Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/G-Rc-OIn4tqvE03fpskj4Urbn74.roa
File:                     G-Rc-OIn4tqvE03fpskj4Urbn74.roa (raw, json)
Hash identifier:          WZ+VZg53M3A2mFp7Tcsov9F42h6gsha2MWcggEVXHA0=
Subject key identifier:   1B:E4:5C:F8:E2:27:E2:DA:AF:13:4D:DF:A6:C9:23:E1:4A:DB:9F:BE
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       01874AE77160EC8B6126401734333B50E619
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/G-Rc-OIn4tqvE03fpskj4Urbn74.roa
Signing time:             Tue 04 Apr 2023 06:14:54 +0000
ROA not before:           Tue 04 Apr 2023 06:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51543
IP address blocks:        83.234.169.0/24 maxlen: 24
                          83.234.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4a:e7:71:60:ec:8b:61:26:40:17:34:33:3b:50:e6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Apr  4 06:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1be45cf8e227e2daaf134ddfa6c923e14adb9fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:85:c2:7b:3c:a6:df:87:a8:00:73:59:95:
                    9d:1a:af:df:da:56:70:3d:19:e7:46:87:5c:5e:44:
                    68:16:8e:cc:37:3f:bc:73:c4:e8:31:28:5f:ce:13:
                    c6:72:e1:49:fc:15:5b:57:bc:fc:0b:40:78:95:23:
                    ed:c1:81:e2:e3:27:ca:02:ef:26:fa:26:04:80:b6:
                    66:65:58:63:05:7c:be:6e:eb:27:e8:f1:ee:a1:8e:
                    e2:ae:51:44:3a:0b:56:70:81:3f:5b:cb:65:df:bb:
                    7a:00:6d:ed:02:83:d1:85:27:05:c1:13:b5:de:a4:
                    71:da:1e:e0:f5:a2:5b:a6:41:1b:57:91:a9:1b:ae:
                    63:3a:54:f1:f6:98:c1:46:d0:90:b1:b9:b8:5a:25:
                    0d:e9:dd:cd:a6:69:c1:08:9a:0a:e7:e9:6a:8b:ab:
                    b1:b0:65:e1:7a:45:42:54:3b:a5:53:c4:b4:4a:fb:
                    73:be:d6:28:a3:28:4b:37:3f:8e:03:2c:c3:fb:d8:
                    16:fc:ae:77:65:00:a5:19:bc:cc:29:59:d5:0f:f0:
                    48:76:98:23:c5:2c:18:b7:12:c0:a3:e9:36:a4:47:
                    53:cb:3a:7b:9c:50:f3:9f:94:20:db:e9:ae:14:d0:
                    0f:51:ce:2e:7c:0d:c0:cf:8a:9a:cf:09:9e:01:dd:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E4:5C:F8:E2:27:E2:DA:AF:13:4D:DF:A6:C9:23:E1:4A:DB:9F:BE
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/G-Rc-OIn4tqvE03fpskj4Urbn74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.234.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:5a:8f:e7:ee:88:6b:2e:f0:e4:46:bc:bf:a2:8d:85:c3:08:
         aa:6a:75:d1:cd:74:50:9b:8f:55:81:83:f1:d7:1a:99:1c:b9:
         08:e3:a1:59:60:ff:de:a5:ac:18:5f:63:90:ae:09:1a:33:20:
         81:53:f6:3a:21:1d:1f:01:25:7b:20:7f:79:99:69:ec:b5:64:
         9b:87:fc:14:98:3b:2b:51:cf:aa:81:61:e6:6b:65:fe:86:cd:
         b8:7f:65:8f:22:1f:77:32:23:2b:c2:4d:d4:f9:e4:d4:c5:7f:
         6f:0b:5d:22:1f:8a:36:c2:4c:f7:10:98:37:0d:98:b8:f2:7f:
         05:23:f6:1d:08:b5:96:c3:41:cd:a4:2c:64:e3:f4:53:ab:c2:
         91:84:c1:41:6f:20:d9:d0:9f:99:2f:e0:7b:24:7e:5f:44:f8:
         7a:77:ed:bb:2e:5b:42:09:d6:81:84:0a:c3:0d:a6:a3:de:20:
         0d:1d:3e:b6:95:8a:39:0e:a7:87:9a:f8:9d:5d:71:bc:a0:b7:
         8c:07:94:5b:fe:d1:91:ef:fb:ab:1d:3f:2e:d5:b0:9a:35:68:
         6e:fe:80:30:b9:fb:c2:cb:7c:4f:bb:05:ff:c8:d7:c3:f5:4d:
         f4:c6:15:45:c3:80:2b:fe:a1:09:b7:a2:1b:31:2c:b5:69:30:
         b6:e5:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org