Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/781vG9C11sPsTyudZK0TbwI1WL8.roa
File:                     781vG9C11sPsTyudZK0TbwI1WL8.roa (raw, json)
Hash identifier:          iLkBHuE1PqF5mtj4ii0pMiW2l92+JSzal33ME2WNAkI=
Subject key identifier:   EF:CD:6F:1B:D0:B5:D6:C3:EC:4F:2B:9D:64:AD:13:6F:02:35:58:BF
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       018D422C3C7E6C60393F77C40F9064F3C28F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/781vG9C11sPsTyudZK0TbwI1WL8.roa
Signing time:             Thu 25 Jan 2024 19:50:11 +0000
ROA not before:           Thu 25 Jan 2024 19:50:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     23470
IP address blocks:        83.147.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 07:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:42:2c:3c:7e:6c:60:39:3f:77:c4:0f:90:64:f3:c2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan 25 19:50:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=efcd6f1bd0b5d6c3ec4f2b9d64ad136f023558bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:7a:6d:a5:23:95:20:9d:83:05:29:30:63:
                    cc:b7:8b:d0:b8:bb:63:e3:d1:92:eb:9e:3a:e3:d1:
                    1d:fe:20:6d:6c:04:1c:8a:4d:89:e5:4c:a3:ac:04:
                    91:2f:44:32:46:7b:8c:47:0f:5a:e8:88:f8:ca:34:
                    27:2f:6b:79:75:01:92:10:72:6c:02:a2:76:8d:bb:
                    9c:83:54:ea:2e:b9:dc:3e:a0:78:24:5b:20:70:ad:
                    1e:ac:71:91:43:55:f0:83:dc:51:78:0f:3b:19:e5:
                    fe:1a:ae:24:99:b2:d8:c6:eb:30:1d:65:19:69:f6:
                    d7:1b:75:d6:dc:17:6a:38:c2:8c:02:b3:5c:2e:32:
                    a6:3b:38:ab:e7:17:8d:dd:08:aa:bf:64:cf:d6:72:
                    8a:d0:79:1e:7d:71:a4:66:f2:30:1c:cf:32:70:30:
                    e5:72:b1:3b:fa:09:22:63:2d:f3:31:3c:33:1d:21:
                    a9:b9:8e:d4:75:69:05:3b:a2:d4:f3:c8:62:85:68:
                    e2:12:a3:88:49:b4:90:a6:bc:d9:26:c4:52:95:4b:
                    0c:63:8f:f3:75:0d:6c:2f:ce:80:f8:f6:8c:a5:95:
                    7c:5d:81:cb:64:39:ac:3e:4d:e8:7b:8e:53:d3:18:
                    a8:23:fb:42:d8:58:fa:3b:4b:3e:30:cb:59:14:37:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CD:6F:1B:D0:B5:D6:C3:EC:4F:2B:9D:64:AD:13:6F:02:35:58:BF
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/781vG9C11sPsTyudZK0TbwI1WL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:84:45:e8:be:e2:44:03:55:b6:17:b7:c5:7f:ad:16:c8:29:
         98:44:03:a9:35:d8:7d:11:2f:5c:37:ad:1d:1f:6c:ef:b1:0e:
         32:cb:53:22:78:19:f2:98:6a:45:3d:2b:97:a4:53:dd:7e:55:
         52:dd:00:bb:88:ed:1a:bb:85:1a:89:98:68:43:ee:47:32:ed:
         10:29:65:3e:43:8c:17:e1:51:57:55:85:5a:d4:76:78:ed:6c:
         64:aa:a8:b5:e1:a5:f0:11:3b:ba:7a:08:fc:8f:6d:24:78:9b:
         9c:60:96:8d:05:67:ce:aa:f0:fb:0e:59:69:dc:0f:f0:03:00:
         86:ff:1b:f4:a6:8b:94:e9:18:b3:5d:7f:a5:2f:43:3d:f0:b4:
         ff:50:83:d9:68:ed:ee:e0:6e:35:01:aa:75:56:a9:69:d5:f4:
         78:ad:80:7d:e1:24:5f:f5:56:0c:bd:86:9e:5a:d2:9a:fb:42:
         d6:db:a9:5e:3b:77:1c:2a:36:35:6b:eb:2f:ab:ff:e3:24:99:
         94:04:ab:bb:02:5a:55:90:4c:8f:2e:16:e6:2d:b5:a8:6d:20:
         f6:26:8a:fe:c2:0a:10:11:48:16:1b:9e:a5:c8:fc:21:62:71:
         0e:fa:80:e7:99:d7:16:84:88:9a:17:11:20:5d:e6:ad:6a:ce:
         51:95:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org