Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/qWnQk_vLILSvo-Vyl5OHjf8G3i8.roa
File:                     qWnQk_vLILSvo-Vyl5OHjf8G3i8.roa (raw, json)
Hash identifier:          nFbU1ygMf0tlGh+gLNdBm9Im4tPx7a0QSEEf00L09G0=
Subject key identifier:   A9:69:D0:93:FB:CB:20:B4:AF:A3:E5:72:97:93:87:8D:FF:06:DE:2F
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       01872378F05468510BE092BB3AA2144BB8A4
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/qWnQk_vLILSvo-Vyl5OHjf8G3i8.roa
Signing time:             Mon 27 Mar 2023 14:29:01 +0000
ROA not before:           Mon 27 Mar 2023 14:29:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200332
IP address blocks:        83.139.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:23:78:f0:54:68:51:0b:e0:92:bb:3a:a2:14:4b:b8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Mar 27 14:29:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a969d093fbcb20b4afa3e5729793878dff06de2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:3f:21:d9:7a:1f:b9:ce:26:c3:e1:f4:0d:
                    8d:05:7c:c6:78:0e:09:e4:65:55:22:f8:e6:06:6b:
                    f7:2b:83:02:18:a7:c5:4d:e2:c7:27:a2:34:3d:00:
                    87:f3:9b:02:8c:06:41:5d:70:43:85:56:b0:a5:d7:
                    71:78:25:22:d1:3b:f2:ca:86:3a:a4:38:69:93:ca:
                    12:c3:bd:d3:c0:5e:51:29:e5:39:a3:62:d1:d8:53:
                    d3:ea:61:01:8b:8e:ce:1c:2c:da:7e:00:1f:49:06:
                    6e:a3:47:31:73:55:ce:b9:14:35:00:e3:1d:52:ee:
                    93:f3:3d:d2:51:ea:e7:f0:db:19:c2:45:2d:09:8d:
                    c0:a5:60:02:1c:d1:c5:2b:58:9a:7a:dc:63:26:31:
                    53:63:95:dc:6c:ce:de:09:ec:d3:c8:b7:ca:7f:f3:
                    7b:f7:6a:07:b8:2d:01:f6:ad:6a:81:df:78:c3:66:
                    a4:8b:92:60:0a:a8:14:b4:98:7c:bf:ce:07:dd:cd:
                    ec:eb:10:70:8b:12:9a:42:7c:0b:dc:39:12:24:f5:
                    41:67:f1:f6:59:46:ce:cb:00:6c:b4:60:d1:ee:2e:
                    db:c2:fd:e4:d5:16:28:02:00:f3:ef:12:a8:25:9e:
                    29:35:db:90:62:bd:26:ed:52:9c:02:ec:c8:de:4c:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:D0:93:FB:CB:20:B4:AF:A3:E5:72:97:93:87:8D:FF:06:DE:2F
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/qWnQk_vLILSvo-Vyl5OHjf8G3i8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.139.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:ce:59:e2:20:2b:ad:c9:2d:d5:92:ad:13:b9:0c:96:a1:
         5a:b0:68:28:6c:6f:87:ad:3f:00:8f:a2:38:1c:c4:c5:4b:c3:
         f9:5f:43:27:5a:2b:d4:34:7e:67:2a:73:72:45:3a:4d:b9:30:
         de:44:c4:3e:d5:55:d9:fd:2b:a2:33:1f:31:6f:29:24:1a:b9:
         2f:ec:20:a7:43:0a:bd:da:0b:39:46:1d:e5:b2:aa:73:d1:84:
         ab:36:43:19:9d:7f:b6:97:8a:cd:bf:ab:55:77:e2:e0:80:fb:
         d4:6f:9d:f1:51:53:83:58:16:9b:bf:58:53:e1:c2:7f:fb:68:
         d4:46:43:d5:c3:9b:d3:9a:86:bb:d6:33:98:05:16:11:1c:84:
         b9:04:cb:a1:02:d2:7d:dd:31:3a:c4:bd:4d:4d:67:8b:44:bf:
         af:99:86:59:64:81:7d:a8:8f:29:91:75:3f:52:7f:09:68:1e:
         bb:b1:a0:6f:ab:a4:97:f0:0f:24:7e:aa:93:54:93:db:f2:af:
         a4:23:6a:46:54:b1:7f:07:20:0c:c2:2b:64:40:f6:65:07:2e:
         52:df:52:33:cc:53:c8:39:06:b0:73:6a:1a:3f:c1:11:63:fb:
         6f:fc:16:61:e7:26:5b:f2:8e:2e:39:ab:11:30:19:25:7b:52:
         14:2c:bc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org