Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/0hjpjuOHlXKoiVSIvwKDe3L85Vk.roa
File:                     0hjpjuOHlXKoiVSIvwKDe3L85Vk.roa (raw, json)
Hash identifier:          FvOkTYyTAUw9qZKRGFcdFj7dbSEpbooQUosSPnet2qs=
Subject key identifier:   D2:18:E9:8E:E3:87:95:72:A8:89:54:88:BF:02:83:7B:72:FC:E5:59
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       01896D2B152C0C17AAE907447AAA3FF46C40
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/0hjpjuOHlXKoiVSIvwKDe3L85Vk.roa
Signing time:             Wed 19 Jul 2023 08:01:27 +0000
ROA not before:           Wed 19 Jul 2023 08:01:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31225
IP address blocks:        83.219.224.0/19 maxlen: 19
                          83.219.227.0/24 maxlen: 24
                          83.219.228.0/24 maxlen: 24
                          83.219.233.0/24 maxlen: 24
                          83.219.231.0/24 maxlen: 24
                          83.219.232.0/24 maxlen: 24
                          83.219.229.0/24 maxlen: 24
                          83.219.230.0/24 maxlen: 24
                          83.219.234.0/24 maxlen: 24
                          83.219.235.0/24 maxlen: 24
                          83.219.240.0/24 maxlen: 24
                          83.219.238.0/24 maxlen: 24
                          83.219.239.0/24 maxlen: 24
                          83.219.236.0/24 maxlen: 24
                          83.219.237.0/24 maxlen: 24
                          83.219.241.0/24 maxlen: 24
                          83.219.242.0/24 maxlen: 24
                          83.219.246.0/24 maxlen: 24
                          83.219.244.0/24 maxlen: 24
                          83.219.248.0/24 maxlen: 24
                          83.219.249.0/24 maxlen: 24
                          83.219.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6d:2b:15:2c:0c:17:aa:e9:07:44:7a:aa:3f:f4:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Jul 19 08:01:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d218e98ee3879572a8895488bf02837b72fce559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:54:44:56:bb:71:61:49:09:85:ec:ec:fd:
                    76:5e:3b:77:0f:a9:de:0d:4f:e2:f4:fc:96:f8:2d:
                    4c:df:53:25:fa:7d:84:84:dc:50:7b:a0:33:1e:cf:
                    29:65:7c:dd:18:37:2f:13:5d:dc:2b:aa:81:91:50:
                    be:e5:55:8a:f4:d1:f8:73:2e:5e:7f:69:ce:19:c8:
                    6c:a5:ed:e3:93:cc:ed:58:e5:4e:f1:70:2f:74:81:
                    99:8b:75:a4:c0:a3:c8:af:b1:06:84:82:dc:05:c6:
                    cf:4d:04:31:dd:75:8c:e9:78:81:a5:16:f0:4a:94:
                    e9:ab:08:aa:38:5d:3d:68:44:ba:46:f2:65:15:37:
                    40:d2:7b:ed:30:17:ac:f9:9c:7d:15:7b:4d:f2:71:
                    57:20:25:c4:51:95:a9:c4:8e:97:46:22:63:db:62:
                    d9:47:f6:ee:e0:62:ed:9b:d8:6d:cb:6e:ae:5d:f6:
                    5d:4a:50:29:b7:a1:c5:54:c5:10:01:aa:de:e1:62:
                    b5:36:14:18:1f:f9:c1:3c:96:d0:bb:12:5c:ee:77:
                    f8:f8:c9:4c:46:7b:1e:46:f6:8e:b2:a4:29:62:43:
                    fe:c8:54:99:27:d4:06:b1:34:4f:b6:2d:4b:da:3f:
                    45:bb:11:c4:d5:4e:4f:02:9e:9b:de:cb:10:b2:f9:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:E9:8E:E3:87:95:72:A8:89:54:88:BF:02:83:7B:72:FC:E5:59
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/0hjpjuOHlXKoiVSIvwKDe3L85Vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.219.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:19:9f:c0:33:d8:6a:41:6e:8c:cc:2a:6c:50:52:b7:2f:
         a8:0e:58:88:56:c6:7f:a9:24:a3:ec:82:ad:ce:e8:13:5f:62:
         1b:9f:a1:2e:fd:d4:32:6a:3e:f9:36:b3:15:f6:49:c4:9c:9a:
         6a:91:6b:01:54:ec:ea:29:63:8d:2d:93:18:e2:98:47:a6:04:
         9b:41:f8:58:27:e9:6a:2d:b5:74:e4:00:22:cb:68:59:3e:e4:
         91:81:0b:70:cf:65:77:eb:62:cf:fb:e4:10:f9:a4:b5:d6:ed:
         aa:d1:83:0c:41:88:bc:b7:96:54:a9:52:c6:15:8b:81:66:f7:
         9f:fb:f9:0a:91:ed:83:54:44:6c:b9:78:53:33:1f:ef:76:3e:
         f2:7d:1d:c2:fb:00:4a:35:13:77:49:55:cb:d8:c9:d6:4c:2a:
         d7:09:44:e9:b4:5e:a8:74:a7:f8:a1:61:f3:9b:42:3e:b4:6d:
         02:97:6f:16:39:0f:f0:30:e7:f3:c0:b4:cc:2d:52:6f:b3:95:
         6b:e0:6e:6d:fb:c9:b6:fa:c1:cb:62:37:c0:10:4c:ea:8f:43:
         f2:bf:0c:2a:14:8d:7c:20:8c:e0:7f:68:c3:37:b9:81:07:8b:
         80:a9:af:eb:ca:05:db:ed:31:9d:2e:f6:f8:f4:09:65:bc:d0:
         dd:a0:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org