Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/IyZ6CsSWQKYw5eM1WtU-AkZ6Lpc.roa
File:                     IyZ6CsSWQKYw5eM1WtU-AkZ6Lpc.roa (raw, json)
Hash identifier:          gSE88sPwftRAzFnBKg75trmyeDc6n/Xu6oapCsAhR08=
Subject key identifier:   23:26:7A:0A:C4:96:40:A6:30:E5:E3:35:5A:D5:3E:02:46:7A:2E:97
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0185708CDAC442677692F51482C00E2A72F9
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/IyZ6CsSWQKYw5eM1WtU-AkZ6Lpc.roa
Signing time:             Mon 02 Jan 2023 03:35:57 +0000
ROA not before:           Mon 02 Jan 2023 03:35:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        83.147.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:da:c4:42:67:76:92:f5:14:82:c0:0e:2a:72:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan  2 03:35:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23267a0ac49640a630e5e3355ad53e02467a2e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:76:e1:d9:2d:2e:86:33:b3:bc:7f:b1:73:
                    80:63:67:df:30:7c:7d:d9:37:6c:95:c9:75:c7:ca:
                    f4:7c:92:34:bc:0a:39:e4:80:4b:60:c0:f6:b3:d1:
                    6f:55:76:7c:3a:95:3d:8a:2e:46:96:bd:89:5e:dc:
                    0a:b1:a2:89:67:5a:62:08:96:43:0d:16:42:b7:4f:
                    ef:91:91:f7:10:e2:d6:0a:0e:93:42:6f:a3:e8:79:
                    54:13:60:80:0c:49:c0:5d:30:63:e6:54:b3:15:fc:
                    25:3e:2c:af:70:43:06:64:de:f1:90:63:a9:e4:13:
                    b6:69:65:0a:15:32:52:81:83:03:bb:5e:b6:15:b1:
                    ee:f5:05:42:a4:73:51:55:f2:dc:fc:bd:f7:28:86:
                    cb:47:2e:f7:c7:5f:bb:5d:0d:28:46:9a:2a:5d:ff:
                    bc:18:7c:26:07:e5:6b:f9:c3:c4:9e:46:6c:13:8f:
                    b3:6a:b5:52:46:c9:28:57:d8:f8:0d:4c:36:0d:32:
                    76:e4:9e:18:ee:97:ea:a9:32:3b:16:bc:44:96:03:
                    ea:75:11:d0:f9:0e:54:15:33:85:27:87:22:a7:08:
                    a5:d5:a6:de:e3:9c:b1:29:2a:9f:48:a2:a8:0b:2e:
                    21:1b:c6:2f:8c:95:a0:2c:e9:c2:28:25:88:ca:a7:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:26:7A:0A:C4:96:40:A6:30:E5:E3:35:5A:D5:3E:02:46:7A:2E:97
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/IyZ6CsSWQKYw5eM1WtU-AkZ6Lpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:c2:76:ac:d1:53:c9:3b:d1:29:f1:c0:49:b3:2c:96:65:
         f3:c4:84:58:12:85:18:9b:6b:ed:15:2e:bc:ef:b6:cb:7f:c2:
         06:29:1f:56:45:18:d8:f1:a2:28:c0:ce:90:5d:97:a5:4e:8f:
         08:60:18:81:f8:f7:68:66:f8:f1:95:57:a3:ab:d4:18:9e:da:
         d4:34:7c:de:29:f5:66:4a:7f:9f:e4:2c:54:0b:6a:be:ef:b6:
         26:ce:28:f1:1a:51:83:cd:4e:46:82:73:98:03:78:aa:42:93:
         f1:84:93:50:fc:ee:ca:56:1d:29:22:4a:67:3b:de:e2:4a:50:
         20:bb:9c:d3:20:01:1e:db:d5:0c:d0:ec:08:03:d6:96:1a:2d:
         df:6d:f6:03:aa:87:5d:f7:a8:d0:48:6b:cc:ef:f1:cb:86:ac:
         71:8c:f1:ee:7d:6f:ba:63:4d:c1:f1:e5:e2:b7:17:5d:ac:c2:
         b9:95:a7:88:0c:e6:f8:67:22:24:1b:72:72:2d:de:f5:fd:58:
         6a:5a:18:26:e1:e2:9e:ad:b0:92:0a:b9:d9:6e:17:d9:43:a7:
         13:9b:73:1c:16:cd:1b:d0:96:5f:68:5b:68:50:b6:02:e6:23:
         62:74:7f:cc:ff:97:7e:88:13:a5:58:82:c3:b0:54:19:57:5d:
         fe:17:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org