Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/8WRTmLFE3nbwoaAJ7w1TEIz9CVA.roa
File:                     8WRTmLFE3nbwoaAJ7w1TEIz9CVA.roa (raw, json)
Hash identifier:          CyvihzXysgzlGpmXNBrBRqg2PO3fl0KLHJZpx5LsQqg=
Subject key identifier:   F1:64:53:98:B1:44:DE:76:F0:A1:A0:09:EF:0D:53:10:8C:FD:09:50
Certificate issuer:       /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial:       01911538B8EB642989419403571526E2C4E3
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/8WRTmLFE3nbwoaAJ7w1TEIz9CVA.roa
Signing time:             Fri 02 Aug 2024 22:32:04 +0000
ROA not before:           Fri 02 Aug 2024 22:32:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41745
IP address blocks:        83.217.210.0/24 maxlen: 24
                          83.217.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 22:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:15:38:b8:eb:64:29:89:41:94:03:57:15:26:e2:c4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
        Validity
            Not Before: Aug  2 22:32:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1645398b144de76f0a1a009ef0d53108cfd0950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:91:60:c1:9b:42:3c:0f:64:29:9d:55:8f:
                    32:a8:4d:57:6b:68:5e:da:e8:b8:4a:b5:b2:ab:42:
                    14:8c:ed:0a:f9:d7:6e:32:bb:ee:25:d6:5a:c2:1b:
                    b5:45:e4:ce:90:4f:39:c5:a9:92:75:60:05:e8:31:
                    07:67:a8:8b:51:d6:b4:ca:0d:c8:ab:09:f3:e5:4e:
                    8c:cc:5e:2d:2e:83:6a:3e:6c:f4:be:0c:a5:ff:59:
                    bc:d7:38:20:0e:bb:3a:4d:94:99:c1:5b:38:3e:66:
                    d7:86:62:79:c0:98:99:b2:81:dd:95:af:c3:c3:84:
                    af:0c:ad:97:d3:6c:e4:41:2d:58:33:19:5c:68:67:
                    0e:2f:ac:4d:2c:ec:62:92:a6:1f:bf:a3:f9:28:08:
                    db:4b:cc:0e:27:ff:8f:65:39:a8:68:a4:1f:f8:8f:
                    b3:f2:41:f5:5a:b1:ce:ee:b9:af:51:7f:6b:6b:73:
                    73:a4:56:68:80:08:44:c3:d9:f4:c6:f8:26:40:4b:
                    35:9d:50:41:39:e0:d0:d0:55:64:8a:6f:f5:82:54:
                    63:89:c2:de:68:cb:80:f8:99:88:ce:7f:8f:c6:42:
                    ef:e8:c4:9d:ee:05:32:73:a6:bd:c8:76:96:8d:fb:
                    84:30:2a:7e:fa:16:d3:b3:dc:cf:9f:b6:92:ba:87:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:53:98:B1:44:DE:76:F0:A1:A0:09:EF:0D:53:10:8C:FD:09:50
            X509v3 Authority Key Identifier:
                keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/8WRTmLFE3nbwoaAJ7w1TEIz9CVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.217.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:0a:3b:62:94:36:03:ae:6d:ef:ef:a4:0b:67:7f:ff:fd:b0:
         7c:ef:89:a4:c8:f9:1e:b4:f2:8e:69:2a:f0:dc:e8:07:eb:07:
         b7:8d:9f:3c:46:9e:43:d7:ad:2f:45:ca:86:53:72:b6:57:3b:
         92:d1:39:b2:20:8c:b4:95:94:84:74:bc:fc:b7:51:78:d3:af:
         96:a3:c9:70:c9:70:95:08:86:7b:39:15:aa:81:69:14:e3:d9:
         d0:87:f5:0d:f6:b7:ad:8a:3c:df:c3:15:96:14:2f:a1:8d:3a:
         c6:30:8f:3d:6c:85:c9:2d:92:50:e6:05:c0:db:68:f6:89:16:
         e0:88:66:e9:14:6a:8d:a0:a4:90:16:26:98:e1:13:2d:d0:56:
         a7:dc:c7:b3:02:00:45:01:80:2c:4c:f0:04:43:c6:1e:1a:ab:
         e7:9f:37:b5:98:60:98:5f:bd:cb:c1:ca:92:dd:9b:c2:53:a1:
         ca:7f:33:94:4f:7c:40:9d:9b:81:3f:34:5f:7d:9e:1c:7a:2f:
         37:25:5c:db:58:31:48:5d:db:f9:8a:65:73:41:94:af:33:86:
         f6:b5:fd:e8:bc:87:90:e4:98:a8:0a:c5:4d:eb:5c:e3:1f:2d:
         95:b1:4f:f4:4c:fe:8a:2a:22:f3:08:b0:59:a1:22:1a:93:f7:
         eb:bd:e4:2b
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 11 23:56:16 2024 by rpki-client on console-fra.rpki-client.org