Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/j2OezEDMDXoBWihCBpWIA0H6Q-E.roa
File:                     j2OezEDMDXoBWihCBpWIA0H6Q-E.roa (raw, json)
Hash identifier:          hIiD/JkJZR+yWVnGJ+QWttmkygKdI8BmpWqZVS5s+lw=
Subject key identifier:   8F:63:9E:CC:40:CC:0D:7A:01:5A:28:42:06:95:88:03:41:FA:43:E1
Certificate issuer:       /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial:       0187B3ED88CFD8923E52BF98649F6E65D068
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/j2OezEDMDXoBWihCBpWIA0H6Q-E.roa
Signing time:             Mon 24 Apr 2023 15:41:41 +0000
ROA not before:           Mon 24 Apr 2023 15:41:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138968
IP address blocks:        83.97.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 May 2023 10:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b3:ed:88:cf:d8:92:3e:52:bf:98:64:9f:6e:65:d0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
        Validity
            Not Before: Apr 24 15:41:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f639ecc40cc0d7a015a28420695880341fa43e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:7f:b9:e4:b9:33:14:c4:da:fa:10:25:04:
                    d8:d2:32:f2:b9:0e:7b:a3:ed:c6:f4:6f:53:11:cb:
                    2b:21:93:a7:29:74:e8:02:b7:c9:67:02:0c:9e:3f:
                    00:fc:46:c2:1b:2a:79:21:a8:dc:bc:aa:d4:63:f5:
                    ef:36:98:50:19:d7:95:cb:d3:f2:c8:52:7a:6a:c0:
                    62:22:f5:b5:01:57:32:bb:b6:a6:b7:b6:9b:14:c2:
                    96:11:db:57:e2:f8:61:05:66:46:eb:08:c0:86:71:
                    47:2a:f2:4a:0a:d6:24:35:63:fe:e0:fd:36:e2:1c:
                    c1:c3:43:e8:15:03:36:14:07:14:c5:da:71:a0:f5:
                    27:3c:40:d6:1a:5b:b4:0a:16:1d:8c:4d:1c:b7:22:
                    a9:35:d5:bc:af:f7:2f:a9:6a:ff:c9:88:90:ef:f7:
                    cb:ff:82:3f:93:fe:68:96:aa:e8:ba:32:e2:ca:ea:
                    d9:5d:0e:9b:8e:91:67:33:42:b0:a1:91:c2:2f:20:
                    d3:32:0c:9a:20:a0:e4:78:1d:4e:0c:14:23:d4:52:
                    ec:d9:1f:10:d9:4b:54:c2:d2:1a:20:40:20:8f:57:
                    7c:d7:16:52:9c:8f:a5:0b:74:b0:2a:24:e0:ff:56:
                    6c:5a:5d:db:23:2d:87:0c:4a:37:ab:f6:dc:0f:c0:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:63:9E:CC:40:CC:0D:7A:01:5A:28:42:06:95:88:03:41:FA:43:E1
            X509v3 Authority Key Identifier:
                keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/j2OezEDMDXoBWihCBpWIA0H6Q-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:16:b5:36:e3:ee:96:27:cf:95:d6:af:0b:5b:f0:12:b7:da:
         53:ce:1c:cc:78:c3:c4:f8:26:b7:6b:6b:3f:bf:fc:bb:81:1a:
         4b:8d:06:c2:8a:b2:89:48:44:5a:6b:c3:78:ba:68:7d:11:ff:
         87:15:84:dd:31:eb:37:1d:34:2b:c6:97:82:b8:cf:d9:31:db:
         10:35:50:3b:ad:c0:cc:45:45:51:1b:4a:9c:83:95:af:33:67:
         1d:1f:78:54:ac:d9:b7:79:1f:ab:5c:0a:4f:00:56:43:98:b1:
         a7:1a:0f:30:fd:11:75:19:4b:63:b9:97:fa:4c:15:e1:dc:ab:
         c7:03:2e:a9:8c:c7:e4:13:af:67:29:14:b6:65:61:04:d5:7e:
         5c:c3:fc:00:41:b0:7e:4e:bc:14:6e:d6:68:64:2e:5a:e5:e3:
         a0:77:2a:95:4e:d9:f6:42:14:bf:51:c7:2a:09:00:92:86:17:
         b1:40:68:7f:8b:4c:3d:bc:3c:c3:53:ce:38:d6:30:92:33:fd:
         5e:50:1d:37:a9:c5:00:d7:a9:8c:b1:d2:a6:94:76:bb:29:c1:
         16:c0:d8:56:1e:e6:5e:1b:d3:a4:4f:46:fb:cc:2a:f6:69:46:
         f0:14:99:7c:c9:10:0d:bb:99:c2:bd:55:b3:9c:cf:24:0a:40:
         cb:b3:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:12 2024 by rpki-client on console-ams.rpki-client.org