Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/10pLXx_BLcHMVrQKkJgSpTIVF54.roa
File:                     10pLXx_BLcHMVrQKkJgSpTIVF54.roa (raw, json)
Hash identifier:          hqXO6kFXlBjOtZo2oV67Y6GTddgLJTniTbv6UtXueU8=
Subject key identifier:   D7:4A:4B:5F:1F:C1:2D:C1:CC:56:B4:0A:90:98:12:A5:32:15:17:9E
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0190E1F1E59F1534B6535C779B7345C54052
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/10pLXx_BLcHMVrQKkJgSpTIVF54.roa
Signing time:             Tue 23 Jul 2024 23:34:04 +0000
ROA not before:           Tue 23 Jul 2024 23:34:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138156
IP address blocks:        83.147.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 06:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e1:f1:e5:9f:15:34:b6:53:5c:77:9b:73:45:c5:40:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul 23 23:34:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d74a4b5f1fc12dc1cc56b40a909812a53215179e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:68:a1:f5:58:8c:f6:ed:04:d5:60:84:dd:
                    4c:c0:f7:39:8b:94:f6:53:a0:16:d6:20:57:21:8e:
                    8e:e1:c9:ea:ae:22:82:1a:29:a3:09:95:e5:e7:87:
                    34:95:00:9e:0c:d3:fd:cc:a1:b0:05:7a:75:a8:55:
                    45:b4:ce:bf:c2:81:7d:3b:92:6f:1b:96:fc:fb:2c:
                    f0:df:1f:06:8f:91:3b:0c:de:74:6f:3a:77:eb:0d:
                    3a:08:86:2a:5e:ab:1e:fa:fc:17:6d:69:84:f5:e5:
                    cc:7c:93:a1:43:03:ed:c1:ba:45:83:bf:70:46:10:
                    9d:06:9b:86:f1:62:08:3a:30:50:ad:9d:49:49:3f:
                    be:25:a7:7f:23:ad:f3:5d:a5:a2:ba:29:c4:f0:f9:
                    1c:ab:0c:ae:da:bb:8d:18:87:ea:82:66:a3:10:c4:
                    10:98:a9:6c:a1:40:e2:56:7e:c9:91:ba:bd:c8:34:
                    3c:08:89:fd:03:3d:b6:1f:90:83:66:d3:4c:e6:68:
                    f1:e2:17:c3:b0:bd:9a:d1:4b:07:61:7c:f4:b7:88:
                    dc:50:d5:a8:03:ea:df:25:fa:44:ee:d9:a0:bc:64:
                    e8:36:57:a0:a8:25:90:c3:12:00:ee:5c:fe:6d:4d:
                    33:14:74:9d:be:8d:76:60:6c:fa:9e:97:d0:84:86:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4A:4B:5F:1F:C1:2D:C1:CC:56:B4:0A:90:98:12:A5:32:15:17:9E
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/10pLXx_BLcHMVrQKkJgSpTIVF54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c3:47:60:29:ec:b8:ee:0c:cc:be:12:19:09:95:01:1b:13:
         6b:b7:d4:84:fe:19:3a:b6:e5:57:29:67:9a:44:c1:9b:c3:f9:
         fa:19:b5:4e:16:d3:9f:e9:dc:ee:51:7f:49:77:a6:f2:c1:6a:
         50:8a:65:54:23:87:42:17:ff:a0:e8:c3:83:cc:4e:c9:eb:b9:
         48:b6:1c:4e:d4:94:4b:ec:e9:28:ce:86:43:ba:a1:8f:e2:01:
         80:35:40:96:6b:68:df:bd:0d:00:11:8c:61:67:e4:33:fc:48:
         6f:d5:cf:73:2b:8c:e6:02:1c:9b:83:99:ab:83:ad:2a:b0:46:
         e6:d5:10:2a:38:54:a8:ac:3c:ec:c9:49:ae:a9:e0:6f:f2:ce:
         94:2b:d7:6a:47:2d:bf:64:41:e6:95:24:84:02:ca:7d:a9:c4:
         b9:db:78:f3:a3:c5:e4:85:38:a7:05:00:2e:86:54:d3:9d:e5:
         59:4f:b2:71:24:85:67:39:e6:48:a3:3f:3e:fd:36:01:da:34:
         b6:2e:7b:c8:65:39:b8:2b:1d:fc:fe:bb:22:27:34:cf:c1:f9:
         be:f9:9e:37:d8:c0:a1:24:30:2d:7f:82:cb:5f:df:32:08:8c:
         d3:0a:3d:9c:5d:60:e0:6c:52:f3:91:ce:85:8d:63:ab:aa:97:
         2b:1e:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:30:53 2024 by rpki-client on console-fra.rpki-client.org