Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uTDUxgUrX0ueI_xdWZ1oHwhN6xY.roa
File:                     uTDUxgUrX0ueI_xdWZ1oHwhN6xY.roa (raw, json)
Hash identifier:          t+gjmsNssJJ1CS+m/bwv/Mh3EjZiuGtLhv+KsGxFnYc=
Subject key identifier:   B9:30:D4:C6:05:2B:5F:4B:9E:23:FC:5D:59:9D:68:1F:08:4D:EB:16
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018CB4C1559BEEA68428C22889C290B7B24A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uTDUxgUrX0ueI_xdWZ1oHwhN6xY.roa
Signing time:             Fri 29 Dec 2023 08:46:58 +0000
ROA not before:           Fri 29 Dec 2023 08:46:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     272649
IP address blocks:        83.147.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b4:c1:55:9b:ee:a6:84:28:c2:28:89:c2:90:b7:b2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Dec 29 08:46:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b930d4c6052b5f4b9e23fc5d599d681f084deb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:93:71:f3:f1:cf:1c:98:3f:31:05:af:11:
                    d8:bd:5c:e3:95:cb:f7:a4:74:ca:ac:80:fb:80:aa:
                    de:29:85:aa:23:6b:40:3a:1a:56:cb:99:5c:2a:3d:
                    10:f7:e7:42:a2:17:36:71:7f:33:1e:9f:4f:4f:d1:
                    99:d7:25:6b:b6:96:a4:f1:54:ef:6f:63:74:0f:07:
                    04:67:6c:a2:c6:12:a2:dc:7a:af:63:9c:03:e5:ff:
                    04:50:18:a6:d9:8e:0b:f7:a2:93:c2:84:61:70:fc:
                    f5:ab:02:5f:e0:e6:a8:13:ec:02:75:ab:2a:bc:e8:
                    ce:70:82:a5:c3:90:79:20:cb:62:20:a0:ff:86:1b:
                    be:08:64:a5:f6:1b:7c:cf:18:a8:8f:6b:94:41:98:
                    51:6e:11:68:05:79:0a:d0:49:46:d8:c4:f5:84:59:
                    3e:6f:72:fe:51:fe:f1:76:1a:9c:5a:c0:c2:52:57:
                    97:66:24:36:c4:11:0d:e9:63:49:41:7d:d3:2a:a6:
                    98:6d:00:1e:c9:45:04:0e:fa:c2:56:8c:e9:ba:ae:
                    da:10:ea:7d:29:84:40:c7:16:cc:0e:84:75:4b:cf:
                    bd:c8:25:61:fb:ad:24:47:35:f3:6b:9a:ae:ee:57:
                    5d:ee:0c:c8:bc:3a:6d:ee:f2:1e:ef:ad:91:ff:63:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:D4:C6:05:2B:5F:4B:9E:23:FC:5D:59:9D:68:1F:08:4D:EB:16
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uTDUxgUrX0ueI_xdWZ1oHwhN6xY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:68:0b:fb:6d:c9:7c:6d:4a:d5:4b:0c:5b:8b:4e:ed:a6:26:
         4b:97:90:b2:93:19:1d:7e:cc:fb:ac:38:60:96:2a:9d:86:ea:
         15:9f:d5:4b:f3:9f:a6:d3:6f:b8:5d:89:bf:0c:80:90:0c:ed:
         54:a7:50:f9:5c:e8:6b:67:88:e0:9f:b4:40:3e:cf:8a:3b:bf:
         52:9f:6f:f6:f7:54:8c:77:19:80:26:95:0c:5a:6e:eb:b1:25:
         78:81:29:83:92:98:48:76:0a:21:8b:47:55:59:b4:8c:8d:b8:
         09:3d:58:0a:35:5c:cd:23:bb:31:1c:bf:f3:c5:32:4b:69:0b:
         de:a2:f5:40:a4:0b:45:55:86:18:46:bc:0d:46:b6:49:c5:71:
         55:ce:ae:70:76:ee:e2:2e:fa:eb:77:66:53:44:03:e9:44:51:
         3b:44:64:f4:63:1b:3d:5c:b2:dd:92:89:27:99:52:3d:54:d6:
         16:bd:6c:4c:22:fb:3a:f3:4c:f5:84:b0:b9:74:d3:66:29:fd:
         28:76:fd:2c:c4:9a:10:9b:1a:44:a4:69:83:ef:49:04:d6:a3:
         41:ec:e4:80:db:e2:3a:da:f8:fc:c4:14:6a:f2:70:6a:16:cb:
         44:b1:ef:1e:4a:c2:fc:f4:68:7b:af:cf:b2:1d:61:6e:43:ab:
         7d:4d:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org