Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/GV6Eyf7uDaOqDvx7JsXu_yopwwQ.roa
File:                     GV6Eyf7uDaOqDvx7JsXu_yopwwQ.roa (raw, json)
Hash identifier:          vvwzH2u8BmeE+aExtB5Rru8xcLaIDRmEw9QySQLEnCg=
Subject key identifier:   19:5E:84:C9:FE:EE:0D:A3:AA:0E:FC:7B:26:C5:EE:FF:2A:29:C3:04
Certificate issuer:       /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial:       018B6BBB412F3A064E035468783CDE15006B
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/GV6Eyf7uDaOqDvx7JsXu_yopwwQ.roa
Signing time:             Thu 26 Oct 2023 11:25:15 +0000
ROA not before:           Thu 26 Oct 2023 11:25:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29690
IP address blocks:        83.101.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 02 Nov 2023 11:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6b:bb:41:2f:3a:06:4e:03:54:68:78:3c:de:15:00:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
        Validity
            Not Before: Oct 26 11:25:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=195e84c9feee0da3aa0efc7b26c5eeff2a29c304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:38:dc:4d:05:fe:50:fc:4e:3f:75:f2:db:
                    67:7e:4c:8e:b7:f4:2b:c1:4d:ac:05:8b:db:47:0e:
                    03:b4:e2:83:69:65:48:4e:e4:c9:17:19:69:83:16:
                    15:03:ca:54:63:d2:af:11:1f:af:05:fb:21:8c:6a:
                    b8:e2:31:73:12:98:dd:15:57:83:08:4f:5e:0a:c9:
                    4f:53:d7:06:28:c2:a5:af:e3:5b:8b:01:1e:81:2a:
                    4f:1e:15:62:2c:3d:d1:4c:64:47:d7:51:19:29:84:
                    bd:5f:85:d9:89:df:a3:63:10:1a:34:6c:ec:d7:a1:
                    70:9f:97:36:6e:74:04:e0:99:85:a9:25:ee:32:f3:
                    99:c9:6e:84:10:81:4a:26:94:27:8c:db:1a:bf:3d:
                    15:0d:dc:42:eb:a8:38:84:ad:3d:da:5a:37:bf:99:
                    95:c2:79:3e:a2:88:29:9d:43:b5:26:c8:ef:5f:4f:
                    7d:df:0b:20:97:1f:a5:44:98:87:6f:fd:67:be:4c:
                    de:a5:c4:d4:8d:e9:b1:fc:40:b9:75:85:08:ed:87:
                    af:c7:93:73:3c:1b:a0:27:e2:85:b7:23:6d:4c:31:
                    55:61:e8:e1:ec:72:c4:1d:88:a0:b5:92:7a:1d:7b:
                    c2:13:bb:04:bf:e0:60:0a:06:0f:4f:e5:a0:81:eb:
                    a7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:84:C9:FE:EE:0D:A3:AA:0E:FC:7B:26:C5:EE:FF:2A:29:C3:04
            X509v3 Authority Key Identifier:
                keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/GV6Eyf7uDaOqDvx7JsXu_yopwwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.101.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:95:73:e8:27:dc:ec:22:ef:7b:f3:bd:fb:84:10:28:16:ea:
         e6:a9:12:1a:15:5d:9e:be:4e:27:11:b9:fa:ab:83:36:9a:ee:
         7a:2b:4c:79:a8:55:ca:00:cc:c5:62:98:1b:a1:0f:00:9b:45:
         f7:98:56:53:64:aa:d5:72:b7:0d:59:82:f3:03:ec:08:ec:86:
         df:67:a4:8d:43:73:af:15:e9:ff:0e:e2:89:0a:93:e6:01:33:
         7f:b1:4b:c8:0c:84:1d:29:6f:93:a9:fc:33:1d:23:9f:dd:cb:
         49:2f:0f:fc:d4:30:c3:81:a3:04:5d:3a:b3:13:be:cf:e8:ba:
         8e:e7:8f:ca:ca:e4:7f:37:3b:5b:61:4b:c4:d1:f5:66:46:f7:
         1c:9b:1a:17:25:81:bb:74:3c:43:4f:43:04:f2:bd:fa:93:84:
         76:22:6a:49:fe:02:b5:62:53:3a:19:e9:24:de:8e:dc:63:b1:
         1f:de:d0:56:a9:cf:21:c9:db:9a:70:1b:79:bd:ce:43:49:9f:
         3a:0d:d4:80:f1:44:fe:83:05:70:5b:84:3a:52:4d:27:59:db:
         03:0e:ce:44:5d:e1:0c:50:c1:4a:d5:2b:39:a5:61:72:cc:56:
         7f:23:3b:d6:a6:c0:87:92:3f:04:f3:dc:49:ed:95:a1:21:4b:
         f2:0c:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:36 2024 by rpki-client on console-fra.rpki-client.org