Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GWRMeCDUA9clkiT-fYCXnz4gQ5M.roa
File:                     GWRMeCDUA9clkiT-fYCXnz4gQ5M.roa (raw, json)
Hash identifier:          gFUBb6Lcis0cqlHu4Zx64hIC8oyvnjKF13oDdUYKaAI=
Subject key identifier:   19:64:4C:78:20:D4:03:D7:25:92:24:FE:7D:80:97:9F:3E:20:43:93
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       018CC9BA9887B6D5879B5A2873FD6F77646D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GWRMeCDUA9clkiT-fYCXnz4gQ5M.roa
Signing time:             Tue 02 Jan 2024 10:31:38 +0000
ROA not before:           Tue 02 Jan 2024 10:31:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44658
IP address blocks:        83.147.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 06:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:ba:98:87:b6:d5:87:9b:5a:28:73:fd:6f:77:64:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan  2 10:31:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=19644c7820d403d7259224fe7d80979f3e204393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:e8:1f:61:51:44:e7:d7:a4:0f:9b:78:2e:
                    37:ca:07:92:cc:99:44:77:f4:ee:12:01:27:87:74:
                    7b:de:58:a8:3d:14:69:61:c6:59:87:ab:91:cb:e9:
                    33:33:f2:2e:fc:dd:f7:80:cf:18:56:8e:d8:33:22:
                    a8:da:4e:b2:c4:9a:00:87:b9:5c:52:fa:29:28:13:
                    db:ef:84:b4:18:e7:38:2c:da:97:ff:32:97:39:bb:
                    e0:03:3e:1d:c7:1d:64:e8:68:1c:c3:12:0c:18:37:
                    bf:e7:c4:25:62:0f:ef:d3:1b:a5:b2:04:77:01:c4:
                    6b:3e:13:d7:98:be:ae:b0:52:2e:6e:f4:be:07:17:
                    d5:90:2c:98:e7:d2:6a:4d:ec:c2:73:f8:53:34:5d:
                    dc:63:ea:fa:2b:c1:a8:ab:e6:6d:b2:3a:f3:58:1c:
                    60:77:9d:41:45:ef:87:fc:9a:1d:50:39:e8:8a:dc:
                    b7:86:13:69:2a:ba:9e:71:ee:74:64:17:8e:e8:61:
                    0f:1c:06:0b:8f:88:96:85:42:ec:06:08:0e:14:9b:
                    db:14:6d:1d:10:f0:15:3c:d2:40:3e:7c:1c:5d:28:
                    99:8f:2c:73:e4:b1:a9:3c:15:f6:83:aa:3a:52:4d:
                    64:11:e1:d8:59:de:bf:05:5d:83:5b:4b:3d:f4:6f:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:4C:78:20:D4:03:D7:25:92:24:FE:7D:80:97:9F:3E:20:43:93
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/GWRMeCDUA9clkiT-fYCXnz4gQ5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:c4:a4:3f:e1:ee:7d:10:df:54:ff:af:6d:94:52:42:cb:
         31:6e:f6:92:04:08:5a:c4:d6:35:80:66:41:02:17:fa:8f:1b:
         3e:6a:72:d0:41:09:9c:07:c2:5d:48:60:e2:b6:a5:d0:b2:06:
         26:74:0f:e3:fe:f8:a0:84:f0:5e:13:d1:2e:41:04:37:1c:87:
         2f:98:3d:5f:fa:9c:72:e6:a9:73:3b:b6:c3:c0:ff:7a:16:c0:
         b8:0b:88:15:d2:61:6a:a3:39:48:51:b5:1b:1a:61:df:0b:30:
         84:70:6f:90:f1:5b:68:f8:ac:fb:95:ea:e6:43:36:e4:9b:f7:
         67:0f:5f:3b:4e:d6:f1:1c:09:e4:9b:65:06:31:9c:ba:3a:ba:
         98:26:59:1b:66:fb:09:a3:44:6a:8f:82:1e:bb:54:80:79:5d:
         e1:d4:bc:a7:56:20:f9:c8:94:53:9f:20:5d:aa:da:fc:11:da:
         fe:c4:f5:cf:60:e1:1f:03:8b:da:34:60:cd:5c:65:89:84:4a:
         bd:be:2c:82:3d:22:e5:af:db:b6:75:f7:38:12:11:97:d0:99:
         db:4d:cb:16:58:a3:09:19:2e:42:e3:ca:17:72:36:50:a7:c2:
         54:64:b6:bc:e7:d5:05:05:65:61:0f:af:35:52:b8:89:ec:07:
         02:ea:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 07:35:17 2024 by rpki-client on console-ams.rpki-client.org