Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/Dx-65dprWRX7BTMder3jXyWHNlU.roa
File:                     Dx-65dprWRX7BTMder3jXyWHNlU.roa (raw, json)
Hash identifier:          RjyW6jb/c2/Qyu/JN4/172BB54bToH/gUBSkulZn7Qw=
Subject key identifier:   0F:1F:BA:E5:DA:6B:59:15:FB:05:33:1D:7A:BD:E3:5F:25:87:36:55
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       01905360D9B5AAAC1340C96017D303CBDC7A
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/Dx-65dprWRX7BTMder3jXyWHNlU.roa
Signing time:             Wed 26 Jun 2024 07:09:34 +0000
ROA not before:           Wed 26 Jun 2024 07:09:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        83.136.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jun 2024 15:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:60:d9:b5:aa:ac:13:40:c9:60:17:d3:03:cb:dc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Jun 26 07:09:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0f1fbae5da6b5915fb05331d7abde35f25873655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:ca:9c:9a:18:a0:a2:8e:38:a4:ba:45:f4:
                    11:c6:5f:60:84:a2:6e:d0:0a:c9:3b:a4:20:9f:7a:
                    ca:6b:51:33:92:c2:3b:44:43:b7:ad:47:fd:69:69:
                    aa:d1:9b:76:bc:2b:74:bf:24:e7:ef:30:5b:90:f9:
                    fc:e2:9e:05:66:92:59:81:e4:46:ee:d0:db:19:5f:
                    af:37:f2:e6:16:8c:f2:b6:40:6c:81:5a:69:ea:9f:
                    c1:1a:54:d6:56:1b:43:86:8b:69:be:5e:bb:ad:5b:
                    ea:7f:33:72:f6:81:84:0b:4f:d1:dd:bc:72:1d:1d:
                    6d:bd:f4:b1:d9:fa:80:f6:ca:01:ec:e8:9d:51:bd:
                    f2:01:ff:2d:c8:96:64:4e:51:8f:dd:6c:ea:9d:2b:
                    1c:fb:56:4b:01:39:eb:30:c1:95:2e:7c:ec:f6:0c:
                    29:5b:b0:fd:84:58:74:e3:62:e9:45:82:22:4b:d1:
                    25:44:98:6b:ea:9c:40:55:9b:85:94:76:c2:91:12:
                    1c:d8:50:70:c0:9f:a9:fa:9d:28:43:11:65:10:ee:
                    33:01:6b:22:b7:3a:4f:a8:7d:9b:a3:29:a2:07:76:
                    17:fb:a9:ab:cc:b0:1c:c1:98:87:38:62:a5:f2:67:
                    d6:3a:f0:44:18:68:b0:67:80:34:0c:66:d7:23:1c:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1F:BA:E5:DA:6B:59:15:FB:05:33:1D:7A:BD:E3:5F:25:87:36:55
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/Dx-65dprWRX7BTMder3jXyWHNlU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:89:24:c8:5b:33:b2:64:d2:6b:4f:95:8b:dd:8f:90:18:
         fc:05:ae:8d:40:11:89:b2:44:14:3b:57:a9:78:49:47:aa:b2:
         08:94:ec:84:51:e4:cc:37:c0:4c:43:6f:17:ee:e4:72:5e:e9:
         56:24:69:9e:b9:cb:24:bc:51:fb:89:61:71:58:95:cc:82:42:
         f8:e1:4a:99:27:09:89:d2:28:28:3e:9f:09:4e:d6:b9:91:c2:
         02:02:a0:bf:50:d4:55:b8:99:37:6d:90:ee:b8:1c:b4:de:e4:
         3f:02:e6:41:24:62:06:14:53:72:c4:de:56:3f:6d:c6:6c:ee:
         60:5b:9f:6a:48:27:00:91:ed:c9:b9:26:ca:ed:ea:7f:22:f9:
         18:88:6b:28:59:bf:98:19:0a:87:12:5e:d8:a3:11:7d:b6:86:
         b7:b7:84:bf:97:0a:5b:77:35:8b:48:d7:15:b2:bc:09:06:10:
         d8:b0:7f:4d:24:4f:91:48:e7:3b:8a:f0:59:af:62:25:5a:53:
         3d:9d:30:a1:2b:47:41:79:fd:51:00:bd:58:2e:80:3d:cb:de:
         f1:cc:4e:9a:9d:4e:7b:f8:7d:9f:67:9c:d1:de:16:53:c1:d0:
         68:32:df:13:24:f4:22:d1:3f:ad:78:67:55:29:a3:fc:63:1e:
         33:34:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:45:54 2024 by rpki-client on console-ams.rpki-client.org