Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa
File:                     1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa (raw, json)
Hash identifier:          o77gXTteHqEadWhTgPuHJTaQFvY0Tduw7YYhVM1bvQE=
Subject key identifier:   F8:42:4F:9C:02:16:C7:22:AA:20:E4:FB:04:56:AA:54:34:BE:CD:AE
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0188EDDAC0A5D96C249DAF3A7DF24A2B6B7B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa
Signing time:             Sat 24 Jun 2023 14:41:56 +0000
ROA not before:           Sat 24 Jun 2023 14:41:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198064
IP address blocks:        83.147.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jul 2023 19:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ed:da:c0:a5:d9:6c:24:9d:af:3a:7d:f2:4a:2b:6b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jun 24 14:41:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8424f9c0216c722aa20e4fb0456aa5434becdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:23:0d:b6:ee:b4:6c:17:34:b5:17:51:94:
                    0d:b7:ba:b5:58:a7:81:d5:27:ab:b9:a5:f4:22:eb:
                    b0:c8:8f:13:1a:0e:ab:c4:29:11:2b:68:49:3d:6f:
                    54:0a:10:28:9b:4f:fd:a6:17:80:c6:11:79:9d:94:
                    7f:0e:fb:46:52:c2:7a:83:4c:fb:bf:ce:74:5f:04:
                    88:08:ed:87:a2:58:83:42:94:d3:dc:c4:75:fd:d5:
                    62:22:c8:fd:4b:9d:51:54:af:aa:f8:39:3d:6d:62:
                    09:4e:fb:16:fc:54:00:50:9b:9e:18:06:8a:2a:bf:
                    77:05:dd:a9:6c:61:c1:5e:f9:cb:de:33:b9:65:db:
                    2b:50:c3:14:65:df:93:b3:88:1f:d8:98:dd:5a:b6:
                    de:94:28:50:2d:32:7d:25:a1:27:28:24:43:d2:23:
                    0f:b1:50:29:75:14:29:b1:a4:da:8e:20:45:41:94:
                    24:e5:92:e8:fa:da:e5:48:34:f1:4b:24:c7:2b:94:
                    8c:d0:02:66:dd:b4:ce:ed:10:be:58:52:b5:0a:01:
                    d6:f1:2f:7b:1b:87:e8:d6:35:3d:0b:66:d3:fc:26:
                    73:10:47:9f:38:e4:32:5b:8d:a0:95:87:04:7f:cb:
                    d9:02:e5:b6:5a:69:66:86:83:5d:ef:35:90:30:e7:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:42:4F:9C:02:16:C7:22:AA:20:E4:FB:04:56:AA:54:34:BE:CD:AE
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:48:67:ee:2c:c7:b7:a2:79:f1:34:db:5d:7f:62:23:4e:
         f7:53:81:91:4d:01:92:8a:73:05:6d:92:9c:64:ea:70:d4:d6:
         6b:21:3f:cd:2a:f8:45:15:84:d5:af:bd:08:73:d8:b0:84:98:
         5d:ff:41:5b:bf:d7:c2:e0:8b:82:4c:5a:27:e2:9e:bc:8c:86:
         5a:3f:3e:9a:27:75:2b:5c:74:7c:60:e9:2e:b4:4b:61:94:14:
         0b:7a:7e:73:e5:8f:73:50:7e:fc:1c:d9:9f:67:de:98:e4:b0:
         d5:d5:d2:e0:68:39:d1:43:c5:47:fe:39:13:89:1f:13:6c:a4:
         38:93:58:af:2e:cc:22:0d:6c:2c:76:75:85:d8:de:2a:68:6e:
         80:b2:8e:1d:8a:50:c2:bf:31:3f:2c:3a:63:e7:90:0f:d9:50:
         6f:49:c3:8c:85:cd:04:8a:5f:d4:b8:40:70:11:90:5c:db:3f:
         84:3b:d1:77:38:9a:88:ce:75:0e:05:e5:45:c1:a5:9c:8d:f0:
         17:4f:aa:bd:03:43:dc:6c:fd:70:7e:4b:d0:7e:f1:d4:4e:43:
         7f:8b:28:f6:3a:ff:24:19:91:61:fd:36:fc:51:aa:c6:2e:d4:
         38:50:2b:4f:95:e7:31:37:5f:a6:c3:c6:a4:fc:5b:16:38:36:
         d7:d5:1f:1c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYjt2sCl2Wwkna86ffJKK2t7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNjI0MTQ0MTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQyNGY5YzAyMTZjNzIyYWEyMGU0ZmIwNDU2YWE1NDM0YmVjZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BYjDbbutGwXNLUXUZQNt7q1WKeB
1SeruaX0IuuwyI8TGg6rxCkRK2hJPW9UChAom0/9pheAxhF5nZR/DvtGUsJ6g0z7
v850XwSICO2HoliDQpTT3MR1/dViIsj9S51RVK+q+Dk9bWIJTvsW/FQAUJueGAaK
Kr93Bd2pbGHBXvnL3jO5ZdsrUMMUZd+Ts4gf2JjdWrbelChQLTJ9JaEnKCRD0iMP
sVApdRQpsaTajiBFQZQk5ZLo+trlSDTxSyTHK5SM0AJm3bTO7RC+WFK1CgHW8S97
G4fo1jU9C2bT/CZzEEefOOQyW42glYcEf8vZAuW2WmlmhoNd7zWQMOec/wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhCT5wCFsciqiDk+wRWqlQ0vs2uMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvMS1FSlBuQUlXeHlLcUlPVDdCRmFxVkRTLXphNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQz
NC8xL3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOT3zAN
BgkqhkiG9w0BAQsFAAOCAQEAiH1IZ+4sx7eiefE0211/YiNO91OBkU0BkopzBW2S
nGTqcNTWayE/zSr4RRWE1a+9CHPYsISYXf9BW7/XwuCLgkxaJ+KevIyGWj8+mid1
K1x0fGDpLrRLYZQUC3p+c+WPc1B+/BzZn2femOSw1dXS4Gg50UPFR/45E4kfE2yk
OJNYry7MIg1sLHZ1hdjeKmhugLKOHYpQwr8xPyw6Y+eQD9lQb0nDjIXNBIpf1LhA
cBGQXNs/hDvRdziaiM51DgXlRcGlnI3wF0+qvQND3Gz9cH5L0H7x1E5Df4so9jr/
JBmRYf02/FGqxi7UOFArT5XnMTdfpsPGpPxbFjg219UfHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org