Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wLNv7iCgDK6P2GNv-ClvLyIC5DQ.roa
File:                     wLNv7iCgDK6P2GNv-ClvLyIC5DQ.roa (raw, json)
Hash identifier:          cB1MKRIoqt9CgX5tppMeI9PWhpg+64zZs6QDp1449qk=
Subject key identifier:   C0:B3:6F:EE:20:A0:0C:AE:8F:D8:63:6F:F8:29:6F:2F:22:02:E4:34
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0188BF7A501210D640ED729CCB231553FB20
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wLNv7iCgDK6P2GNv-ClvLyIC5DQ.roa
Signing time:             Thu 15 Jun 2023 14:34:04 +0000
ROA not before:           Thu 15 Jun 2023 14:34:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        83.147.232.0/22 maxlen: 24
                          83.147.248.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bf:7a:50:12:10:d6:40:ed:72:9c:cb:23:15:53:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jun 15 14:34:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0b36fee20a00cae8fd8636ff8296f2f2202e434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:d3:59:86:f6:aa:a0:0b:93:dc:61:f1:79:
                    08:60:2a:3a:d9:7c:b4:61:43:fe:e2:c3:6d:55:5c:
                    a9:1e:3f:33:e9:74:bc:91:6e:ff:c1:8a:e7:4a:37:
                    b9:44:fb:2c:a6:73:08:a6:3b:e9:e1:f9:ea:70:e3:
                    38:1d:af:a8:c4:2e:bf:2a:69:f9:17:28:cf:03:ea:
                    de:4c:88:e8:ba:85:6b:53:13:97:23:e0:d9:a5:98:
                    d0:e2:5f:f6:3a:e0:28:be:43:a3:90:9a:21:26:d4:
                    06:4d:01:75:ef:b0:2b:ad:63:52:50:bb:40:2c:66:
                    17:7c:84:b3:fa:41:18:e1:79:6d:87:b1:b3:54:2f:
                    ef:02:8a:c4:e9:f5:48:dc:1f:ec:2e:9b:1c:c8:12:
                    42:1b:c7:f0:02:50:f4:f4:27:bc:d9:de:58:7e:91:
                    1f:3d:53:e8:a6:a1:0d:ff:74:a5:59:c4:0f:a0:31:
                    c0:7d:89:f9:d0:da:16:4f:ff:66:f4:18:88:65:d9:
                    7c:bd:41:0b:09:60:fb:b2:b0:5a:9b:51:c4:9a:81:
                    fe:29:2d:d5:c0:2c:96:ec:cc:e3:9a:75:ef:d3:6f:
                    e8:79:40:a5:60:93:63:ff:50:7a:05:7c:23:0e:aa:
                    86:06:7d:c3:d8:3c:65:cd:96:fe:5a:36:3b:7e:bb:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B3:6F:EE:20:A0:0C:AE:8F:D8:63:6F:F8:29:6F:2F:22:02:E4:34
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wLNv7iCgDK6P2GNv-ClvLyIC5DQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.232.0/22
                  83.147.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:31:b5:b5:0e:81:b1:aa:66:29:30:33:3a:6a:8b:bb:e2:a7:
         1f:0f:5d:06:02:25:a4:9e:1b:ed:4f:7b:6c:c4:c1:ef:a8:bf:
         86:e6:ef:da:76:86:03:fd:e6:17:8b:26:a6:c8:52:19:d6:a4:
         e3:0f:32:57:8d:9f:f8:44:3c:ff:99:6d:e5:f4:a5:53:d8:9c:
         7f:0d:fb:f9:95:f9:11:90:80:30:8d:62:00:db:9e:8d:2f:99:
         95:98:31:06:5e:ed:b2:7b:05:3b:ce:7e:4e:72:c8:10:21:23:
         30:ce:cc:b7:08:63:b3:04:58:13:9a:9a:71:8c:82:04:45:0c:
         ba:b1:84:f3:f3:de:4c:21:15:f7:bb:01:97:20:e7:ef:9e:a1:
         ce:ea:76:95:f7:3d:82:49:34:c8:60:4f:38:1d:d8:df:a8:19:
         a1:d9:51:85:df:84:51:4f:5b:4d:65:3b:95:c4:46:d5:be:dd:
         d3:82:e2:de:fa:a7:99:5b:e8:c6:ea:5a:ef:cd:7a:04:63:5e:
         35:4d:05:a0:f1:e6:a0:83:51:e6:24:1f:c4:72:bf:68:26:7f:
         8b:c1:6b:38:84:75:be:8a:8f:fd:b4:c7:6e:2b:05:3b:b7:f6:
         af:c2:29:7d:7c:8b:6f:8b:13:1e:30:1c:88:1a:ab:97:47:73:
         fe:b3:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:36 2024 by rpki-client on console-ams.rpki-client.org