Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/HFUxo5V7RgjCawBQb1evDXWOof8.roa
File:                     HFUxo5V7RgjCawBQb1evDXWOof8.roa (raw, json)
Hash identifier:          nz0oAfYl2oA62yIC3z+6a6ek/5SKWxbT88zwAa1zFrE=
Subject key identifier:   1C:55:31:A3:95:7B:46:08:C2:6B:00:50:6F:57:AF:0D:75:8E:A1:FF
Certificate issuer:       /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial:       0190CC3E14FC9E30141221B8DC4B7EDA7D35
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/HFUxo5V7RgjCawBQb1evDXWOof8.roa
Signing time:             Fri 19 Jul 2024 18:25:39 +0000
ROA not before:           Fri 19 Jul 2024 18:25:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215826
IP address blocks:        83.217.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 18:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:cc:3e:14:fc:9e:30:14:12:21:b8:dc:4b:7e:da:7d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
        Validity
            Not Before: Jul 19 18:25:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1c5531a3957b4608c26b00506f57af0d758ea1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:14:7e:8b:92:90:fb:44:cc:6b:0d:8f:6a:
                    82:f3:eb:30:4d:10:45:38:66:e3:91:0a:3f:9f:2c:
                    2b:58:a0:04:bd:3e:c3:d8:33:90:84:32:01:c4:f5:
                    c5:6f:1b:42:92:33:8a:fe:0c:40:3b:3e:8a:3e:63:
                    0d:95:49:f7:63:4c:06:c3:66:57:4e:b4:b5:b7:32:
                    e7:94:12:71:72:5d:f4:4a:48:3d:e0:35:28:b4:38:
                    90:7c:2d:fe:80:8d:67:09:a2:ba:43:06:9f:ee:e3:
                    a3:b3:ca:2d:68:94:fd:0f:67:4f:71:27:95:af:c8:
                    ea:64:54:e4:8a:83:8d:22:af:d5:5d:39:36:5b:09:
                    1c:c1:ed:5e:c7:68:f0:13:69:a4:93:79:2c:3b:2f:
                    24:f3:28:c1:b2:44:bb:c7:a4:26:f2:eb:e9:b1:0e:
                    8e:af:c3:17:c0:20:34:2b:3a:22:0e:fe:3f:35:ca:
                    31:dc:cb:07:cb:ba:fe:3b:88:43:97:b2:47:d2:2c:
                    02:74:43:0c:44:92:54:e2:a2:27:ea:f9:54:1a:23:
                    da:36:d4:ec:23:e2:89:90:13:d3:16:4c:87:39:a8:
                    f2:16:8b:c7:7c:5c:8f:cc:d9:e4:e8:33:e7:32:d0:
                    f8:4e:35:08:cc:88:88:d8:97:11:d6:fe:48:5c:aa:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:55:31:A3:95:7B:46:08:C2:6B:00:50:6F:57:AF:0D:75:8E:A1:FF
            X509v3 Authority Key Identifier:
                keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/HFUxo5V7RgjCawBQb1evDXWOof8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.217.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:47:95:91:d4:ab:34:e1:2a:d6:95:3b:a3:92:47:10:f2:
         1f:40:8f:35:21:14:33:97:68:d0:65:4a:59:68:21:50:39:f2:
         b7:33:2b:98:68:46:d0:9f:7a:42:fe:d0:37:48:2a:39:4d:09:
         f0:bb:7f:3c:61:10:33:f9:f9:3b:8f:9e:4b:b8:d6:65:91:22:
         48:63:fa:f6:eb:51:dd:9c:7a:07:69:aa:21:8d:ad:b5:aa:32:
         c6:29:89:0d:4d:c0:ae:63:e6:0e:d2:6c:04:b7:90:cc:9c:dd:
         bf:fa:84:57:1b:63:ba:22:5e:a1:29:52:7c:d9:27:d3:43:72:
         42:68:48:90:59:d0:88:f6:6e:43:9a:42:be:a6:51:b5:91:34:
         7e:70:59:e7:52:af:c5:d2:d8:c9:71:36:d5:d8:82:02:f8:5d:
         7d:e9:27:34:27:a6:22:91:0d:6b:84:63:90:fe:9d:9f:23:df:
         94:47:b8:bb:06:dc:21:cf:2b:0e:10:17:fb:e1:c8:a5:f0:7f:
         10:ba:fc:f8:a0:a8:53:e1:64:62:93:e5:6d:12:5f:f4:40:94:
         e9:e1:28:cf:94:63:ec:da:62:b0:ef:bb:e7:d0:ef:d0:67:a2:
         64:11:05:b5:8d:90:af:65:6a:c4:cb:56:da:d7:84:4e:68:4d:
         03:87:e5:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDMPhT8njAUEiG43Et+2n01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2
YzUyOTIwHhcNMjQwNzE5MTgyNTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzU1MzFhMzk1N2I0NjA4YzI2YjAwNTA2ZjU3YWYwZDc1OGVhMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fgUfouSkPtEzGsNj2qC8+swTRBF
OGbjkQo/nywrWKAEvT7D2DOQhDIBxPXFbxtCkjOK/gxAOz6KPmMNlUn3Y0wGw2ZX
TrS1tzLnlBJxcl30Skg94DUotDiQfC3+gI1nCaK6Qwaf7uOjs8otaJT9D2dPcSeV
r8jqZFTkioONIq/VXTk2Wwkcwe1ex2jwE2mkk3ksOy8k8yjBskS7x6Qm8uvpsQ6O
r8MXwCA0KzoiDv4/Ncox3MsHy7r+O4hDl7JH0iwCdEMMRJJU4qIn6vlUGiPaNtTs
I+KJkBPTFkyHOajyFovHfFyPzNnk6DPnMtD4TjUIzIiI2JcR1v5IXKqPOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxVMaOVe0YIwmsAUG9Xrw11jqH/MB8GA1UdIwQY
MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt
NTcxYjZjNjEyYmVjLzEvSEZVeG81VjdSZ2pDYXdCUWIxZXZEWFdPb2Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj
LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU9nQMA0G
CSqGSIb3DQEBCwUAA4IBAQBz9EeVkdSrNOEq1pU7o5JHEPIfQI81IRQzl2jQZUpZ
aCFQOfK3MyuYaEbQn3pC/tA3SCo5TQnwu388YRAz+fk7j55LuNZlkSJIY/r261Hd
nHoHaaohja21qjLGKYkNTcCuY+YO0mwEt5DMnN2/+oRXG2O6Il6hKVJ82SfTQ3JC
aEiQWdCI9m5DmkK+plG1kTR+cFnnUq/F0tjJcTbV2IIC+F196Sc0J6YikQ1rhGOQ
/p2fI9+UR7i7BtwhzysOEBf74cil8H8Quvz4oKhT4WRik+VtEl/0QJTp4SjPlGPs
2mKw77vn0O/QZ6JkEQW1jZCvZWrEy1ba14ROaE0Dh+UM
Generated at Sun Jul 21 20:59:54 2024 by rpki-client on console-ams.rpki-client.org