Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1FTg3rZ-PEfGFTzAJWdfrIRuMKg.roa
File:                     1FTg3rZ-PEfGFTzAJWdfrIRuMKg.roa (raw, json)
Hash identifier:          31FiYjTC0aVETch7aG+lQncxGWYh0lo1rMDVJhewe7E=
Subject key identifier:   D4:54:E0:DE:B6:7E:3C:47:C6:15:3C:C0:25:67:5F:AC:84:6E:30:A8
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       01860BDC00363838E6D67728D4C65797EDFA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1FTg3rZ-PEfGFTzAJWdfrIRuMKg.roa
Signing time:             Wed 01 Feb 2023 07:23:32 +0000
ROA not before:           Wed 01 Feb 2023 07:23:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211936
IP address blocks:        83.147.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 May 2023 03:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0b:dc:00:36:38:38:e6:d6:77:28:d4:c6:57:97:ed:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Feb  1 07:23:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d454e0deb67e3c47c6153cc025675fac846e30a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:b8:34:16:07:bc:02:e5:3e:92:93:40:42:
                    78:08:9c:88:c3:82:b2:90:71:fd:93:1e:80:7c:ce:
                    07:f7:b9:ce:11:d8:b5:95:86:8b:96:8f:4b:62:70:
                    b3:94:ef:f8:2f:0c:a7:0a:59:06:8a:79:20:14:eb:
                    d5:5a:c7:f9:05:3c:48:ec:e5:11:2c:9c:e6:15:a2:
                    bd:95:1c:4b:bc:51:ff:3c:96:87:57:8f:16:a6:fd:
                    03:9f:d3:ae:f4:42:39:b5:e0:da:9a:94:5a:6e:44:
                    38:99:df:35:3a:05:21:34:c0:83:69:09:fc:04:49:
                    5f:2f:e3:f9:c4:f1:31:90:68:78:c0:e4:94:24:da:
                    ea:b6:19:e0:94:a7:77:58:83:88:81:c1:bc:75:d5:
                    96:d3:ff:7a:a1:9e:03:29:c5:f3:5b:b0:91:95:68:
                    25:4a:35:64:c4:86:76:72:61:2d:de:ce:36:31:96:
                    22:a3:43:55:b2:86:72:f7:38:42:65:70:eb:0e:b4:
                    d8:2b:36:fa:f4:43:03:8b:be:23:df:e5:07:9f:9c:
                    46:bb:9b:51:a5:7d:ca:e9:dd:e5:96:83:f7:87:37:
                    96:2f:d6:d4:a8:bf:09:ce:93:d2:27:be:01:03:e9:
                    cd:fc:ef:ad:27:93:01:6d:3b:aa:f8:d4:72:c4:e9:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:E0:DE:B6:7E:3C:47:C6:15:3C:C0:25:67:5F:AC:84:6E:30:A8
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1FTg3rZ-PEfGFTzAJWdfrIRuMKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:69:b9:67:05:b0:33:81:44:ea:8e:e2:d5:ee:da:0c:09:
         23:64:96:dd:13:7c:6b:59:25:18:21:ee:1e:da:82:9c:c8:75:
         9b:f1:9d:fe:12:65:bb:09:31:79:9a:f4:12:f6:4f:42:47:aa:
         f6:09:3b:d2:2f:30:cc:0c:61:46:98:b1:36:bc:76:e0:6c:37:
         99:31:0e:5e:ae:1b:6f:29:ce:dd:74:43:9a:3d:81:ad:aa:60:
         bf:6a:93:eb:6e:97:e9:1f:73:3d:e2:ac:6b:9a:a1:ae:15:2c:
         34:65:ee:e2:2f:04:10:d0:b2:e9:ba:11:ee:f3:f0:fc:aa:84:
         98:cb:78:b9:fe:d9:41:5f:4f:dc:31:7f:b8:91:9b:03:a5:48:
         12:41:e9:99:a2:56:2e:16:5b:06:fe:62:79:aa:1e:70:bc:80:
         74:15:2c:07:5c:64:a8:82:92:9c:7d:9b:88:c0:5e:a5:58:e1:
         0a:e4:cd:d2:b7:28:4d:9e:c6:04:6a:55:0f:96:43:ad:87:38:
         43:df:f0:89:47:b9:0d:a5:9f:9f:6c:67:02:1a:ef:a4:dc:84:
         c6:cc:c8:11:67:23:10:56:39:6e:66:f0:c7:d3:1a:a2:ad:21:
         4c:ce:cc:e4:69:92:4e:c6:ec:c3:5f:93:ff:66:48:93:25:93:
         40:4d:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org