Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/82Sat_0dNo7f9wljK-KwTi5sHMs.roa
File:                     82Sat_0dNo7f9wljK-KwTi5sHMs.roa (raw, json)
Hash identifier:          0nkM/nNXgRoilTy/WdYTHW1mKh7bDaje6hE/IARWq5o=
Subject key identifier:   F3:64:9A:B7:FD:1D:36:8E:DF:F7:09:63:2B:E2:B0:4E:2E:6C:1C:CB
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       018BB42545075F837DF160F687BA744960A5
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/82Sat_0dNo7f9wljK-KwTi5sHMs.roa
Signing time:             Thu 09 Nov 2023 12:53:43 +0000
ROA not before:           Thu 09 Nov 2023 12:53:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        31.14.37.0/24 maxlen: 24
                          185.155.55.0/24 maxlen: 24
                          185.155.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:25:45:07:5f:83:7d:f1:60:f6:87:ba:74:49:60:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Nov  9 12:53:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3649ab7fd1d368edff709632be2b04e2e6c1ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:c3:52:88:0e:95:fa:2a:f7:08:29:15:b0:
                    36:7e:eb:46:61:a7:0c:fe:6c:9f:7c:aa:78:df:6d:
                    3d:60:58:1c:5e:0c:e7:da:c2:81:ba:8c:ad:e8:02:
                    b1:88:d0:44:b8:86:4d:3e:d9:26:59:cb:1b:2d:ae:
                    79:03:e2:3a:52:d7:0d:60:50:d8:c7:46:d5:97:bd:
                    a0:d3:1b:55:d1:90:05:cf:9c:29:17:22:90:bd:88:
                    15:2d:f9:b0:72:cc:23:94:c5:fb:01:b8:f2:2e:52:
                    98:5c:86:12:f5:e7:3a:b6:e0:db:07:f1:a5:9b:f9:
                    8d:d5:fb:f1:66:ed:ef:f2:cd:d3:dc:0b:75:8c:06:
                    7f:67:57:00:4c:79:a4:9c:af:9f:d8:9c:e4:f2:40:
                    df:e8:e0:29:07:31:ad:48:d1:e1:45:ef:0e:0b:da:
                    05:f4:6f:d2:43:8e:3c:a6:34:5b:95:73:42:22:6a:
                    5c:de:16:d5:ed:8a:07:49:e0:74:e0:f3:cc:76:a2:
                    6f:5b:33:c1:2e:17:a9:d9:d6:e6:78:49:72:19:ce:
                    b9:75:fa:64:1f:df:36:ae:8a:38:2c:c6:de:fa:98:
                    9d:ce:22:2f:71:67:0f:2c:09:f9:c5:83:68:41:35:
                    1d:1f:af:76:9d:e9:38:27:f1:52:bd:bc:0b:bc:0a:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:64:9A:B7:FD:1D:36:8E:DF:F7:09:63:2B:E2:B0:4E:2E:6C:1C:CB
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/82Sat_0dNo7f9wljK-KwTi5sHMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.37.0/24
                  185.155.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:63:5d:ad:c6:58:0f:a8:f7:52:b1:1b:f4:e0:1a:c8:25:
         0f:c2:f3:c3:56:61:20:1f:42:b7:78:53:b3:ba:0c:be:ce:09:
         c2:2b:8f:9d:d1:81:50:e7:b2:f6:46:33:20:a6:6b:e8:a6:81:
         08:94:87:5c:01:4f:f2:e0:30:ff:4c:ec:20:38:3a:70:b0:d0:
         db:c6:8b:12:aa:87:d4:3a:a6:ca:f0:4f:c2:bc:2e:d3:6b:15:
         30:c1:b0:12:1b:b5:d1:ce:9a:62:9a:89:24:84:d1:42:57:bd:
         bb:37:e9:3a:ea:40:d9:ad:83:df:b7:66:71:10:43:b6:87:a1:
         a1:3f:5c:ef:7c:03:0c:a0:a1:83:f9:09:f0:1f:29:b5:9a:84:
         28:29:53:22:a3:56:5f:97:1c:ea:99:19:cc:85:f8:f6:1a:ba:
         15:c3:96:c7:10:95:5c:74:c8:b1:69:58:20:ee:ac:68:b8:46:
         08:f7:98:8c:97:84:b9:22:a6:26:c1:b7:ca:db:ab:c4:63:01:
         5f:81:44:42:d6:ae:14:16:25:b1:b9:ba:01:cc:02:51:f6:dd:
         7c:93:82:f6:89:bb:29:4a:0d:48:c8:32:3c:9b:78:87:7e:29:
         f5:78:36:cd:99:3a:bd:f1:62:e4:4b:28:50:9e:26:67:97:ea:
         af:03:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 17:28:50 2023 by rpki-client on console-fra.rpki-client.org