Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ZweDWI5t2RJ9PyuhivQwwDqRgTU.roa
File:                     ZweDWI5t2RJ9PyuhivQwwDqRgTU.roa (raw, json)
Hash identifier:          3yqxytTm4a0nFzBPmQixgWLnbvsmbkL5/sGfHgVZl+M=
Subject key identifier:   67:07:83:58:8E:6D:D9:12:7D:3F:2B:A1:8A:F4:30:C0:3A:91:81:35
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       0188DE4D20F2F5EA85AD4966D133295C8BB7
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ZweDWI5t2RJ9PyuhivQwwDqRgTU.roa
Signing time:             Wed 21 Jun 2023 14:12:56 +0000
ROA not before:           Wed 21 Jun 2023 14:12:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198441
IP address blocks:        83.139.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Jun 2023 14:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:de:4d:20:f2:f5:ea:85:ad:49:66:d1:33:29:5c:8b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Jun 21 14:12:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=670783588e6dd9127d3f2ba18af430c03a918135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:9a:a2:ed:c2:10:c8:22:5b:6c:88:20:73:
                    95:7e:0a:13:e3:58:f0:56:19:04:b8:7e:d7:25:63:
                    1d:4e:ed:a8:17:cf:a7:b1:82:9d:97:5e:e8:f5:61:
                    4c:68:40:c4:e0:db:e4:c2:8c:4d:c8:5d:c1:39:2d:
                    0e:af:9d:f0:b0:75:5e:01:dd:13:9c:b9:5a:57:f1:
                    1a:70:73:df:2b:1e:f7:9b:74:fb:85:bb:90:ee:6f:
                    f1:d3:75:0f:dd:4d:28:e5:44:f1:75:46:3c:49:2c:
                    19:a3:99:bc:0b:40:be:ac:ed:54:6d:dd:ab:f7:e2:
                    cd:ff:7d:84:34:6b:89:fa:76:ed:aa:ce:05:4f:92:
                    06:75:3a:1d:f9:85:10:35:bc:71:27:0c:5d:02:c4:
                    de:81:dd:f4:d6:ad:7b:d4:18:d7:e1:31:02:cb:7e:
                    67:cb:1f:c7:bd:88:7c:b1:77:f2:98:9e:11:4b:37:
                    f6:39:55:68:d6:7f:c1:d4:fe:ef:36:95:d4:9f:84:
                    46:42:6d:02:ea:bc:60:20:26:e3:1e:91:6f:4a:e2:
                    c2:b2:4e:9b:79:4b:9c:46:ab:63:7e:9a:c1:5d:ea:
                    5a:77:b4:b7:ba:97:b5:28:92:c0:68:eb:f2:5a:fa:
                    59:cd:ce:e3:16:94:62:0a:3f:b2:ea:e0:d5:db:f8:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:07:83:58:8E:6D:D9:12:7D:3F:2B:A1:8A:F4:30:C0:3A:91:81:35
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ZweDWI5t2RJ9PyuhivQwwDqRgTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.139.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:14:b6:d3:63:e9:e6:74:29:3c:76:fd:13:05:19:4f:f2:1a:
         7b:a2:bc:d1:c2:4f:3d:20:4e:b7:d5:c6:73:f6:ba:2f:ee:15:
         5a:f9:22:cc:67:ff:f1:ac:79:b6:81:1f:e2:fc:2b:ff:2c:97:
         cd:24:54:54:87:24:5e:05:41:d0:75:e4:76:fb:52:cf:c4:ab:
         2d:ce:df:42:2f:e2:48:62:91:bf:3c:72:c9:fc:d9:11:97:01:
         fd:17:5f:6f:43:db:a2:de:ad:1a:dc:51:2a:a6:09:d5:9c:f1:
         4d:c2:aa:22:77:e8:e6:32:6b:98:dd:64:20:6c:42:89:b2:4b:
         78:2f:f2:07:ba:20:7f:b2:6d:b7:e6:a7:7a:ae:a8:97:8a:e6:
         05:f6:94:dd:33:44:b3:83:46:7c:ae:32:49:af:60:9b:db:fb:
         8a:02:fc:d7:ef:72:2d:e0:c0:4a:a8:b5:7f:3a:0f:c9:1b:d2:
         58:2b:6e:06:86:0e:36:a7:7d:59:3d:25:80:a0:45:cb:d0:3b:
         41:fc:bc:37:ba:48:14:51:4a:55:3c:96:db:92:92:29:b1:86:
         29:22:c6:b6:4a:3a:91:d2:2a:c8:61:13:82:a4:08:9c:95:0c:
         f8:60:59:39:ab:42:fa:cf:19:94:b7:7f:0d:17:54:20:a4:01:
         b9:25:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org