Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fIpgrZbBmDrflg0gz5iBHeLdIJI.roa
File:                     fIpgrZbBmDrflg0gz5iBHeLdIJI.roa (raw, json)
Hash identifier:          7+xVkhc5ziDuEya6rwK2+4s6U74zoES2OqRIoagg9yY=
Subject key identifier:   7C:8A:60:AD:96:C1:98:3A:DF:96:0D:20:CF:98:81:1D:E2:DD:20:92
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       01856CE636ADBB001F0DA308CA80F1C1069C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fIpgrZbBmDrflg0gz5iBHeLdIJI.roa
Signing time:             Sun 01 Jan 2023 10:35:04 +0000
ROA not before:           Sun 01 Jan 2023 10:35:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29119
IP address blocks:        83.147.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:36:ad:bb:00:1f:0d:a3:08:ca:80:f1:c1:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 10:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c8a60ad96c1983adf960d20cf98811de2dd2092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:bf:7a:8b:91:fe:3a:f3:9a:35:af:e7:3d:
                    51:67:69:8f:33:e5:cc:d8:01:bd:5b:ca:c9:e1:e3:
                    77:50:61:65:8d:bf:88:47:75:f6:c3:c7:ef:80:1d:
                    54:21:03:ad:38:c0:f6:fb:6d:1f:d0:8b:b9:a8:25:
                    e9:c1:6c:c7:9c:e4:7e:03:59:6f:88:23:ea:2a:53:
                    c9:88:a4:ae:27:41:31:d7:58:43:3b:6f:3a:3c:bb:
                    6e:e0:0f:a9:46:51:60:30:a0:db:ab:9d:49:78:7d:
                    72:e7:6a:23:b4:1c:c7:a9:78:eb:7b:2e:49:a0:22:
                    a8:fa:f9:ac:c3:0d:16:5c:30:6f:98:13:74:2c:b1:
                    a8:ac:51:71:e5:c9:7c:3c:38:db:82:ea:67:ce:6b:
                    21:ed:1e:f0:7c:b9:5d:be:53:ff:6b:da:22:2d:5d:
                    8b:aa:35:e0:95:18:2d:cf:ff:27:fd:01:3f:33:8b:
                    15:60:0f:5d:b4:a7:ad:fa:e1:48:c9:85:7c:ed:55:
                    ab:a3:0b:2f:ca:d9:8b:1c:5e:18:b9:bb:6c:0d:50:
                    91:3f:f4:2e:eb:b4:e0:9f:1e:c2:48:6c:b7:4d:06:
                    46:b6:9c:00:bc:16:11:8b:4c:5c:04:9b:b5:71:96:
                    a0:b6:58:90:13:6f:67:9e:2d:c7:e8:c9:a5:bb:d6:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:60:AD:96:C1:98:3A:DF:96:0D:20:CF:98:81:1D:E2:DD:20:92
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fIpgrZbBmDrflg0gz5iBHeLdIJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:42:c0:80:b1:87:8f:93:a2:68:aa:aa:81:b2:a6:c6:8a:
         4d:97:a0:3f:17:0f:38:0d:c0:d3:c0:a5:68:e4:97:8a:b6:51:
         ea:0c:2a:35:26:0a:3f:6f:9e:a4:f0:f4:3e:10:bb:da:7e:72:
         1b:5e:f0:09:22:20:f6:db:05:f7:d8:1e:90:b3:aa:fb:8c:39:
         3a:d9:a0:72:f9:d8:00:d3:9c:2f:11:80:a4:da:21:88:c5:40:
         cb:5c:ba:29:87:c8:57:b4:6f:4b:86:1f:79:aa:58:71:ca:f6:
         26:02:e2:45:a4:16:07:7a:ea:d4:88:e8:51:83:5f:02:64:84:
         57:f5:ff:8f:a4:44:5f:c5:9a:4f:24:11:e2:4c:be:55:e2:9b:
         84:50:e5:cc:d5:9b:69:a5:eb:0a:da:bf:ca:a8:b9:2f:e8:f2:
         6a:f8:00:77:d2:e7:74:53:38:fe:b7:21:f8:2d:d8:54:0f:c2:
         dd:e9:d3:4a:89:b2:90:ac:72:a2:d2:9a:65:b4:73:b2:2b:d4:
         16:a3:e8:e2:52:80:27:7b:37:1c:5f:fa:3c:1d:af:11:14:f2:
         40:0b:6a:60:0c:8e:62:bc:66:59:1a:de:9e:d7:41:d1:03:f8:
         31:63:42:4b:9e:b5:8a:53:0c:7a:01:5b:14:29:d2:c2:90:aa:
         9d:82:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org