Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/D-uX0q-Rp6TwU3fOo9Ep0BnUKy8.roa
File:                     D-uX0q-Rp6TwU3fOo9Ep0BnUKy8.roa (raw, json)
Hash identifier:          Bv0eL90H/pcyJACRel7Q68elYvCYGy3G9Nw/lucbxaE=
Subject key identifier:   0F:EB:97:D2:AF:91:A7:A4:F0:53:77:CE:A3:D1:29:D0:19:D4:2B:2F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018FDA82AC86FD4470784C5B993E0B7DC973
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/D-uX0q-Rp6TwU3fOo9Ep0BnUKy8.roa
Signing time:             Sun 02 Jun 2024 19:52:27 +0000
ROA not before:           Sun 02 Jun 2024 19:52:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150249
IP address blocks:        83.147.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 22:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:da:82:ac:86:fd:44:70:78:4c:5b:99:3e:0b:7d:c9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jun  2 19:52:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0feb97d2af91a7a4f05377cea3d129d019d42b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:bd:d7:1d:24:ac:41:a5:04:58:51:52:32:
                    1e:0d:2e:fb:7b:49:47:34:f6:a8:eb:a8:c7:08:5a:
                    1e:45:bb:ce:66:d8:26:4d:22:7c:9d:4a:59:43:47:
                    ca:cb:96:2f:b3:6c:75:16:5e:71:a7:29:b7:f1:37:
                    f5:ab:86:5d:3a:34:2a:2b:fd:e1:4e:77:fc:d6:b7:
                    15:57:48:8e:b9:fd:50:43:a5:dc:1b:d2:10:67:29:
                    1a:40:6c:9c:a4:b0:f5:0d:55:2f:74:32:0e:0c:ba:
                    67:6d:3c:06:96:cd:14:53:9d:9c:70:f7:0e:8b:aa:
                    57:0e:10:8f:19:9f:9a:7f:79:fa:14:5d:9c:cd:ef:
                    c6:b0:60:f2:d0:9c:1b:cb:1e:6b:8b:c6:38:74:00:
                    0b:eb:d4:a2:c0:43:62:06:4a:52:d3:69:e0:55:9e:
                    9a:12:85:01:8e:34:62:d1:14:bd:c0:b6:b6:f2:01:
                    6e:57:e7:c0:5e:0c:2e:f9:b3:15:4d:f1:d0:09:56:
                    7f:c2:e0:aa:89:8f:af:25:d9:94:65:97:9b:97:98:
                    7e:78:90:d8:91:c5:3e:e2:57:fe:f2:1f:8e:3b:57:
                    1f:7d:44:4e:10:72:1a:2d:17:54:77:10:f8:aa:fa:
                    c7:e7:7e:5c:50:bf:ee:0b:d6:e8:27:14:c3:cb:b2:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:97:D2:AF:91:A7:A4:F0:53:77:CE:A3:D1:29:D0:19:D4:2B:2F
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/D-uX0q-Rp6TwU3fOo9Ep0BnUKy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:05:43:e2:1d:9d:f1:8a:b7:36:dd:51:61:a0:eb:60:d4:01:
         72:eb:90:62:49:3b:f7:ca:38:fa:c6:be:b9:53:23:e3:db:39:
         4c:c8:6b:4b:ad:31:57:ac:a5:7d:01:b6:1d:42:0f:93:f8:f2:
         59:94:52:7c:b6:49:ab:0c:88:3e:74:31:e5:0f:f1:a4:3b:1a:
         98:5e:d3:71:bf:dd:d0:6e:0f:26:02:8e:68:e6:87:b5:d6:dc:
         14:12:bf:93:80:fb:0f:a7:90:a1:36:70:cc:c8:1f:41:ca:ff:
         69:06:95:a0:2b:42:56:f7:08:37:1b:aa:ef:ff:a3:c8:f6:40:
         6f:a4:b3:15:57:63:90:00:3f:58:a9:ac:ef:bc:d7:c5:1e:c9:
         56:a5:79:f0:b0:25:55:09:4e:6e:2d:e5:d9:b3:11:a6:2b:bb:
         f9:26:67:25:ee:65:89:5b:a2:89:28:9b:a9:ee:d5:37:0c:da:
         3b:2f:31:51:cf:8a:55:70:da:31:9c:7b:6b:25:56:a9:b0:d8:
         35:00:5f:cd:53:06:f0:9c:13:f3:7a:d7:51:59:d2:10:29:35:
         d4:16:4b:7e:c1:88:2a:53:c9:0d:52:bc:3f:43:90:71:84:af:
         10:dc:06:f0:f5:d0:15:72:28:55:05:91:65:a2:b3:b0:5f:6f:
         03:d3:eb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 00:01:36 2024 by rpki-client on console-ams.rpki-client.org