Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GqGPmlcSj7YZrg8CF3KcOydnyRg.roa
File:                     GqGPmlcSj7YZrg8CF3KcOydnyRg.roa (raw, json)
Hash identifier:          wPbiuiXGj2SBtq7cQrHIM/N70fDlN7C4Ye5/SPQJGEk=
Subject key identifier:   1A:A1:8F:9A:57:12:8F:B6:19:AE:0F:02:17:72:9C:3B:27:67:C9:18
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       01879CF347006BEE665E282BA0348FE8BF3F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GqGPmlcSj7YZrg8CF3KcOydnyRg.roa
Signing time:             Thu 20 Apr 2023 04:36:41 +0000
ROA not before:           Thu 20 Apr 2023 04:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        83.147.44.0/22 maxlen: 24
                          83.147.28.0/22 maxlen: 24
                          83.147.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 17:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9c:f3:47:00:6b:ee:66:5e:28:2b:a0:34:8f:e8:bf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Apr 20 04:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1aa18f9a57128fb619ae0f0217729c3b2767c918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:c7:07:f1:e0:02:c1:06:bb:f6:58:bb:8f:
                    e3:23:ed:e9:9d:df:1d:c9:5a:b8:ea:4c:e8:fc:98:
                    f8:f6:f9:67:40:36:71:b9:e4:d2:36:ee:84:14:c4:
                    e8:a8:56:d0:5c:87:f5:49:5a:96:0b:77:91:34:bc:
                    9b:7d:a7:a5:04:74:a4:05:b5:b0:ce:2b:52:3b:fa:
                    66:c2:07:dc:0f:2f:6b:77:03:bf:7a:47:8b:56:10:
                    7d:39:99:bd:39:b2:75:d1:40:3d:20:04:19:41:8c:
                    ea:fb:26:16:60:e8:91:76:a5:46:c8:20:d2:c4:1a:
                    37:06:29:3a:c2:cf:f8:c3:35:8e:01:72:3e:07:9c:
                    83:84:b3:a7:1f:ea:80:97:2d:3f:e7:ee:f6:f5:57:
                    b1:6b:e9:fc:23:8a:d5:ca:9e:3d:c5:3f:a2:6d:70:
                    08:46:9f:b4:10:42:4c:28:50:9a:1a:ee:2f:7d:34:
                    ff:80:b3:68:25:e5:e5:df:f2:cd:63:92:55:e9:da:
                    3f:8f:11:d1:37:59:cc:3d:12:bf:31:ef:3c:ce:10:
                    f1:00:bb:0e:c2:3b:e6:ba:bb:c6:45:4a:e5:f4:b9:
                    c2:29:9a:77:39:c0:73:43:76:f3:3c:df:3a:a4:1d:
                    1a:f1:76:5b:39:b6:8e:db:75:eb:c3:74:d4:20:1e:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A1:8F:9A:57:12:8F:B6:19:AE:0F:02:17:72:9C:3B:27:67:C9:18
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GqGPmlcSj7YZrg8CF3KcOydnyRg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.28.0-83.147.35.255
                  83.147.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:47:ef:3b:2a:bd:bd:79:9f:3f:8e:94:39:4a:48:d5:f9:cd:
         fb:75:50:e3:de:2d:e0:ee:18:5a:13:b8:7e:e5:8c:52:8a:e6:
         52:76:ed:35:d5:18:92:9c:f9:21:ea:a4:51:1d:05:9b:3c:b8:
         09:26:fe:28:10:59:35:05:ec:a5:c4:a2:9a:ba:4e:60:84:41:
         73:81:cb:ee:e5:29:51:d3:6b:37:59:e5:fe:11:32:a6:c7:32:
         89:62:54:0d:27:30:64:51:db:c6:67:9a:f9:d4:69:a1:63:22:
         b9:8c:0f:65:1a:e7:16:9d:ab:24:11:f6:d7:43:29:72:22:e4:
         0f:54:d3:72:3f:a8:cc:f7:db:01:dc:3d:3e:18:c6:7a:8d:60:
         cd:16:b0:ee:7e:87:fc:04:67:0e:d0:2d:bd:0d:89:21:58:b6:
         b2:bd:23:5e:e1:21:5f:93:90:af:1a:93:b4:dd:91:7e:6c:8c:
         3e:15:b3:f4:a6:79:0c:fb:2e:20:fd:ae:44:a7:4b:23:b5:de:
         95:46:81:0f:f4:d5:9b:74:ca:d9:09:f6:ad:9a:c5:31:db:6f:
         f4:fa:7c:fe:6d:b0:94:b6:bd:a9:63:de:3c:4d:b3:e9:33:1b:
         5e:b1:de:d0:3c:f7:46:e9:ca:a3:b3:25:11:7d:cf:cf:d9:29:
         74:37:bb:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org