Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-PbJTEUruMk3Ef6VvBfr-gd0i2Q.roa
File:                     1-PbJTEUruMk3Ef6VvBfr-gd0i2Q.roa (raw, json)
Hash identifier:          tcmk4XHLP6FXUWNbYW8y03n3OVNhovUylgKXtdkJPl0=
Subject key identifier:   F8:F6:C9:4C:45:2B:B8:C9:37:11:FE:95:BC:17:EB:FA:07:74:8B:64
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       01910020F38051545CD2093202B372A0C30C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-PbJTEUruMk3Ef6VvBfr-gd0i2Q.roa
Signing time:             Mon 29 Jul 2024 20:14:05 +0000
ROA not before:           Mon 29 Jul 2024 20:14:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197649
IP address blocks:        83.147.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 23:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:00:20:f3:80:51:54:5c:d2:09:32:02:b3:72:a0:c3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul 29 20:14:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f8f6c94c452bb8c93711fe95bc17ebfa07748b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:34:e1:d9:60:c0:13:79:6d:ad:66:14:bc:
                    48:08:f2:20:4d:f6:42:7b:b8:fd:c2:d7:63:43:c4:
                    07:6b:a1:f9:50:f2:c5:4a:cc:ea:36:d6:f5:c7:74:
                    5e:dd:80:fb:4e:65:2e:ea:96:2d:72:82:e8:04:44:
                    e3:b8:06:4d:db:f2:64:e0:85:b4:c1:8e:81:6a:5e:
                    ae:63:49:cf:41:0f:fb:5f:b0:5c:e9:6d:42:33:08:
                    f5:30:14:e1:39:25:c3:7d:8c:7d:a7:9a:bc:cb:72:
                    b2:3d:80:94:b3:77:55:6d:c0:dd:69:0e:bc:96:70:
                    94:84:c2:be:90:df:44:0b:ba:01:e3:8c:b9:3b:8c:
                    2a:92:2a:0e:72:7e:42:68:6d:9a:33:95:53:1e:6c:
                    98:b9:10:d5:43:2b:61:0e:6a:bf:c0:2a:91:38:19:
                    b0:68:a5:29:d3:ff:72:b8:6c:9e:f7:1b:2e:5d:99:
                    ca:19:17:6e:51:76:37:08:25:b9:02:57:b6:4f:c6:
                    35:40:97:7d:c3:da:f1:d0:1c:4d:d0:46:02:b7:4a:
                    a5:93:06:cf:8a:c1:4c:29:9c:d6:8a:b6:9d:3d:ed:
                    0b:f8:10:28:eb:e4:40:e8:fe:59:47:4c:82:15:ad:
                    2a:3f:c0:63:65:02:d9:b8:97:47:a8:62:b9:3b:22:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:C9:4C:45:2B:B8:C9:37:11:FE:95:BC:17:EB:FA:07:74:8B:64
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-PbJTEUruMk3Ef6VvBfr-gd0i2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:68:ff:4c:25:0c:ec:ce:28:d0:2f:bc:39:c6:02:f6:33:e5:
         38:c4:f2:73:ae:51:22:70:92:80:f3:4f:ad:3b:a9:3f:0c:e1:
         20:91:5f:3a:15:90:d4:12:35:86:93:81:08:6c:54:c1:b8:d1:
         b0:d4:44:04:b2:d6:84:46:d7:a0:01:c6:a8:01:76:24:f7:8b:
         32:25:62:61:a8:3c:5b:9f:88:5b:08:b3:0f:bf:d0:83:38:f2:
         ec:67:25:2b:8d:6c:f8:4c:c3:e3:83:d6:b1:39:7b:b0:05:eb:
         35:8b:7a:1a:39:14:60:87:d1:8a:1c:f9:43:0f:87:12:46:01:
         d3:8b:f0:db:f2:f4:5f:c7:e0:33:bb:4a:41:1d:3e:f8:d1:ce:
         1d:90:d9:1a:71:d5:5d:a5:d7:6b:74:a0:dc:45:63:b2:72:4c:
         8a:fd:f2:90:10:ab:c7:ff:f8:66:ba:f2:84:92:6b:43:67:82:
         bc:da:e1:ac:26:c9:d2:c5:bb:fb:27:7b:a2:0a:7a:f5:20:2c:
         df:06:0d:40:45:f3:0c:dc:e5:2f:29:de:80:02:e2:29:53:6b:
         d0:2e:39:aa:bf:ed:82:65:e7:c9:be:6b:77:0a:a8:64:af:aa:
         66:dc:16:f7:7b:70:6e:3e:e8:c2:25:24:bc:a6:f1:b6:71:3e:
         3a:83:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org