Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LO7xiRTFCv3yeeOzdx_DTToE-nU.roa
File:                     LO7xiRTFCv3yeeOzdx_DTToE-nU.roa (raw, json)
Hash identifier:          wBWTmFaInfWU6AbijBJpfV+8HJZhoohWZ+00I9FZMNg=
Subject key identifier:   2C:EE:F1:89:14:C5:0A:FD:F2:79:E3:B3:77:1F:C3:4D:3A:04:FA:75
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018EEC2D28F742E6B110205244D92FEBBB86
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LO7xiRTFCv3yeeOzdx_DTToE-nU.roa
Signing time:             Wed 17 Apr 2024 13:09:26 +0000
ROA not before:           Wed 17 Apr 2024 13:09:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13920
IP address blocks:        83.143.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 18:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ec:2d:28:f7:42:e6:b1:10:20:52:44:d9:2f:eb:bb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Apr 17 13:09:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2ceef18914c50afdf279e3b3771fc34d3a04fa75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:b4:b9:ee:50:d4:45:d9:93:4e:a2:7c:1e:
                    9c:1e:a3:6c:f6:ad:77:57:c4:33:9f:90:31:29:1a:
                    2a:ac:6c:48:dc:b4:cb:76:a3:fa:25:25:59:08:8a:
                    98:66:a3:28:ab:cb:87:b1:1c:fd:b4:0a:bd:7b:9a:
                    e5:68:a6:fd:df:1e:29:21:f5:48:07:36:d6:19:95:
                    51:bb:92:1d:31:e1:63:30:ab:5d:d0:00:56:9c:28:
                    22:89:42:f7:ad:00:00:21:d1:96:bf:90:b5:ee:7f:
                    bf:9a:ae:cd:73:f2:66:35:1c:23:f5:22:9c:c2:98:
                    4d:73:03:81:31:27:5e:78:24:29:03:53:c9:1a:7c:
                    13:51:97:bc:47:7c:e2:6e:32:ca:c3:aa:d9:e3:d7:
                    21:cd:39:7d:35:ba:a8:42:a0:c9:d6:24:b5:54:97:
                    bd:33:61:a9:cb:29:76:e2:b0:3f:f8:1a:c1:46:68:
                    f0:bb:ab:08:70:c3:1b:56:b8:37:e7:28:18:49:7d:
                    8f:e5:6f:7c:98:e2:2f:21:32:fb:e8:a8:1c:73:b5:
                    22:18:dd:6e:07:16:2c:cf:43:52:b7:eb:c1:ce:24:
                    66:1b:b1:9e:e1:7e:4b:35:89:95:cf:38:f4:27:07:
                    68:0d:00:00:0f:46:71:46:5b:4c:09:a3:fc:f7:39:
                    3f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:F1:89:14:C5:0A:FD:F2:79:E3:B3:77:1F:C3:4D:3A:04:FA:75
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LO7xiRTFCv3yeeOzdx_DTToE-nU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.143.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:27:e1:b7:86:a2:ee:19:ba:eb:24:f9:20:02:5b:9a:68:
         52:5c:d4:70:cf:e2:5f:7d:5e:5a:bb:12:66:3c:0c:2f:45:48:
         0e:ab:af:7e:c5:20:8c:6e:fd:4c:d2:ea:62:fd:f6:19:67:62:
         c3:69:e6:ad:95:76:13:ee:bc:f6:38:6d:4c:73:6c:be:cc:a0:
         92:96:d5:8c:f0:f7:e0:8e:af:c5:d7:a0:3c:26:17:41:2a:36:
         9a:75:5f:b9:7f:fb:b3:d4:6b:23:a8:51:2e:45:64:09:d1:61:
         a8:37:2f:ab:5a:f0:47:78:46:53:76:32:b4:bc:41:ac:6a:29:
         6f:1c:1d:c9:06:a7:b4:bd:68:0a:36:b3:fc:f6:c5:08:fa:29:
         de:16:91:94:9f:42:6f:65:76:9d:42:3b:63:90:f1:e8:60:f2:
         69:6b:35:03:fc:a2:c7:00:a6:56:4e:77:64:fb:4f:1d:05:81:
         dd:fd:99:39:56:94:86:01:16:5f:53:dc:ac:32:27:ed:5d:6c:
         6f:e9:7f:2a:c3:18:66:06:0d:ec:ef:1d:03:d1:2b:5a:9d:c9:
         8e:76:9e:90:6d:a1:da:ae:bc:b1:41:6d:74:df:db:dc:45:93:
         bf:9d:fc:09:d3:7d:e2:ef:fe:73:03:c0:c6:1c:67:22:76:46:
         45:38:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 20:19:04 2024 by rpki-client on console-fra.rpki-client.org