Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DX6EnrUrWhm_NzFsn1crVOGBySk.roa
File:                     DX6EnrUrWhm_NzFsn1crVOGBySk.roa (raw, json)
Hash identifier:          /bDapYBNajb36fRtI37VQLsPj3O9EXaXtrM9A6vbrQ4=
Subject key identifier:   0D:7E:84:9E:B5:2B:5A:19:BF:37:31:6C:9F:57:2B:54:E1:81:C9:29
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0187D062630E7237C852C55AB7ECA9CA2D4B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DX6EnrUrWhm_NzFsn1crVOGBySk.roa
Signing time:             Sun 30 Apr 2023 04:18:41 +0000
ROA not before:           Sun 30 Apr 2023 04:18:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     393427
IP address blocks:        83.147.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d0:62:63:0e:72:37:c8:52:c5:5a:b7:ec:a9:ca:2d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Apr 30 04:18:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d7e849eb52b5a19bf37316c9f572b54e181c929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:32:d5:64:ba:95:1c:8e:db:e3:4e:ef:a5:
                    70:9a:c0:b3:13:10:62:85:74:c2:bc:1e:4a:4b:fa:
                    40:7d:09:e4:5f:d1:f8:87:63:e9:f3:b8:3e:d5:f2:
                    09:02:33:b3:cb:1a:9a:0d:ef:40:2d:92:41:ba:f0:
                    e8:e8:d5:90:36:92:c7:68:37:e5:57:25:8d:14:04:
                    72:a1:90:95:c1:ba:e7:0f:f5:95:78:6c:e5:e6:b0:
                    4c:ba:f9:c1:3d:81:de:89:48:64:16:b9:5a:99:34:
                    4a:15:91:18:84:bb:92:7a:7e:38:fd:03:20:e1:43:
                    76:a5:fa:c1:47:06:8f:80:69:94:84:78:dd:ab:e8:
                    c1:05:f9:0f:e4:dc:51:05:b5:20:57:0f:fc:a1:f6:
                    a7:a6:44:bb:d8:f6:b8:c5:6c:87:f9:1b:8e:ff:5a:
                    05:0c:c2:15:df:87:5f:58:a8:27:04:b9:a8:62:c8:
                    f4:fd:b0:1b:c5:f8:3a:4d:e2:a1:b8:9c:da:81:d1:
                    fc:f1:54:1a:6c:61:81:1a:3f:a1:b0:31:21:39:d1:
                    a6:87:d8:d4:b8:ea:45:70:6a:1f:e8:a3:11:18:8c:
                    be:64:91:bb:5f:2d:ee:c3:76:e0:22:02:c7:aa:15:
                    e2:19:f3:49:db:50:90:c5:7e:73:01:a2:e8:a3:10:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7E:84:9E:B5:2B:5A:19:BF:37:31:6C:9F:57:2B:54:E1:81:C9:29
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/DX6EnrUrWhm_NzFsn1crVOGBySk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:af:e2:94:28:17:a5:e3:16:05:3a:0d:92:73:e5:b9:ea:cc:
         88:c6:02:6d:b7:28:1a:11:46:3b:a9:ac:5a:2c:6d:00:1c:c9:
         ca:2f:ef:75:77:85:de:e8:06:d5:f9:c9:ba:83:20:2d:29:a6:
         63:50:01:c4:0c:ca:a8:04:f9:b4:86:32:4e:a0:f9:e1:eb:df:
         1a:9d:74:18:39:6e:d7:39:cf:4d:c0:03:85:3d:f2:72:70:62:
         88:f3:e6:4b:b3:81:28:85:58:30:41:61:14:9d:5f:31:49:c0:
         e9:8b:a2:d9:b6:3f:ed:e2:4e:ea:70:51:b5:f7:81:e1:6a:15:
         d5:fa:41:ef:7b:f3:ec:7a:04:dc:12:d7:16:15:50:db:e3:0d:
         8e:ef:96:32:5c:ed:c5:4b:92:be:74:42:1b:78:d3:d0:e4:71:
         93:f2:7f:89:21:de:d9:c7:ec:69:8c:2a:51:3b:0f:3d:59:50:
         16:62:6b:65:01:a3:29:3c:4a:c2:64:9f:48:90:7d:6f:f9:54:
         d9:79:df:a8:2f:e0:01:dd:2b:2a:41:6c:3b:b6:e6:79:b7:62:
         61:61:75:d8:5f:a9:60:ce:4f:21:ad:73:37:06:8a:02:ee:a7:
         16:b5:35:80:cc:dc:4b:25:81:09:62:a5:29:4a:7c:2a:f3:51:
         12:9a:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org