Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/wJrL7u8wRLEZQVKmaUJP8BavHIE.roa
File:                     wJrL7u8wRLEZQVKmaUJP8BavHIE.roa (raw, json)
Hash identifier:          9Y1rQuYwJe8+soYZqCT+e+mopN+CPHRwEkhAYo5WOXk=
Subject key identifier:   C0:9A:CB:EE:EF:30:44:B1:19:41:52:A6:69:42:4F:F0:16:AF:1C:81
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       01856D66401AB78CAFAF18F01684C36D42A8
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/wJrL7u8wRLEZQVKmaUJP8BavHIE.roa
Signing time:             Sun 01 Jan 2023 12:54:55 +0000
ROA not before:           Sun 01 Jan 2023 12:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21734
IP address blocks:        83.126.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:40:1a:b7:8c:af:af:18:f0:16:84:c3:6d:42:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Jan  1 12:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c09acbeeef3044b1194152a669424ff016af1c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:9b:c9:2d:84:65:79:44:b5:7f:f4:7f:9b:
                    47:fb:57:93:ec:c8:79:de:02:b9:1c:c6:ab:fc:6e:
                    85:35:0d:80:4e:7f:46:c9:dd:ec:8f:be:87:19:38:
                    d0:1a:49:98:0e:b8:fa:2c:57:34:64:e8:61:7a:54:
                    a7:5e:72:82:be:2a:28:d2:fa:28:ef:7e:fd:30:8a:
                    cd:6a:8e:80:48:f1:82:8b:70:5e:e9:c1:67:92:c2:
                    02:95:29:a5:07:12:a3:7a:1f:56:c2:00:00:af:57:
                    ee:40:f8:b9:a0:f9:63:c1:eb:53:bf:42:5f:ef:0f:
                    e9:23:57:5c:fb:06:37:a7:ea:26:31:30:cb:79:89:
                    5e:ae:73:5e:19:31:b7:1e:65:1e:fc:99:c0:ab:29:
                    fb:4c:61:9c:58:ce:fa:79:82:44:88:d0:63:b7:14:
                    55:34:bb:31:01:52:36:23:ae:fd:5f:4e:58:89:be:
                    8e:d1:47:66:c7:b7:27:91:4b:a0:a3:a7:70:9e:ba:
                    7b:1a:27:e2:c3:74:9f:a8:5b:41:d6:e9:11:23:74:
                    5f:e6:06:45:ad:40:4d:e0:92:a0:0f:63:66:5f:3f:
                    62:41:97:2f:4c:45:68:25:98:29:df:14:2d:47:72:
                    9f:f6:18:13:16:0a:ae:9a:c3:a2:80:a8:52:cd:e6:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9A:CB:EE:EF:30:44:B1:19:41:52:A6:69:42:4F:F0:16:AF:1C:81
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/wJrL7u8wRLEZQVKmaUJP8BavHIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.126.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:60:79:56:f3:a5:6c:ef:d4:32:62:e8:15:bb:5f:c7:7b:cb:
         66:12:34:b6:41:0d:ec:0a:db:61:82:0f:06:3d:d7:bd:3e:c6:
         e6:45:10:b3:a3:ba:b7:62:be:89:b5:7c:83:31:11:87:88:90:
         89:40:1e:67:22:98:fe:9f:00:99:73:ee:3b:00:64:4b:4a:a5:
         45:24:1a:ba:4b:b0:16:2e:99:53:cc:9f:87:81:70:08:f9:55:
         9e:7d:2b:c8:f3:d4:93:f5:aa:c2:bf:cb:00:62:34:a7:9a:14:
         15:0a:4b:97:a8:de:53:df:ad:85:15:83:0a:1c:8e:ee:92:63:
         c6:a2:b2:e0:46:db:cf:a4:71:8d:78:33:7d:fd:89:b7:04:ed:
         13:3f:69:51:29:18:8e:7c:e8:ce:c4:21:59:96:ca:87:a8:7c:
         af:98:e5:6a:7e:a7:7a:f5:0e:59:4c:fa:ad:cd:0b:02:de:d9:
         f6:1c:42:c7:b8:a6:5c:7f:f5:ca:78:0a:93:b1:ab:96:aa:2d:
         ae:4b:b1:64:65:45:d8:10:ca:2f:0d:98:a7:e8:de:7f:6f:ad:
         44:53:be:cf:b0:52:49:19:aa:0b:14:4f:24:a8:9b:d2:1b:12:
         d9:67:4d:bc:9c:68:25:68:f6:f1:5e:a4:cb:e6:e2:37:77:cf:
         d4:f1:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org