Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ZWOeEf1ZAaOqF2ZFFw4qmtieZSQ.roa
File:                     ZWOeEf1ZAaOqF2ZFFw4qmtieZSQ.roa (raw, json)
Hash identifier:          z6liFflPRKS4TheJmA8qTFr+djooQ3hhPBKmUtbdaYU=
Subject key identifier:   65:63:9E:11:FD:59:01:A3:AA:17:66:45:17:0E:2A:9A:D8:9E:65:24
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       018F767982F4F51AE47EA52F9DEA7022A64B
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ZWOeEf1ZAaOqF2ZFFw4qmtieZSQ.roa
Signing time:             Tue 14 May 2024 09:40:25 +0000
ROA not before:           Tue 14 May 2024 09:40:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396362
IP address blocks:        83.143.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 20:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:76:79:82:f4:f5:1a:e4:7e:a5:2f:9d:ea:70:22:a6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: May 14 09:40:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=65639e11fd5901a3aa176645170e2a9ad89e6524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:0c:c4:e9:30:b8:6e:cc:82:4e:fe:57:c1:
                    37:13:d1:64:df:fc:d5:49:1d:01:3e:de:7c:7c:ac:
                    a9:b8:57:8f:02:cb:b6:a6:b1:59:06:46:3c:14:2a:
                    71:94:ab:c6:4f:3f:cc:ea:7f:37:ca:f3:92:61:05:
                    7b:04:35:34:67:14:31:e1:80:6a:ae:f8:6d:c2:ed:
                    7f:41:20:6e:fc:8a:31:d3:17:3b:a6:dd:56:31:4f:
                    61:d4:05:11:11:68:72:26:e0:dc:d3:6b:0c:ee:b1:
                    05:cb:58:6f:65:97:ed:a7:ac:a8:c0:4d:2f:4e:9b:
                    04:36:76:cb:13:66:f7:ac:e5:cc:b2:d8:1c:76:34:
                    c1:0a:98:fd:bf:d7:90:ee:7b:56:af:40:ca:22:9d:
                    0a:3f:e9:ba:2d:e7:94:3c:75:d8:90:c8:7d:db:1b:
                    54:13:e2:cc:84:9f:8e:2e:5e:b3:eb:ef:34:5e:75:
                    93:0f:3e:9f:88:a4:73:0c:5b:3e:03:6c:51:db:16:
                    da:63:e0:ee:38:68:b1:c5:02:87:a3:39:61:1e:a0:
                    f8:d7:5d:e0:b3:53:45:fe:26:62:46:4e:06:5b:e1:
                    4a:93:32:ae:12:31:7a:a8:20:e4:3f:3d:64:35:02:
                    41:89:68:03:26:44:78:93:eb:6e:04:e6:74:e7:57:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:9E:11:FD:59:01:A3:AA:17:66:45:17:0E:2A:9A:D8:9E:65:24
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/ZWOeEf1ZAaOqF2ZFFw4qmtieZSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.143.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:57:34:66:d3:7b:94:40:eb:18:fe:67:8e:11:2f:bd:9d:df:
         67:6c:27:e1:dc:b0:47:b9:10:38:58:89:1d:dc:83:84:c9:ac:
         f5:fb:db:b5:3f:33:57:03:29:13:9e:a2:74:6f:c8:04:58:72:
         5b:9c:3d:3e:5c:f2:72:ff:7a:15:91:96:88:62:68:75:26:ed:
         0f:95:47:be:25:b4:c6:b1:fd:d2:a7:9c:a1:40:2b:d6:00:60:
         fb:84:9f:06:a0:34:8c:b8:47:39:43:de:99:75:49:e9:19:9b:
         37:44:54:f9:f5:87:8b:07:1c:63:45:79:39:ec:b8:9b:5f:f4:
         a5:d1:15:78:78:ce:61:26:60:52:55:36:31:9a:72:fb:78:78:
         c6:d7:c7:cb:c4:3f:0c:0e:e5:95:49:7f:8f:28:d9:bd:f2:a3:
         5f:3d:09:98:37:da:80:fa:76:a8:f7:cb:4d:0c:13:cd:c7:4f:
         51:fc:d8:51:8f:fc:11:d7:32:ba:6a:17:75:15:c1:5e:a5:6f:
         5f:88:3f:5c:de:15:4f:b6:16:a2:6d:1f:43:a8:87:14:30:9a:
         94:bd:c2:a1:6a:aa:0f:a2:57:f0:92:58:4a:d4:c0:ac:05:54:
         eb:e1:73:b4:91:23:92:77:2b:ef:39:1f:58:20:77:6f:28:43:
         c7:84:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:18:17 2024 by rpki-client on console-fra.rpki-client.org