Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vq-VW8N4_XxGMvQ5Qmv65rvrCr8.roa
File:                     vq-VW8N4_XxGMvQ5Qmv65rvrCr8.roa (raw, json)
Hash identifier:          /t/Qb/v4QC0DLQlQhRvSSZGOzeyROG1Xi6sq9mcp3lM=
Subject key identifier:   BE:AF:95:5B:C3:78:FD:7C:46:32:F4:39:42:6B:FA:E6:BB:EB:0A:BF
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0187B97D27099CFEA45642CBB781DD81E957
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vq-VW8N4_XxGMvQ5Qmv65rvrCr8.roa
Signing time:             Tue 25 Apr 2023 17:36:39 +0000
ROA not before:           Tue 25 Apr 2023 17:36:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        83.147.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Jun 2023 04:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b9:7d:27:09:9c:fe:a4:56:42:cb:b7:81:dd:81:e9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Apr 25 17:36:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=beaf955bc378fd7c4632f439426bfae6bbeb0abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:d5:42:77:50:39:28:bc:67:7b:ee:ce:0b:
                    7b:58:0f:31:50:57:f2:c6:3e:55:31:12:45:61:39:
                    f6:14:60:71:d0:a9:93:1a:1e:75:25:6e:62:f2:19:
                    7e:1f:5b:bc:85:57:4a:d5:ec:95:db:32:eb:86:d8:
                    62:48:90:ef:a0:6f:9c:62:d6:6a:8f:54:f8:e1:9f:
                    1d:4f:7d:e2:56:33:b2:12:e4:8e:02:fc:22:40:b0:
                    e3:98:01:7d:e8:2e:6e:ea:a7:ee:b4:3c:e4:10:80:
                    c4:50:72:82:c1:33:5a:87:42:c4:ff:c1:b5:7d:4a:
                    c4:4a:e6:f1:91:24:18:6b:44:48:c7:2a:7f:3f:2f:
                    59:d9:8e:f2:2c:0c:26:0b:fa:0c:15:0c:e2:e8:48:
                    22:ff:cc:4d:28:6b:8c:8f:0a:77:4f:3e:24:46:f9:
                    ac:26:a2:6b:d8:ce:fc:fa:0f:c5:ce:d0:5f:b8:1b:
                    79:38:c6:6c:01:60:9a:fd:1f:53:8e:b8:32:c0:2a:
                    c1:40:58:22:a4:bb:df:b9:13:2e:03:37:6f:5a:46:
                    6b:d2:f0:9b:e8:92:ca:d6:b2:05:31:0b:33:b2:8a:
                    11:27:18:6a:1a:6c:b4:2f:ef:6f:a6:ce:a2:74:03:
                    2c:44:eb:82:5d:e6:5f:d7:e1:51:54:8a:58:d2:8b:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:95:5B:C3:78:FD:7C:46:32:F4:39:42:6B:FA:E6:BB:EB:0A:BF
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vq-VW8N4_XxGMvQ5Qmv65rvrCr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:f6:1c:51:82:b2:64:36:31:af:59:97:ce:83:11:00:df:
         ac:cb:6e:29:2d:91:fb:56:5a:4e:3e:50:5f:a5:59:1a:b2:bf:
         97:5a:d2:06:bd:ff:45:ee:13:04:93:56:f5:03:a8:d6:6e:a0:
         eb:b7:64:3d:c0:7f:c8:f9:26:0c:a6:03:b9:a1:6e:71:db:fc:
         f8:ff:1d:af:11:11:8d:08:de:45:d5:d8:9b:a9:73:78:97:45:
         b8:5d:4b:d0:9b:a1:16:85:31:bd:9e:fd:0f:33:f5:70:e8:7d:
         3f:86:33:2a:ce:b6:4a:f6:79:a4:c7:6c:a0:1f:fd:4d:08:73:
         e1:ec:15:42:d0:b6:08:1f:dd:9c:f5:61:7d:3f:dc:7c:10:52:
         31:2c:2c:95:0c:8f:32:c1:1e:76:57:23:61:c5:e2:93:65:18:
         a8:a8:ef:8c:b0:b0:aa:85:5a:7f:0d:44:9a:07:96:ac:6e:c4:
         0c:ef:25:fa:86:9f:db:da:b3:9d:1a:67:c4:37:86:7e:7c:48:
         21:15:6b:9d:dc:20:4e:b7:bc:1a:21:fa:6b:3c:ee:36:2b:e7:
         9a:64:ba:db:79:6d:9c:a3:0f:db:0d:b5:fb:2d:e3:1a:10:94:
         a1:6f:61:10:65:0f:2f:4d:0a:77:14:4c:bb:5b:0e:ac:e2:e4:
         2f:a6:c9:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe5fScJnP6kVkLLt4HdgelXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwNDI1MTczNjM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWFmOTU1YmMzNzhmZDdjNDYzMmY0Mzk0MjZiZmFlNmJiZWIwYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0XVQndQOSi8Z3vuzgt7WA8xUFfy
xj5VMRJFYTn2FGBx0KmTGh51JW5i8hl+H1u8hVdK1eyV2zLrhthiSJDvoG+cYtZq
j1T44Z8dT33iVjOyEuSOAvwiQLDjmAF96C5u6qfutDzkEIDEUHKCwTNah0LE/8G1
fUrESubxkSQYa0RIxyp/Py9Z2Y7yLAwmC/oMFQzi6Egi/8xNKGuMjwp3Tz4kRvms
JqJr2M78+g/FztBfuBt5OMZsAWCa/R9TjrgywCrBQFgipLvfuRMuAzdvWkZr0vCb
6JLK1rIFMQszsooRJxhqGmy0L+9vps6idAMsROuCXeZf1+FRVIpY0osGrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6vlVvDeP18RjL0OUJr+ua76wq/MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvdnEtVlc4TjRfWHhHTXZRNVFtdjY1cnZyQ3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5McMA0G
CSqGSIb3DQEBCwUAA4IBAQAaVfYcUYKyZDYxr1mXzoMRAN+sy24pLZH7VlpOPlBf
pVkasr+XWtIGvf9F7hMEk1b1A6jWbqDrt2Q9wH/I+SYMpgO5oW5x2/z4/x2vERGN
CN5F1dibqXN4l0W4XUvQm6EWhTG9nv0PM/Vw6H0/hjMqzrZK9nmkx2ygH/1NCHPh
7BVC0LYIH92c9WF9P9x8EFIxLCyVDI8ywR52VyNhxeKTZRioqO+MsLCqhVp/DUSa
B5asbsQM7yX6hp/b2rOdGmfEN4Z+fEghFWud3CBOt7waIfprPO42K+eaZLrbeW2c
ow/bDbX7LeMaEJShb2EQZQ8vTQp3FEy7Ww6s4uQvpsne
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org