Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9unnhh08Fv6uTbPEy03XeWaE4Gg.roa
File:                     9unnhh08Fv6uTbPEy03XeWaE4Gg.roa (raw, json)
Hash identifier:          yAxGItV5hOzY12OniDpN9Y64HJ0ojyL/GHSdQCMyggg=
Subject key identifier:   F6:E9:E7:86:1D:3C:16:FE:AE:4D:B3:C4:CB:4D:D7:79:66:84:E0:68
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0187AD86BD4875155BF92EC554381CF0409F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9unnhh08Fv6uTbPEy03XeWaE4Gg.roa
Signing time:             Sun 23 Apr 2023 09:51:41 +0000
ROA not before:           Sun 23 Apr 2023 09:51:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        83.147.40.0/22 maxlen: 24
                          83.147.9.0/24 maxlen: 24
                          83.147.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 17:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ad:86:bd:48:75:15:5b:f9:2e:c5:54:38:1c:f0:40:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Apr 23 09:51:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6e9e7861d3c16feae4db3c4cb4dd7796684e068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:80:88:13:3a:41:2d:40:4d:65:11:db:18:f0:
                    6b:2f:4a:1e:9a:46:71:e1:92:ac:48:db:3f:9b:3a:
                    02:f4:35:38:49:e7:36:7e:71:6c:89:ba:1b:39:82:
                    4e:d2:22:d5:9e:91:6f:5c:92:54:ab:e6:e7:51:68:
                    5c:8c:5a:08:fe:99:f7:3e:89:01:15:f8:eb:b9:71:
                    48:f8:0d:2a:41:c9:7b:79:0e:55:81:0e:c8:4b:fe:
                    f6:34:ef:2a:31:25:67:e5:f8:1e:74:a1:d3:49:d9:
                    3f:54:12:a7:c8:d2:0f:fc:51:16:98:88:b6:8c:3f:
                    25:a5:a8:c8:2c:36:8a:91:b8:6c:2b:29:2e:8b:cf:
                    41:5a:a9:cd:24:02:fd:82:c9:06:1d:d8:71:b0:15:
                    64:31:fa:95:7a:98:d9:c2:4f:be:b7:75:20:c9:c1:
                    e3:44:99:47:46:7d:83:27:89:24:12:8e:04:f0:80:
                    c7:41:16:52:b6:6e:45:6d:4e:33:14:34:52:cc:07:
                    db:5a:b7:4e:19:66:bc:c2:9f:13:8f:d2:93:f7:7b:
                    92:cc:4b:a2:ea:bc:43:fe:f2:46:d8:dd:d1:e3:ab:
                    d4:96:a6:c0:43:be:72:b6:42:e1:a5:1c:fe:ee:06:
                    08:3f:c4:17:8a:9f:87:42:f4:72:bf:e3:de:ad:c5:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:E7:86:1D:3C:16:FE:AE:4D:B3:C4:CB:4D:D7:79:66:84:E0:68
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9unnhh08Fv6uTbPEy03XeWaE4Gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.9.0/24
                  83.147.36.0-83.147.43.255

    Signature Algorithm: sha256WithRSAEncryption
         67:23:c6:00:39:f2:9b:ed:dd:d8:09:b0:bd:18:f2:91:1e:2d:
         31:5e:95:47:50:64:0f:d2:7a:48:c3:46:7e:4d:2f:f5:f2:69:
         92:56:9b:62:26:b3:e8:c8:58:20:b0:b9:96:ab:dc:74:e1:6a:
         b0:ea:9d:62:9c:91:ec:10:12:53:e4:a3:08:b5:3f:f0:23:80:
         0c:4e:a1:c9:27:9d:20:83:40:05:86:7a:62:d7:1f:42:5c:af:
         54:4a:43:85:22:fa:4c:31:8f:e8:1e:d4:7c:16:71:99:2f:42:
         41:ff:04:af:23:89:8e:18:c5:0c:84:2b:b7:7e:68:d8:51:4d:
         9b:9b:74:6f:69:46:f9:0f:4b:47:55:94:c6:82:9b:7e:20:78:
         b5:47:94:3c:cf:ec:60:cc:a2:d8:58:f6:c7:3f:53:fe:ea:ba:
         b7:73:be:f4:8d:c8:8b:e0:a6:ef:81:93:a7:04:43:54:d8:82:
         7a:2d:9f:40:88:17:34:bb:cd:70:ec:c1:07:a9:e7:d9:6c:69:
         ee:9f:6b:be:f6:41:90:a2:83:b7:9f:c3:7d:7c:90:ea:8b:6c:
         f9:2e:d7:e8:b7:f1:dc:5c:dc:b3:09:7a:fb:0f:2a:9a:1b:05:
         c8:99:da:b9:54:90:5a:0b:32:ae:62:33:92:21:16:13:42:4b:
         5f:04:3c:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org