Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XvoF30EyGkdttVFitx144ny6-YU.roa
File:                     XvoF30EyGkdttVFitx144ny6-YU.roa (raw, json)
Hash identifier:          sQgJdtKEONKxlhtIwPW/5AuaNBcef+ZSqdX6i3UzchY=
Subject key identifier:   5E:FA:05:DF:41:32:1A:47:6D:B5:51:62:B7:1D:78:E2:7C:BA:F9:85
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018BFFD8D2901075AF212789BA9611DCAD2A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XvoF30EyGkdttVFitx144ny6-YU.roa
Signing time:             Fri 24 Nov 2023 05:41:21 +0000
ROA not before:           Fri 24 Nov 2023 05:41:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62816
IP address blocks:        83.147.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ff:d8:d2:90:10:75:af:21:27:89:ba:96:11:dc:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Nov 24 05:41:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5efa05df41321a476db55162b71d78e27cbaf985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:78:29:00:3a:f9:0f:a6:38:b6:f6:9f:4b:
                    8f:c5:91:df:6f:64:42:e6:30:af:06:7f:2b:ac:44:
                    ec:e4:51:f4:22:ad:bf:7f:af:7e:8a:ec:76:a2:ab:
                    a6:0b:d0:5e:66:6c:8e:fe:80:3d:c6:b3:f9:76:ab:
                    be:36:47:f6:ab:a7:71:c3:93:06:57:cf:e7:72:fd:
                    6d:84:25:5c:ad:37:0c:78:1e:99:9d:59:fc:6c:cd:
                    dd:dd:eb:28:a0:94:4d:72:3d:e5:91:b8:b1:89:f8:
                    37:eb:6e:9e:b2:1b:cc:a2:14:93:e6:0c:37:78:bf:
                    77:e0:ae:44:9c:6f:a6:c3:40:85:f2:e0:5e:2e:39:
                    85:82:a7:7c:d0:03:db:77:ea:dc:10:e9:8a:74:00:
                    80:65:9c:2d:42:94:d8:fd:51:21:db:1d:b6:6e:83:
                    9c:b0:b2:c9:a4:00:35:07:6b:fb:98:44:ea:83:fe:
                    80:6a:c9:e5:36:f6:df:c3:5a:35:aa:11:76:70:55:
                    e3:be:4f:e3:e6:68:8a:ef:9a:e2:ba:63:0e:ee:e3:
                    32:cd:ce:01:44:ba:14:b8:ce:c2:7e:c7:83:9d:be:
                    f7:c2:8d:c8:2b:7c:da:b1:19:1e:03:29:ea:f7:e1:
                    e4:48:e3:90:7d:0c:31:e7:10:7d:d4:29:11:a2:6f:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FA:05:DF:41:32:1A:47:6D:B5:51:62:B7:1D:78:E2:7C:BA:F9:85
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/XvoF30EyGkdttVFitx144ny6-YU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:9d:f0:86:1a:30:93:95:9f:2e:97:1a:cc:7d:e9:2e:c7:
         b9:9e:16:5d:e8:6c:92:45:2b:1f:d4:c5:d6:d1:85:ec:cf:c0:
         9c:f3:3f:64:5f:e1:c6:2a:74:94:09:b8:ee:49:59:55:07:a6:
         40:91:c5:ad:e4:c4:e1:4a:69:14:83:8f:8d:5e:7e:ca:e2:9e:
         eb:87:24:e3:f1:48:cc:2c:1b:86:6b:42:a3:3f:65:47:53:09:
         08:db:50:08:9c:fb:f7:3f:16:52:86:d8:83:04:df:cb:fa:78:
         a3:c6:51:95:83:70:24:8a:2a:06:d3:3d:7e:79:99:7f:0c:ff:
         e5:14:81:d9:26:5a:c4:d9:8e:6a:78:47:51:a7:d8:42:a3:79:
         d9:76:4d:6d:26:9c:aa:84:86:b4:af:2c:cd:3c:6b:88:de:9d:
         1d:82:40:cc:46:d0:8c:53:47:66:5d:12:04:85:88:9e:e6:43:
         06:40:ce:ad:bf:02:7f:2c:c7:49:cd:8d:a8:68:85:fa:68:4d:
         5a:b2:6b:70:8a:ed:21:42:86:c9:2b:0c:a7:73:80:e7:b6:d5:
         46:54:74:13:63:40:b6:3f:93:a5:7a:0e:ac:46:dc:3c:6a:86:
         b2:52:6d:52:d0:8e:05:23:ca:bc:7d:4c:6c:1e:00:44:74:d0:
         a8:50:0b:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv/2NKQEHWvISeJupYR3K0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMxMTI0MDU0MTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWZhMDVkZjQxMzIxYTQ3NmRiNTUxNjJiNzFkNzhlMjdjYmFmOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktJ4KQA6+Q+mOLb2n0uPxZHfb2RC
5jCvBn8rrETs5FH0Iq2/f69+iux2oqumC9BeZmyO/oA9xrP5dqu+Nkf2q6dxw5MG
V8/ncv1thCVcrTcMeB6ZnVn8bM3d3esooJRNcj3lkbixifg3626eshvMohST5gw3
eL934K5EnG+mw0CF8uBeLjmFgqd80APbd+rcEOmKdACAZZwtQpTY/VEh2x22boOc
sLLJpAA1B2v7mETqg/6AasnlNvbfw1o1qhF2cFXjvk/j5miK75riumMO7uMyzc4B
RLoUuM7CfseDnb73wo3IK3zasRkeAynq9+HkSOOQfQwx5xB91CkRom8SywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF76Bd9BMhpHbbVRYrcdeOJ8uvmFMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvWHZvRjMwRXlHa2R0dFZGaXR4MTQ0bnk2LVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MXMA0G
CSqGSIb3DQEBCwUAA4IBAQBF8Z3whhowk5WfLpcazH3pLse5nhZd6GySRSsf1MXW
0YXsz8Cc8z9kX+HGKnSUCbjuSVlVB6ZAkcWt5MThSmkUg4+NXn7K4p7rhyTj8UjM
LBuGa0KjP2VHUwkI21AInPv3PxZShtiDBN/L+nijxlGVg3AkiioG0z1+eZl/DP/l
FIHZJlrE2Y5qeEdRp9hCo3nZdk1tJpyqhIa0ryzNPGuI3p0dgkDMRtCMU0dmXRIE
hYie5kMGQM6tvwJ/LMdJzY2oaIX6aE1asmtwiu0hQobJKwync4DnttVGVHQTY0C2
P5Oleg6sRtw8aoayUm1S0I4FI8q8fUxsHgBEdNCoUAst
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org