Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/En4qDnUBGqvGYtohQcfUgwo_PIE.roa
File:                     En4qDnUBGqvGYtohQcfUgwo_PIE.roa (raw, json)
Hash identifier:          SjCiADT0HdU7yKJX2ZTmtwIenCMniMGzH/U1RNEd3ZQ=
Subject key identifier:   12:7E:2A:0E:75:01:1A:AB:C6:62:DA:21:41:C7:D4:83:0A:3F:3C:81
Certificate issuer:       /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial:       019036045ECC143117F36AD48C8FE1753261
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/En4qDnUBGqvGYtohQcfUgwo_PIE.roa
Signing time:             Thu 20 Jun 2024 14:19:34 +0000
ROA not before:           Thu 20 Jun 2024 14:19:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8365
IP address blocks:        130.83.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:36:04:5e:cc:14:31:17:f3:6a:d4:8c:8f:e1:75:32:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
        Validity
            Not Before: Jun 20 14:19:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=127e2a0e75011aabc662da2141c7d4830a3f3c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:fd:f4:e6:d0:b4:7a:fb:35:43:a8:fe:67:
                    9e:13:58:8b:a7:03:b7:43:e9:be:15:35:3f:98:19:
                    6f:8b:8b:45:7b:f2:98:2e:72:be:16:d4:06:75:8c:
                    44:27:43:54:21:65:1f:cb:47:a8:00:23:49:0e:b0:
                    bc:42:59:6e:d4:b4:e4:53:b5:74:e0:0a:07:90:11:
                    f6:e5:c3:92:d7:8a:66:cb:6b:b0:51:a3:5e:f6:a4:
                    2c:a4:dd:e9:7e:c8:34:58:1d:10:3f:63:df:b7:17:
                    95:32:c6:af:b5:0f:ac:d7:5e:58:70:dc:70:9d:64:
                    1a:24:9a:f8:7f:da:86:79:fc:c3:ca:a7:a7:c1:54:
                    78:5a:f7:eb:a8:90:9e:ff:3e:f1:d1:f5:61:d1:62:
                    cb:60:a9:20:5c:28:45:35:ab:47:67:08:af:7c:b2:
                    6e:26:20:6a:d8:1c:ad:4c:c4:a2:16:d0:5b:54:ac:
                    1e:cf:aa:88:d8:a4:f8:3c:8d:cf:7f:34:e0:02:92:
                    b1:6b:7e:32:b0:23:7e:de:dc:50:da:62:06:2a:23:
                    f0:e7:ae:b8:02:2c:3e:57:7c:0d:04:72:f3:68:c1:
                    4e:9e:38:c6:e2:d4:8f:cb:ba:db:3d:68:ca:c5:db:
                    ea:0a:c9:90:c9:db:ff:e5:b3:10:54:a4:ca:88:62:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:2A:0E:75:01:1A:AB:C6:62:DA:21:41:C7:D4:83:0A:3F:3C:81
            X509v3 Authority Key Identifier:
                keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/En4qDnUBGqvGYtohQcfUgwo_PIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:2e:48:27:c7:01:4e:06:bf:3c:8f:3a:d8:f4:08:40:b8:
         af:ff:9e:ac:79:b8:b2:6e:a7:9c:95:83:06:11:6e:02:9d:e1:
         11:c5:60:67:29:5b:07:29:e8:16:5c:de:82:c1:73:7f:3f:d2:
         d3:15:f5:6e:6a:fc:32:1d:ff:f2:b3:53:2a:4d:b9:4c:bd:c5:
         9c:dc:3b:ee:71:ef:2d:2d:3c:4c:fe:b2:8c:c0:ba:46:95:75:
         d3:fa:8f:43:75:e5:73:b5:93:5c:71:e0:ec:b8:87:14:51:62:
         92:e8:2f:86:23:3b:0e:ab:2e:07:be:f4:07:e0:42:0e:d6:98:
         d3:7b:0f:ea:dd:5d:19:4d:d0:f9:00:65:33:e4:a7:df:3c:94:
         ff:af:64:97:f0:e5:9f:07:3a:06:bc:7d:2c:89:86:39:1a:66:
         7a:22:69:00:c3:b5:d1:d5:e3:f7:1d:47:8a:68:bb:55:04:c3:
         c8:35:ad:3d:80:fa:cf:e8:5d:75:4b:ca:81:f0:6a:85:fe:ac:
         31:c5:15:0d:09:16:5e:34:9d:ad:78:ab:10:87:02:ef:84:17:
         77:38:e1:8b:22:76:6d:98:99:f6:8d:82:5b:03:b6:6a:11:e7:
         75:ae:d0:a0:a4:51:5a:ba:de:4a:37:82:e6:c1:0c:b4:23:35:
         f0:3a:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:28 2024 by rpki-client on console-ams.rpki-client.org