Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/B4tHR4rvpYTXSf9sJT-w03gg5SQ.roa
File:                     B4tHR4rvpYTXSf9sJT-w03gg5SQ.roa (raw, json)
Hash identifier:          GLuiVPSr557drXlpobh0Ng5hllp2RZF34LiXai1GUio=
Subject key identifier:   07:8B:47:47:8A:EF:A5:84:D7:49:FF:6C:25:3F:B0:D3:78:20:E5:24
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       01893E32E7974BE3136535D7C31F83F45481
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/B4tHR4rvpYTXSf9sJT-w03gg5SQ.roa
Signing time:             Mon 10 Jul 2023 05:07:50 +0000
ROA not before:           Mon 10 Jul 2023 05:07:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        83.147.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Oct 2023 04:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3e:32:e7:97:4b:e3:13:65:35:d7:c3:1f:83:f4:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jul 10 05:07:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=078b47478aefa584d749ff6c253fb0d37820e524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:fd:ee:1b:12:9e:72:e4:0b:ea:1d:41:62:
                    93:52:1e:16:df:b5:6f:12:62:7c:57:f5:ef:ec:2d:
                    44:2e:4a:75:b6:47:c7:28:93:78:6d:f2:3b:7e:52:
                    c4:3b:f6:c3:ee:8e:78:ac:36:61:b8:48:7f:d3:c9:
                    e6:13:a0:da:97:4b:c5:b9:0d:43:15:ae:5b:d6:a1:
                    18:00:ad:bc:6c:31:a5:e7:18:a9:de:ba:cf:59:e9:
                    c7:b7:8f:04:9b:df:f7:1f:cd:d9:55:dc:15:17:15:
                    b6:26:d9:8e:1e:b0:58:0e:c5:93:56:50:98:80:cd:
                    41:94:97:d2:ee:4e:9f:d3:f6:87:97:2c:49:bf:18:
                    44:96:b0:2d:ba:2f:10:a5:36:c0:bf:28:04:c5:c3:
                    fe:65:02:f1:65:22:45:c9:84:20:e3:69:95:6f:c3:
                    ed:35:2a:21:b5:f7:a6:6f:2a:6e:ea:8d:27:0f:28:
                    ad:0e:d4:e7:67:4b:9d:f0:16:fd:15:1b:10:65:91:
                    d6:b4:de:a3:b8:a7:19:70:0e:31:f6:3d:43:d8:3d:
                    42:ce:4c:8c:3c:0e:55:22:6e:64:2a:46:b7:f7:2d:
                    58:ff:4b:21:db:dd:55:6d:d6:1c:f9:04:05:1d:c6:
                    a7:a5:f6:a0:e0:72:23:38:62:4e:cf:f6:a7:16:87:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:47:47:8A:EF:A5:84:D7:49:FF:6C:25:3F:B0:D3:78:20:E5:24
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/B4tHR4rvpYTXSf9sJT-w03gg5SQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:b2:d9:48:a3:0d:ce:ec:7a:f2:39:7f:f4:9e:90:25:43:
         c3:f9:99:93:be:5a:7c:ed:e6:28:b7:a5:73:bf:85:30:97:17:
         57:bb:8f:f0:00:58:5d:3a:59:fb:eb:80:c3:3d:94:0f:12:56:
         a7:2a:2b:99:48:6c:0c:71:7b:df:cc:de:3c:92:e9:f4:2d:38:
         0e:bc:56:dd:7b:7c:79:f0:6f:2e:e8:52:78:31:ee:ee:2c:50:
         a9:ae:8d:90:3c:79:63:96:71:b2:db:0f:a3:8a:e6:99:ad:8f:
         b2:eb:dd:76:d6:22:ff:fb:f7:a1:ce:31:38:d3:a3:2a:de:1e:
         af:61:e2:05:41:dd:7e:5b:56:34:07:00:d9:32:5b:6e:41:92:
         ca:5a:9a:01:a4:90:be:a4:e7:b6:dd:8f:b8:50:dc:5d:25:8b:
         ff:c5:07:96:13:0f:ee:7c:a2:53:71:b4:17:65:b7:af:68:ff:
         ae:1d:eb:cf:f5:77:76:67:c0:7e:c2:76:fb:0f:5f:70:98:bd:
         59:78:7a:ce:63:cf:0e:bb:68:c2:b0:4a:75:eb:51:f9:ef:a0:
         df:4b:c5:0b:b0:6d:ae:b1:47:f7:c5:a4:e4:81:46:c1:8c:49:
         54:59:bc:ea:18:48:60:d6:1b:9b:37:17:f0:9a:0b:6e:dd:99:
         e6:f3:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org