Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/83yHX0f_POSutdVWOd7KvimzH2U.roa
File:                     83yHX0f_POSutdVWOd7KvimzH2U.roa (raw, json)
Hash identifier:          qGEm/J0LbVsL1zW1Gjo9NaZ0MM5Hlf7Alkc0TQtvUwY=
Subject key identifier:   F3:7C:87:5F:47:FF:3C:E4:AE:B5:D5:56:39:DE:CA:BE:29:B3:1F:65
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       018CC424945D8A8740D39EDD484A28B2A406
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/83yHX0f_POSutdVWOd7KvimzH2U.roa
Signing time:             Mon 01 Jan 2024 08:29:40 +0000
ROA not before:           Mon 01 Jan 2024 08:29:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        89.23.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 08:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:94:5d:8a:87:40:d3:9e:dd:48:4a:28:b2:a4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Jan  1 08:29:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f37c875f47ff3ce4aeb5d55639decabe29b31f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:b1:8b:e4:ad:ab:79:73:62:95:ce:38:26:
                    52:af:cd:09:58:fa:53:9b:9a:32:16:ab:2a:c0:08:
                    a6:0e:51:df:95:03:91:89:b3:8b:7d:f9:3d:d1:cd:
                    34:16:dd:90:93:e9:b8:45:2e:c8:a3:97:85:25:a9:
                    e1:8c:62:53:71:91:cc:f6:e9:82:2a:0c:ce:d9:8e:
                    69:fd:22:de:6b:13:4d:08:bc:24:eb:84:63:04:e2:
                    61:d0:76:60:1f:6c:0d:97:c0:0d:dc:f1:90:80:c1:
                    51:94:3a:2b:5e:7f:22:29:4a:41:08:39:22:8d:35:
                    9c:58:97:51:d9:a3:25:dd:c0:9c:85:f4:53:e5:63:
                    6d:9c:f1:45:a9:0a:bc:a0:2d:d3:d8:1c:b8:2d:f0:
                    47:fe:34:d0:a9:bd:b5:b6:30:18:ba:f4:03:31:ed:
                    47:b8:29:2a:6d:df:76:72:21:89:48:65:2a:d1:dc:
                    2b:b3:88:58:35:4b:a0:38:f1:47:40:c0:62:fa:94:
                    59:11:00:84:84:ef:d7:34:6e:8c:8d:2d:23:05:34:
                    71:d4:38:9e:31:8e:79:fa:fb:e4:0d:17:f2:60:b3:
                    32:78:fc:95:1c:06:87:37:e0:d1:1a:1f:87:c3:48:
                    ce:89:aa:c0:c6:47:79:14:bd:36:63:5f:0a:cf:ef:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:87:5F:47:FF:3C:E4:AE:B5:D5:56:39:DE:CA:BE:29:B3:1F:65
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/83yHX0f_POSutdVWOd7KvimzH2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:0b:4b:a4:ca:39:5b:72:9c:2e:27:a3:15:41:9a:9a:4d:
         1b:db:99:e8:06:f1:08:f9:b2:68:fb:67:e2:c6:48:62:fb:ee:
         ed:27:09:74:a5:6c:9e:c8:03:d7:de:8e:ec:fa:f3:13:5d:59:
         35:26:90:5a:d9:1e:ac:f7:76:ad:68:03:08:f5:60:16:56:dc:
         f1:ee:52:e4:78:c9:ae:25:7b:7d:9e:64:2f:80:9d:5b:98:f3:
         a1:e7:60:54:0d:c2:3e:24:22:70:6f:f4:ce:fc:e5:b8:10:eb:
         9d:81:15:ac:e6:57:c7:d6:85:27:10:f8:b9:88:d1:b5:6b:f1:
         4f:58:5e:53:4d:54:9c:2d:f3:2c:75:65:70:bb:21:1c:f2:a8:
         0a:58:20:4d:d3:df:a9:6a:b1:5c:87:26:31:e8:cb:63:20:f4:
         b0:9a:6f:f4:44:fc:4a:09:64:2f:fc:a1:93:a5:cf:bb:e1:cb:
         35:ea:84:45:dc:b4:f3:84:74:12:8f:2f:28:c6:c4:5e:37:42:
         f6:c7:72:7c:a2:67:18:ed:9c:77:2c:be:3e:16:27:97:1c:09:
         d3:d6:00:f5:aa:04:c8:0a:fb:2a:37:73:53:27:a3:95:3e:70:
         a7:22:91:c3:bc:4e:67:5e:a8:01:0b:d5:d9:5b:2b:07:02:b9:
         01:b5:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org