e:0d:01:24:1c:ab:27:de:43:9a:08:4c:
                    f0:a9:17:65:fb:8d:b8:dc:44:70:bd:4e:56:e7:77:
                    34:9f:23:29:6e:7f:7e:51:cf:8d:27:f4:e9:04:ab:
                    06:c7:44:f0:21:2b:3f:15:03:11:29:03:0c:db:bb:
                    68:8c:44:89:61:d0:81:37:c8:5d:21:05:72:62:40:
                    71:6e:94:93:1a:7e:2c:d7:f7:06:cf:e3:3c:4a:7c:
                    6e:6a:13:f4:0a:b0:35:75:2c:68:b8:77:84:0f:7a:
                    bf:5e:e8:cf:58:a5:57:61:11:b7:84:31:60:11:81:
                    11:44:86:f1:31:c3:2c:69:8d:6d:24:64:39:47:2e:
                    32:46:a7:54:62:7a:cb:63:e1:d6:76:9a:34:34:bf:
                    1b:f9:92:a4:e7:9d:34:82:a9:53:4a:d4:53:8b:fb:
                    7b:5c:3f:1a:9a:3f:c7:f7:59:9d:8a:9c:fb:36:b1:
                    ed:67:8b:5b:36:ff:a6:88:f9:ba:5a:61:89:ad:80:
                    c1:5b:ca:04:53:ed:88:1d:6b:e3:91:d6:ff:6d:8f:
                    19:54:c1:94:a8:73:a9:d1:24:dd:3a:a7:0e:0d:d0:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D8:8F:7F:64:97:18:89:5A:FD:24:B0:2F:AF:4A:4A:2F:BA:E3:59
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4tiPf2SXGIla_SSwL69KSi-641k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:3b:31:08:eb:42:a4:ac:97:c6:81:95:db:e4:82:20:11:
         91:3a:1b:91:d2:4d:87:fc:4a:23:2e:20:a0:a7:07:05:8b:1e:
         b9:df:10:8e:1e:43:f7:5d:ca:a5:3b:2e:9c:9f:d0:e7:66:92:
         17:65:9c:2a:1e:55:17:2a:7f:f0:a1:e1:fc:5e:88:29:43:b0:
         1b:4d:86:d0:88:bd:76:3f:b0:cc:16:bc:18:0d:13:bc:63:83:
         e6:91:11:80:88:e2:01:8a:c2:29:7f:b1:f9:d4:d0:2c:1c:29:
         92:78:55:61:c9:ff:c0:fa:28:3a:4a:3e:02:08:d0:be:f6:8e:
         a5:b7:4c:6a:13:06:a9:4c:50:44:8f:e1:ae:6e:d8:d6:a5:f9:
         58:80:01:2d:33:1d:ed:93:90:b2:af:cd:bf:c8:ac:71:7e:33:
         fb:68:1d:fe:91:06:7c:e1:47:4c:64:9d:88:ae:ad:c7:34:14:
         fe:d5:c1:e9:19:e7:04:16:46:6d:68:47:0f:48:e8:69:5b:04:
         40:dd:a7:ee:41:e3:26:7d:e4:63:a3:91:ed:cb:82:b5:5f:82:
         34:72:97:3a:71:ff:8f:ff:b3:c5:93:3b:be:ed:8f:da:03:75:
         3e:f7:c9:11:f0:78:b3:c6:4f:bc:06:5d:af:93:6d:d6:fd:f1:
         d1:35:da:bc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYfIMdRDdWo9c+CynSUwNFheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjMwNDI4MTQwODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmQ4OGY3ZjY0OTcxODg5NWFmZDI0YjAyZmFmNGE0YTJmYmFlMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvj0WniGrLx+zzGOJUr1S/LCcpRA
9Beu8UnJraqz/Zc+DQEkHKsn3kOaCEzwqRdl+4243ERwvU5W53c0nyMpbn9+Uc+N
J/TpBKsGx0TwISs/FQMRKQMM27tojESJYdCBN8hdIQVyYkBxbpSTGn4s1/cGz+M8
SnxuahP0CrA1dSxouHeED3q/XujPWKVXYRG3hDFgEYERRIbxMcMsaY1tJGQ5Ry4y
RqdUYnrLY+HWdpo0NL8b+ZKk5500gqlTStRTi/t7XD8amj/H91mdipz7NrHtZ4tb
Nv+miPm6WmGJrYDBW8oEU+2IHWvjkdb/bY8ZVMGUqHOp0STdOqcODdBbOQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOLYj39klxiJWv0ksC+vSkovuuNZMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xLzR0aVBmMlNYR0lsYV9TU3dMNjlLU2ktNjQxay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTiNUw
DQYJKoZIhvcNAQELBQADggEBAJ3yOzEI60KkrJfGgZXb5IIgEZE6G5HSTYf8SiMu
IKCnBwWLHrnfEI4eQ/ddyqU7Lpyf0OdmkhdlnCoeVRcqf/Ch4fxeiClDsBtNhtCI
vXY/sMwWvBgNE7xjg+aREYCI4gGKwil/sfnU0CwcKZJ4VWHJ/8D6KDpKPgII0L72
jqW3TGoTBqlMUESP4a5u2Nal+ViAAS0zHe2TkLKvzb/IrHF+M/toHf6RBnzhR0xk
nYiurcc0FP7VwekZ5wQWRm1oRw9I6GlbBEDdp+5B4yZ95GOjke3LgrVfgjRylzpx
/4//s8WTO77tj9oDdT73yRHweLPGT7wGXa+Tbdb98dE12rw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org