Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-IarPuO2esrllxIQw7r2fjdiQxE.roa
File:                     1-IarPuO2esrllxIQw7r2fjdiQxE.roa (raw, json)
Hash identifier:          rP9fWtjoIzj+2XEdzlgD4wZdoHJsRhEVcd+g5acYLco=
Subject key identifier:   F8:86:AB:3E:E3:B6:7A:CA:E5:97:12:10:C3:BA:F6:7E:37:62:43:11
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       018825E65C96D221ACF7F57DFBB54F3B050A
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-IarPuO2esrllxIQw7r2fjdiQxE.roa
Signing time:             Tue 16 May 2023 18:50:33 +0000
ROA not before:           Tue 16 May 2023 18:50:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147287
IP address blocks:        83.147.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Jun 2023 17:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:25:e6:5c:96:d2:21:ac:f7:f5:7d:fb:b5:4f:3b:05:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: May 16 18:50:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f886ab3ee3b67acae5971210c3baf67e37624311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:5c:4f:99:26:f2:df:7b:0a:19:30:f5:a7:
                    70:10:3b:2a:45:c5:0d:68:3c:fc:d5:87:0d:38:a8:
                    8b:50:fb:e3:03:56:40:77:7a:90:2c:3e:df:8b:08:
                    4d:67:5a:5e:9b:a8:bf:ed:fd:45:c8:6c:6f:d8:e5:
                    fb:92:df:79:3c:45:42:09:57:1f:72:5e:b4:35:6d:
                    ef:cd:d6:8f:ce:99:82:52:da:0a:5c:2f:5c:d8:90:
                    d6:ec:72:1c:13:15:8e:c2:a6:db:65:dd:36:19:9a:
                    95:20:c8:8a:83:c5:0f:45:b4:b2:db:7b:f1:14:43:
                    f6:8c:1b:ac:61:2f:62:91:ed:91:b2:53:9f:39:f0:
                    b0:c1:a8:f8:bc:78:41:43:2a:65:9e:f4:c0:51:3d:
                    e3:b8:11:f0:e9:10:6c:1b:01:06:0e:6d:26:84:9c:
                    09:a8:84:f3:73:eb:04:f5:0a:cf:76:66:bd:79:46:
                    01:db:ff:86:ac:d1:85:56:86:c5:03:c2:76:eb:3f:
                    7e:08:63:04:b0:89:01:5f:33:fa:48:3c:e0:40:64:
                    a7:1c:3d:b3:6c:da:dd:6a:02:fb:ce:3c:f0:8e:8e:
                    ef:64:93:0e:ad:2f:de:cb:5c:3e:0d:ca:68:7c:7d:
                    22:5b:e8:e3:ca:ee:84:c0:9f:60:74:41:bf:45:ed:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:86:AB:3E:E3:B6:7A:CA:E5:97:12:10:C3:BA:F6:7E:37:62:43:11
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-IarPuO2esrllxIQw7r2fjdiQxE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:b7:c0:b2:74:4e:df:53:dc:cf:28:5a:76:f8:e4:08:72:
         51:9f:2d:24:6b:be:09:b2:ee:ce:d8:ec:d2:9f:13:c9:2b:c2:
         26:f8:38:63:d3:4c:e0:75:17:d6:43:af:15:16:6d:cc:2b:75:
         8c:c2:0a:eb:99:4e:3e:b8:3a:83:0e:39:36:95:79:65:64:78:
         31:49:ff:37:3a:f3:44:6b:c1:6b:e7:f8:6f:64:53:d1:a1:8b:
         e2:02:00:c3:01:99:9c:40:b6:5a:d2:79:8f:c7:46:bb:9f:37:
         ee:b9:e8:c4:16:35:8c:e7:98:4b:76:2c:74:79:a3:33:7c:99:
         99:04:61:ab:4d:29:9e:c4:7a:f3:20:28:b1:0f:58:45:f3:92:
         09:ea:29:41:17:0a:69:85:5c:1d:c4:f6:85:37:50:fb:80:9e:
         9d:13:45:e6:a0:b8:be:02:06:74:7c:eb:0c:42:fe:03:9c:ac:
         82:71:6c:62:11:72:e4:51:f7:82:a4:7e:b0:80:22:62:9b:a1:
         8c:c6:e4:3d:71:ff:db:ab:1a:c0:e6:57:1d:b8:c0:29:d5:6d:
         c4:ac:a2:97:03:9d:1c:dd:7b:ab:12:18:0f:be:70:41:64:d9:
         32:ee:6f:3d:fb:0a:7e:15:2e:2d:73:9e:e4:da:4f:29:7f:ea:
         90:a0:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org