Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/V8f_uCbKeAqAmWIDsAJh9EJHqgA.roa
File:                     V8f_uCbKeAqAmWIDsAJh9EJHqgA.roa (raw, json)
Hash identifier:          /TNei8YU37CD9DP9Pa/po/KXiMwKDcDdVDbvmJulZVc=
Subject key identifier:   57:C7:FF:B8:26:CA:78:0A:80:99:62:03:B0:02:61:F4:42:47:AA:00
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       018698A2B68178E5A2668B960997E0C84159
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/V8f_uCbKeAqAmWIDsAJh9EJHqgA.roa
Signing time:             Tue 28 Feb 2023 15:27:25 +0000
ROA not before:           Tue 28 Feb 2023 15:27:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209500
IP address blocks:        83.229.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Feb 2023 15:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:98:a2:b6:81:78:e5:a2:66:8b:96:09:97:e0:c8:41:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Feb 28 15:27:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57c7ffb826ca780a80996203b00261f44247aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:51:3d:2f:60:bd:c7:46:d4:f5:bd:af:07:
                    39:9b:82:b1:92:46:9f:56:8c:ab:c2:21:cd:d9:38:
                    1f:a5:32:27:c8:b4:be:dd:c7:68:23:ef:4f:49:59:
                    8e:51:e4:64:47:b0:ea:b1:7e:e0:96:21:ae:51:c5:
                    e7:d8:a8:d1:60:a1:7a:dc:c1:1c:bf:f3:6f:d3:f2:
                    6d:b9:b2:37:dc:5a:89:10:87:7c:c1:de:c5:a2:ff:
                    f8:45:c5:51:f6:fe:a9:37:e4:85:da:c5:7b:f9:4f:
                    aa:1e:e1:bc:2a:4c:25:b0:f2:b7:2b:43:aa:56:56:
                    79:a7:5d:56:5b:e9:3f:d6:2a:bd:47:2c:f6:8f:8e:
                    50:e6:fc:3b:f3:96:3d:27:28:50:3c:bc:4b:4a:c4:
                    ba:a7:e1:10:32:c8:10:8d:06:c4:7b:c8:8e:09:c3:
                    cc:48:5f:c8:92:39:06:03:5b:4a:44:ad:68:c1:ce:
                    ab:b7:1d:73:52:f7:58:da:13:74:f0:53:a8:be:a2:
                    2f:46:c5:8b:b0:84:13:0f:35:02:69:35:87:0e:2a:
                    c7:8c:9d:d9:7e:16:80:c7:bb:52:46:9d:b4:d0:40:
                    f6:4b:60:6e:ec:ca:86:bd:99:0e:14:df:af:07:a6:
                    ee:a1:03:79:db:b2:e6:91:9c:41:9e:0e:46:90:b5:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:FF:B8:26:CA:78:0A:80:99:62:03:B0:02:61:F4:42:47:AA:00
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/V8f_uCbKeAqAmWIDsAJh9EJHqgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:7d:44:b9:9e:9d:80:06:93:6e:88:4e:b2:cb:5e:0b:2f:
         ae:d0:18:1b:92:c5:aa:6f:3d:0e:c1:24:5d:9c:2b:4a:a2:43:
         28:51:2e:97:be:c4:3d:c8:c4:b6:48:50:c7:c5:a2:c3:8f:19:
         8b:01:fd:17:3d:75:be:49:c6:1b:fe:e4:34:84:93:80:46:2f:
         4f:8b:c3:5b:71:23:bc:3d:44:f3:cb:5e:87:9c:79:14:95:75:
         bf:6d:42:eb:fd:c3:17:96:8a:2f:f0:57:56:91:f5:ea:80:b1:
         c3:17:09:f8:fc:bd:be:3d:ca:c5:7e:38:1c:e1:45:b2:33:3c:
         d7:9e:1c:42:37:c5:6e:aa:3d:94:71:45:24:be:ba:13:71:49:
         da:91:75:bc:12:89:be:16:42:9f:80:36:2b:c9:ea:72:65:e9:
         84:7d:d6:73:7b:27:06:fc:8d:7e:1a:ba:03:6f:52:0a:3d:02:
         ad:d7:1e:0b:3c:fc:c6:13:85:2e:66:cd:09:5a:76:6e:22:1f:
         6c:49:c6:63:73:1a:2e:81:88:ae:a1:a1:67:62:ae:73:86:8a:
         cc:07:dc:28:96:0b:4c:a5:56:3c:ed:fd:19:90:e0:09:a3:af:
         1c:98:5a:f3:f1:c2:1b:08:00:a7:ba:38:5c:4f:87:fb:dc:00:
         5a:4d:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org