Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b1w071kxfIItHIxHXbKKeKaNjwg.roa
File:                     b1w071kxfIItHIxHXbKKeKaNjwg.roa (raw, json)
Hash identifier:          ozK5qvJc0VWEKCifiRqzJWW3vEI2HRHqNO1WmWYYIlU=
Subject key identifier:   6F:5C:34:EF:59:31:7C:82:2D:1C:8C:47:5D:B2:8A:78:A6:8D:8F:08
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0189813C1A6B2BCE211BD2E7DCDD16DBB103
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b1w071kxfIItHIxHXbKKeKaNjwg.roa
Signing time:             Sun 23 Jul 2023 05:32:27 +0000
ROA not before:           Sun 23 Jul 2023 05:32:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59432
IP address blocks:        83.147.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 23 Jul 2023 09:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:81:3c:1a:6b:2b:ce:21:1b:d2:e7:dc:dd:16:db:b1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul 23 05:32:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f5c34ef59317c822d1c8c475db28a78a68d8f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:c1:7a:d8:48:32:8a:a9:2d:a1:4a:b8:28:
                    a1:d0:f0:da:ea:e5:8a:04:eb:9f:0c:9d:7c:b9:40:
                    55:71:e7:91:29:0b:66:d6:65:08:45:6c:3a:f0:48:
                    e2:d3:2d:a9:38:33:a7:86:f8:36:39:c7:34:68:43:
                    ce:ff:84:bd:f2:e9:28:bc:63:1e:04:f6:6b:54:36:
                    0b:f2:ff:ca:e2:42:43:1c:e9:76:f5:2c:91:3c:9e:
                    d0:05:05:cb:a0:9c:03:82:00:91:03:48:bc:b0:fa:
                    ed:a5:05:2a:c7:92:c3:70:54:bd:bc:1d:bb:e2:7b:
                    37:ac:c0:35:a8:72:16:fe:2b:a8:95:03:d8:53:af:
                    09:cf:b7:d4:9a:7f:80:d9:b4:0f:68:ff:e7:cf:87:
                    23:0f:fd:ed:29:6f:94:fd:25:5c:87:d4:23:c6:c9:
                    04:8d:82:06:61:fd:a0:92:c9:39:3a:07:81:0c:16:
                    16:e3:6b:c4:4f:54:af:04:71:8b:d3:44:df:f9:f1:
                    3d:03:60:3b:df:d6:4a:2b:6c:c1:1a:53:8d:8b:53:
                    a9:4b:af:51:3f:85:59:21:19:88:8e:b5:31:0e:5d:
                    ad:71:de:27:cd:49:5b:b2:e7:ac:1b:b9:f1:86:0c:
                    fb:ab:e2:8f:41:e3:0d:49:f9:7a:0e:19:99:ae:61:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5C:34:EF:59:31:7C:82:2D:1C:8C:47:5D:B2:8A:78:A6:8D:8F:08
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/b1w071kxfIItHIxHXbKKeKaNjwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:e2:70:1d:77:03:25:ef:d6:88:f1:17:fb:ee:03:cb:16:
         ae:8e:25:23:b7:a8:6d:c9:39:71:68:3d:86:66:b0:39:67:85:
         eb:2e:5f:bf:36:15:40:58:64:f7:3b:73:3c:6e:3c:96:f5:16:
         ab:3b:66:8f:28:e1:f4:5d:20:e2:54:92:93:6a:d5:fb:42:b4:
         34:ad:1a:52:dd:69:92:ab:5a:13:b2:be:70:c2:cd:21:37:66:
         72:69:db:c4:a3:0c:1b:6f:0f:29:3c:9c:57:89:ea:ce:90:41:
         fa:53:5f:a4:38:93:ec:fb:25:89:d1:fc:72:92:c7:3c:5d:bb:
         af:72:24:f7:4d:55:83:7e:10:e3:18:68:a8:d4:15:96:21:5c:
         6e:89:1f:58:e3:6d:22:25:d5:bc:6d:c9:a4:c7:a3:ca:9a:64:
         d6:05:ec:a5:d6:bd:61:fd:62:f1:95:2e:f5:0d:ac:69:d9:4a:
         58:13:88:09:51:f8:0d:ec:bc:6c:d0:8d:a3:7b:6d:cc:99:59:
         79:2d:5e:85:2a:d1:20:e8:54:6a:23:f0:88:bd:d7:18:ce:06:
         ad:ab:eb:ec:c8:6f:51:54:8c:d1:99:99:77:c8:f5:2b:91:60:
         83:72:0a:60:70:0a:84:8c:83:53:cd:ac:15:b9:26:cb:a1:78:
         5d:f1:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org