Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Fc3FWYMeVD0kOH2SX5tBcmbE8dA.roa
File:                     Fc3FWYMeVD0kOH2SX5tBcmbE8dA.roa (raw, json)
Hash identifier:          Cx9juh0KsqiJgR23rw3+LimKf6O0VM/HGTjZEFIR10c=
Subject key identifier:   15:CD:C5:59:83:1E:54:3D:24:38:7D:92:5F:9B:41:72:66:C4:F1:D0
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018AEC63D48D831B1505750522E03E357B3A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Fc3FWYMeVD0kOH2SX5tBcmbE8dA.roa
Signing time:             Sun 01 Oct 2023 17:57:59 +0000
ROA not before:           Sun 01 Oct 2023 17:57:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59432
IP address blocks:        83.147.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 05:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ec:63:d4:8d:83:1b:15:05:75:05:22:e0:3e:35:7b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Oct  1 17:57:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15cdc559831e543d24387d925f9b417266c4f1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:68:b1:28:f6:c9:df:36:cf:3d:de:5b:89:
                    54:cb:b0:60:c2:63:d8:1b:48:47:51:07:f2:9d:f8:
                    b6:56:e1:6f:8d:9b:6b:fe:f0:83:1b:7e:b1:00:50:
                    e6:ab:e4:6a:f7:ed:e9:50:d8:4a:36:36:12:ea:c0:
                    34:38:13:c1:ab:55:7a:4b:e6:2b:7e:2b:09:78:b2:
                    0e:4c:0c:10:8e:76:41:81:21:38:20:92:d5:20:3c:
                    1f:e3:e0:5f:8e:3c:67:1e:c9:29:6a:e4:f9:d0:57:
                    07:4a:21:44:25:e2:0f:f6:ed:49:23:72:47:0b:b7:
                    97:75:51:b7:9d:35:69:4d:8d:96:e4:85:9b:14:db:
                    83:f1:ff:c0:c7:fa:58:e5:e0:3a:4b:ee:c5:8e:58:
                    51:c1:2a:0b:ba:28:3c:76:98:a6:94:a6:c8:7e:0d:
                    d5:46:ce:de:73:46:56:b6:ea:8f:e4:41:ca:e5:69:
                    ea:69:65:b2:0a:4b:9a:c1:c4:19:d9:ea:5e:de:31:
                    79:6a:a6:3a:eb:4a:cd:e7:a6:6e:27:be:15:05:bc:
                    3c:01:ca:a0:3b:fb:d1:a8:3f:c3:cc:f7:41:bd:75:
                    24:3e:d8:3f:f2:16:52:08:98:65:2b:dd:19:cd:f4:
                    b2:ef:b0:48:df:35:21:ed:0d:c6:c5:1e:d3:d5:d9:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:C5:59:83:1E:54:3D:24:38:7D:92:5F:9B:41:72:66:C4:F1:D0
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Fc3FWYMeVD0kOH2SX5tBcmbE8dA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:84:35:d9:f5:7c:77:41:80:22:1e:83:c5:4d:88:9e:47:
         5a:75:47:0f:5d:c8:18:46:3b:60:87:80:92:52:17:a3:06:d2:
         db:17:67:90:0d:52:9b:01:f0:d0:3a:25:60:02:85:3d:af:64:
         b2:30:58:00:a1:94:e1:56:22:30:7a:02:d4:a2:d4:ec:98:19:
         7a:a2:32:a6:0b:94:ae:ca:28:6c:d1:1d:4e:88:ff:26:32:83:
         68:ca:7e:1b:b9:61:ab:07:25:fe:49:d7:b3:34:1d:13:d0:86:
         f0:2f:cc:9a:6d:c0:93:43:7c:b3:aa:b8:29:04:c5:e9:4a:c3:
         c6:64:b1:ac:65:fd:0f:41:1d:9b:ef:9c:ae:c7:20:f5:66:73:
         f7:c1:4a:63:4e:ca:16:94:64:f3:29:9e:ac:af:79:54:d1:85:
         32:8e:e7:31:4b:3b:39:0f:52:07:66:b3:e3:c3:30:ec:9e:70:
         23:9c:00:50:c9:fc:37:da:d0:f4:62:80:aa:81:41:4c:44:be:
         d9:8d:89:9d:53:00:25:55:72:65:1a:7b:c6:d1:75:95:8f:01:
         4a:93:4c:db:61:8d:fe:06:7e:62:a6:71:70:e3:41:93:49:f4:
         32:16:fc:61:ff:fc:c1:de:70:4f:14:66:aa:23:5e:7a:06:dc:
         c9:5a:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org