Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/c_7LcF2vsYt7ru7TZ9hj_B-4XXA.roa
File:                     c_7LcF2vsYt7ru7TZ9hj_B-4XXA.roa (raw, json)
Hash identifier:          1Ssj5yueF3oUkgeeGu5yI0LcdDVe+6+e3tzXyFvlA3c=
Subject key identifier:   73:FE:CB:70:5D:AF:B1:8B:7B:AE:EE:D3:67:D8:63:FC:1F:B8:5D:70
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018C827BE482707076F8B0E1A03319363606
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/c_7LcF2vsYt7ru7TZ9hj_B-4XXA.roa
Signing time:             Tue 19 Dec 2023 14:30:06 +0000
ROA not before:           Tue 19 Dec 2023 14:30:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400909
IP address blocks:        83.147.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:82:7b:e4:82:70:70:76:f8:b0:e1:a0:33:19:36:36:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Dec 19 14:30:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73fecb705dafb18b7baeeed367d863fc1fb85d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:c8:dc:a2:37:a7:7e:2b:3a:62:4e:96:0b:
                    57:d8:dc:eb:9f:eb:4c:d5:ae:c7:66:50:13:c0:3e:
                    6a:4d:0c:26:6e:99:3c:d7:f9:e2:5b:9e:6b:45:db:
                    53:2d:07:31:55:c5:56:22:df:25:ad:f2:d7:b4:7a:
                    99:1c:1c:55:01:72:28:89:9a:dd:93:e3:77:c5:2b:
                    8e:35:6a:5c:8c:0d:b8:c8:08:34:ae:e6:1e:07:d0:
                    8b:64:b0:30:6f:1b:b2:9f:2c:30:0f:d4:95:5f:fa:
                    1a:d4:79:f6:5e:91:27:75:2e:cf:b8:0e:5c:0e:b3:
                    00:04:15:07:60:e6:5d:b6:7b:8e:60:ac:d5:53:a2:
                    f4:3c:9e:78:55:31:bb:51:61:d0:7b:8e:39:bb:1c:
                    11:2e:9e:0d:cb:fd:f4:5f:6d:d4:fb:39:b5:7a:c1:
                    0f:04:cc:22:e3:29:e8:91:9b:53:a4:58:3c:82:89:
                    51:6a:63:e8:4c:bb:ae:70:ad:86:e1:59:aa:29:b5:
                    5b:09:ff:a7:1c:18:0d:98:af:50:a4:97:be:21:85:
                    f6:6b:75:96:e0:83:61:73:78:ce:f0:eb:5e:31:65:
                    d5:af:ef:e0:fc:d1:3b:1a:a7:fd:09:8d:97:30:c0:
                    10:05:99:40:0b:47:7f:7b:7c:c1:4f:67:ad:d4:aa:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:CB:70:5D:AF:B1:8B:7B:AE:EE:D3:67:D8:63:FC:1F:B8:5D:70
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/c_7LcF2vsYt7ru7TZ9hj_B-4XXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:30:12:b7:7e:9b:94:b3:b1:54:dc:73:0d:65:4d:5c:53:f9:
         4b:19:2e:b7:b1:ca:fe:b8:c1:2a:24:13:0a:16:8c:35:ba:b8:
         e4:f1:6e:23:3f:6e:34:0a:eb:85:15:97:2d:d4:68:c0:db:63:
         9c:cf:6e:b1:0e:aa:2e:11:d5:be:c3:b2:14:f4:7c:07:2b:87:
         aa:c6:df:ba:ff:a7:52:bb:40:a9:b3:73:98:8e:05:cf:0b:bc:
         3f:fc:36:2d:37:b4:95:98:fc:55:cd:8e:48:cb:71:a9:e8:31:
         95:94:91:a4:97:49:f4:0b:e7:e5:a0:f8:71:51:e6:e2:22:5c:
         c6:08:f6:0f:79:31:09:d1:86:90:9d:00:08:3b:57:4a:0d:72:
         04:83:47:16:68:f1:13:f4:cf:2d:e1:38:4b:28:a5:e2:17:20:
         6d:aa:b6:37:5c:66:aa:af:d0:ca:82:5e:e4:72:0a:b0:83:6d:
         14:52:ba:5f:44:7b:7d:f4:2a:46:b4:36:09:7b:32:e4:ad:56:
         6f:0d:95:17:81:46:7a:e8:05:66:a0:1a:ff:f3:c9:2e:0d:ee:
         a7:9f:90:4c:ef:74:a8:a8:0b:a8:3f:4d:4a:08:89:ab:a4:16:
         4c:7a:bb:60:67:fc:47:69:c8:9b:a4:4d:35:da:7b:f7:dd:38:
         f8:95:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org