Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JVH3jIsKJyCuHJizUQ2YWFHiwYY.roa
File:                     JVH3jIsKJyCuHJizUQ2YWFHiwYY.roa (raw, json)
Hash identifier:          +Q3o9s3Mk/7BzonQPfJ0rSF9slOvhcZFG9N9lNQxQHo=
Subject key identifier:   25:51:F7:8C:8B:0A:27:20:AE:1C:98:B3:51:0D:98:58:51:E2:C1:86
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018BFD204D979D67D36CA7D54DC3FF6CDE90
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JVH3jIsKJyCuHJizUQ2YWFHiwYY.roa
Signing time:             Thu 23 Nov 2023 17:00:34 +0000
ROA not before:           Thu 23 Nov 2023 17:00:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9087
IP address blocks:        83.147.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fd:20:4d:97:9d:67:d3:6c:a7:d5:4d:c3:ff:6c:de:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Nov 23 17:00:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2551f78c8b0a2720ae1c98b3510d985851e2c186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:b0:58:2a:b7:7d:25:b8:e2:01:ff:a4:1b:
                    b3:5e:e0:7b:de:d2:d8:69:7e:85:7e:28:19:87:57:
                    4c:12:3a:45:44:a2:8e:b0:3f:41:e0:5b:6b:dd:c0:
                    83:2a:26:b3:20:8f:71:7d:53:af:6d:c4:a7:61:fc:
                    57:a4:cd:6c:77:a1:75:09:cf:0f:e1:42:1b:8e:90:
                    ab:83:5d:b6:1f:8c:59:cf:10:84:74:ef:c9:7f:c6:
                    d3:5c:76:62:91:c7:01:7e:db:49:a0:f0:a2:dd:9a:
                    c3:36:e4:0d:f5:dc:68:d6:07:27:bb:7a:0a:be:29:
                    0c:2c:49:e0:fe:0e:b6:66:d3:d5:54:64:bc:01:e2:
                    b5:4b:52:37:96:c7:9b:26:bf:bf:49:07:9b:8c:59:
                    57:53:51:77:05:76:71:45:22:b0:ee:c6:a1:11:8d:
                    33:11:51:c5:1a:da:6b:77:2e:4d:c7:af:0a:5b:82:
                    7e:40:a8:e0:97:5b:b7:8a:5f:4a:27:41:f6:5d:97:
                    ba:a3:45:5a:de:fc:9a:af:6f:5f:ce:4e:e8:a3:e6:
                    5a:fe:ec:b0:6c:05:ee:94:6e:03:7d:73:1c:69:49:
                    03:b3:02:b6:eb:7d:20:f1:c6:17:d5:2c:45:f2:a3:
                    5e:df:71:4f:98:0e:49:9d:9b:00:b8:36:6b:bc:ae:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:F7:8C:8B:0A:27:20:AE:1C:98:B3:51:0D:98:58:51:E2:C1:86
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JVH3jIsKJyCuHJizUQ2YWFHiwYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:28:57:9d:06:fa:76:1d:03:36:30:fd:a9:f7:2e:50:44:
         30:2b:4a:a9:ea:6a:b3:a6:bd:e9:b1:fb:39:9d:cd:e3:18:50:
         32:9c:76:f8:fc:68:84:f6:0c:23:12:e4:c7:a5:f3:af:c5:53:
         6c:10:28:df:72:bc:37:de:90:40:9e:a7:46:d6:4d:13:ec:d7:
         b2:37:c7:bd:89:8f:1a:bb:05:a0:6c:5d:f8:4d:d4:9a:d9:43:
         cd:f8:62:a1:34:c8:8c:21:66:4c:69:9c:6f:2f:9c:3c:d5:03:
         96:8b:16:9a:63:76:5f:02:df:74:11:29:15:f3:15:66:df:ff:
         9f:d7:80:dc:c9:74:7b:d7:db:03:cf:85:52:60:00:51:f0:7e:
         4a:4b:8d:96:86:34:33:aa:69:15:4d:93:5a:cd:d4:5f:e1:f0:
         47:a0:4e:67:ed:e9:e1:ce:66:2f:4d:bd:b7:d7:41:a4:f6:91:
         b1:55:02:92:13:a1:2c:9d:1d:cc:29:83:cc:e4:49:ef:b0:3b:
         b8:95:8a:6f:06:f9:6b:18:58:68:6d:17:b3:b0:e6:fd:b9:f2:
         1f:c6:c1:6b:fe:c7:a2:d3:5d:08:7f:31:c8:90:8d:2b:03:28:
         4d:2c:85:20:89:b9:1d:84:3f:82:a5:ae:a6:9e:e5:c9:a1:25:
         a3:89:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org