Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XxGpCPxSFoHOjkA_iUn7AJWGQBE.roa
File:                     XxGpCPxSFoHOjkA_iUn7AJWGQBE.roa (raw, json)
Hash identifier:          fsHCbRbgftY9zqHIsbUt6OixLgSj5/WydLFE3SDBYsE=
Subject key identifier:   5F:11:A9:08:FC:52:16:81:CE:8E:40:3F:89:49:FB:00:95:86:40:11
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018A6C0A63C36F0F24539A85420A761259CE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XxGpCPxSFoHOjkA_iUn7AJWGQBE.roa
Signing time:             Wed 06 Sep 2023 19:48:54 +0000
ROA not before:           Wed 06 Sep 2023 19:48:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198617
IP address blocks:        185.223.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6c:0a:63:c3:6f:0f:24:53:9a:85:42:0a:76:12:59:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Sep  6 19:48:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5f11a908fc521681ce8e403f8949fb0095864011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2b:a5:b0:8e:9d:aa:32:30:b4:80:d9:1e:90:
                    cb:51:19:d1:47:03:80:36:b7:44:73:ba:cd:fe:0f:
                    76:78:0c:7e:f7:f2:c4:c8:ff:78:3e:46:f7:62:7a:
                    32:16:3d:19:95:8a:94:a8:75:15:6e:5f:e3:52:06:
                    13:6f:ca:19:6b:31:ed:6e:f1:14:7e:06:bb:b7:45:
                    91:99:c5:d2:d4:09:b1:5e:c6:db:46:d9:e9:33:de:
                    c1:6a:36:e8:18:cc:62:73:3b:35:ae:e8:b4:3a:79:
                    4c:bd:30:2d:a0:fc:fa:79:60:16:6e:25:73:dc:05:
                    4c:65:3c:ad:8f:50:cd:fe:c0:68:10:06:2d:2d:6f:
                    7f:ae:74:9f:b4:f4:de:46:2d:23:b7:c0:b8:58:7a:
                    57:46:01:a6:09:2b:a7:7b:a9:f9:db:ea:7a:bb:76:
                    7b:10:87:14:59:74:e2:1d:1c:bb:66:5c:2f:67:51:
                    39:3a:f3:86:01:78:e6:19:af:b4:7d:c0:b4:fb:fc:
                    d8:18:29:0f:72:6b:47:07:49:c2:2a:b7:9b:df:33:
                    06:21:d6:09:1a:dd:42:6b:b0:9a:78:d8:b2:77:f3:
                    1d:c2:95:47:d5:18:64:ff:42:a9:92:e4:af:82:94:
                    e7:bc:16:17:da:5a:ea:e4:4a:e6:23:bf:f1:24:73:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:A9:08:FC:52:16:81:CE:8E:40:3F:89:49:FB:00:95:86:40:11
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XxGpCPxSFoHOjkA_iUn7AJWGQBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ca:51:f2:45:a1:2d:82:06:56:0c:5c:cc:c5:19:c9:1d:b5:
         38:61:27:2b:e7:65:cd:85:ce:4f:ed:76:f2:4e:8e:df:07:2b:
         0c:e9:97:ca:de:57:1c:0d:8e:ac:17:c3:c6:1d:14:b4:ce:23:
         10:49:17:c8:9f:a7:da:56:79:e2:2c:0a:a0:fd:d8:6d:76:72:
         25:cb:38:74:4b:fa:71:63:33:5e:2d:9d:1e:a5:9f:b9:4b:9c:
         2f:19:3c:e9:54:e1:e8:ef:4a:93:30:40:e5:1c:f9:31:9f:d9:
         28:72:4b:70:b0:fa:02:89:89:77:54:f3:1a:1d:4f:bf:06:43:
         d9:10:2e:fb:fa:10:85:7d:b5:ba:1e:02:48:81:68:8b:42:f7:
         5e:f3:37:34:59:94:02:80:7b:17:da:95:b8:a3:df:30:82:15:
         da:5d:eb:6b:eb:2e:01:1c:bf:45:43:69:e5:7a:19:34:84:ab:
         f1:b4:24:ea:a8:93:74:7a:54:e8:fe:59:27:7b:d9:18:09:d8:
         c7:74:65:db:4f:76:d4:48:fe:77:3d:71:0d:48:ad:9e:3c:c9:
         f8:2f:76:ec:f6:e5:e3:de:00:94:63:f7:11:7e:25:15:85:a3:
         93:24:a6:78:0e:00:b7:65:4b:96:87:30:0c:83:71:f6:d2:ef:
         1d:78:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org