Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/srSxY6tXz4g3UHHlszJNc_F_YVI.roa
File:                     srSxY6tXz4g3UHHlszJNc_F_YVI.roa (raw, json)
Hash identifier:          fEYnaNI6T6861pZrkbDwrRPllKm94dUFQhLpyOg3ikA=
Subject key identifier:   B2:B4:B1:63:AB:57:CF:88:37:50:71:E5:B3:32:4D:73:F1:7F:61:52
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0186B7BF6B650C321AE5C659617DA2A4F6AA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/srSxY6tXz4g3UHHlszJNc_F_YVI.roa
Signing time:             Mon 06 Mar 2023 16:27:00 +0000
ROA not before:           Mon 06 Mar 2023 16:27:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        83.147.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 06 Aug 2023 04:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b7:bf:6b:65:0c:32:1a:e5:c6:59:61:7d:a2:a4:f6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Mar  6 16:27:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2b4b163ab57cf88375071e5b3324d73f17f6152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:af:a6:c3:ce:65:80:74:81:14:61:0b:ef:91:
                    72:dc:d1:fe:ba:89:6e:d3:d8:0f:38:69:1f:6a:82:
                    c3:5e:79:6a:78:10:40:bb:0d:ba:88:b5:40:fb:37:
                    74:ad:89:3d:fa:1b:35:6e:66:31:44:81:a1:f6:c7:
                    b7:1f:db:36:8d:84:0e:53:c0:1a:67:b8:83:b2:59:
                    df:92:b0:47:00:16:71:b8:72:1b:21:c2:71:28:80:
                    78:f9:96:ef:80:b8:03:84:6a:5a:0f:da:ce:de:6f:
                    f2:f8:5a:9c:4e:c0:0b:6d:0f:a0:8e:37:03:70:a0:
                    7e:fa:6d:cf:ae:6f:0a:61:a2:d6:69:0b:82:14:1e:
                    f6:df:94:0d:81:92:3b:fc:9c:23:98:1f:11:4c:9e:
                    fa:08:7c:27:9b:cb:fa:a1:c5:f0:82:c1:f7:90:ad:
                    4f:15:26:a2:5a:f1:de:bd:aa:96:fe:c6:db:94:57:
                    01:ee:4f:08:a0:97:03:17:48:ab:49:32:d2:ae:3b:
                    fb:84:39:76:89:11:9b:b4:0b:95:8e:cc:3c:37:54:
                    d4:be:87:24:b4:0e:7c:33:c2:d0:67:1a:80:8a:fe:
                    87:ea:df:c0:4b:f3:4f:b7:6c:52:2f:b1:2f:be:07:
                    94:d8:85:36:fb:0d:6b:af:71:6a:c2:b3:40:ac:f0:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B4:B1:63:AB:57:CF:88:37:50:71:E5:B3:32:4D:73:F1:7F:61:52
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/srSxY6tXz4g3UHHlszJNc_F_YVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:79:43:6c:49:2c:f3:32:b2:ec:b7:e0:06:66:11:b5:d6:
         9e:76:c4:4c:e2:c5:ba:6e:e4:99:81:65:97:71:a8:1d:44:32:
         e6:c7:8e:c5:e9:67:54:dd:14:bd:80:40:65:98:86:6e:ec:60:
         72:c1:b5:77:e7:dd:35:d7:91:6c:38:2c:aa:6e:f1:59:0c:6a:
         73:02:c8:d0:38:b1:94:90:8e:cd:0f:ac:f2:46:3b:35:69:41:
         93:26:6e:80:6e:9e:6d:23:ae:34:3d:03:37:59:a3:32:63:68:
         74:d7:ef:e8:c6:18:00:72:27:3e:60:56:85:ac:29:42:56:8d:
         64:1d:bc:e1:7c:35:20:ea:7a:26:b9:18:75:18:63:df:2a:d6:
         90:d2:6f:8b:ae:ab:d5:51:f1:9f:20:25:02:da:a9:6f:b9:ae:
         4a:63:f7:f8:f3:95:f6:80:d3:9c:bc:b0:c1:da:2a:62:02:1b:
         8d:50:dc:de:4f:c9:46:ed:04:90:ea:10:b4:8a:41:56:57:03:
         db:51:fa:de:fc:9f:43:26:a6:b8:ff:84:6d:f9:77:16:f3:3d:
         46:d8:52:93:3d:84:ca:43:1e:ad:aa:71:f0:a2:1c:3c:8b:3c:
         ea:36:55:c7:5e:c4:f2:71:f7:10:7d:db:cb:b0:3e:8d:68:4c:
         34:ae:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org