Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w6LePTO5wok8whTnK-1lJxZDLD4.roa
File:                     w6LePTO5wok8whTnK-1lJxZDLD4.roa (raw, json)
Hash identifier:          JP6sFDZS4CS3gSktNq1KfLRsn1loQQbq4yHeQtPJnWU=
Subject key identifier:   C3:A2:DE:3D:33:B9:C2:89:3C:C2:14:E7:2B:ED:65:27:16:43:2C:3E
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       01879782C22D80B3F18037AD5AA565D0DBDA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w6LePTO5wok8whTnK-1lJxZDLD4.roa
Signing time:             Wed 19 Apr 2023 03:15:41 +0000
ROA not before:           Wed 19 Apr 2023 03:15:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211373
IP address blocks:        83.147.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:97:82:c2:2d:80:b3:f1:80:37:ad:5a:a5:65:d0:db:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Apr 19 03:15:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3a2de3d33b9c2893cc214e72bed652716432c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:da:5b:20:c4:c9:8f:68:9f:f0:7a:20:5a:
                    99:74:58:e6:e5:88:ab:da:01:4d:7a:16:8c:ac:2e:
                    87:9b:aa:06:2d:11:27:b5:dc:4a:a6:3b:64:ad:92:
                    f4:4f:92:c4:2f:97:2e:85:cb:bd:43:4e:91:e0:12:
                    cd:65:bb:66:6c:43:f1:32:30:33:b8:01:78:0c:25:
                    22:32:e4:1b:c7:4a:04:d2:a8:ef:e8:62:7b:87:ac:
                    25:d8:65:77:60:ed:2c:ce:d1:f2:8e:f6:e5:d1:2a:
                    f3:3a:42:40:34:cc:de:f5:7b:16:7e:7c:42:e8:53:
                    aa:dd:e8:3f:e7:b0:fc:df:1e:57:85:99:62:80:07:
                    d0:3b:f4:35:9c:ec:47:af:94:fc:ad:e2:3d:bb:2a:
                    da:c8:59:fd:1b:e2:3d:38:22:a9:db:34:be:ab:b7:
                    2e:87:1c:9f:19:88:3f:c1:53:d7:13:bd:c6:5a:1f:
                    fc:f9:e0:a7:cb:a0:59:57:fb:e4:71:24:70:b0:b0:
                    2e:4b:7c:d7:47:25:6d:1b:fe:39:44:e4:dd:01:74:
                    2a:45:29:08:6f:65:d9:92:91:24:b2:20:d7:d9:0e:
                    24:5f:c2:97:2b:fa:ac:b7:e4:3b:01:db:9a:45:f0:
                    dd:50:04:0f:4a:6b:74:34:97:e5:67:8a:2a:75:5f:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:DE:3D:33:B9:C2:89:3C:C2:14:E7:2B:ED:65:27:16:43:2C:3E
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w6LePTO5wok8whTnK-1lJxZDLD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:33:b7:11:7c:a3:43:de:f9:77:c7:dc:96:08:af:d3:f7:
         4d:e9:0f:a5:9c:37:75:f4:6a:29:33:f4:7b:c5:50:77:d4:98:
         82:48:8a:8f:e8:c8:93:50:2c:37:c5:d9:13:e8:96:4b:94:2b:
         f8:7a:3c:bf:b8:81:7e:7e:6c:4a:7b:44:51:ed:23:09:ce:55:
         38:0d:2e:7d:8f:39:c2:54:85:c4:72:91:48:0d:85:53:85:45:
         f9:bc:54:19:fe:a4:86:15:cd:a3:e2:6d:90:92:73:b3:8b:44:
         fb:c9:84:da:d7:df:51:aa:61:c4:18:0d:59:a5:36:69:bf:6c:
         73:4c:6d:54:ff:ae:db:ea:2d:9b:16:a5:66:33:76:4b:13:c9:
         24:54:03:30:09:70:b4:99:5b:b4:5b:97:c2:9d:e6:24:c8:64:
         a6:ef:f7:51:48:7f:a8:63:24:7c:19:ff:7f:8d:f9:62:79:2b:
         cb:db:4f:29:f3:7e:17:a4:8b:29:d5:ea:c0:bc:5e:ae:d0:c6:
         e4:19:3a:f8:d8:96:2e:c0:c0:bb:cc:dd:74:cb:d9:10:bf:6a:
         d9:2b:e4:84:eb:4b:f6:48:9f:58:76:81:39:95:25:0d:59:ee:
         99:fd:83:43:fc:14:fe:8d:5b:0f:35:4c:ef:e5:51:91:5f:71:
         41:fa:31:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeXgsItgLPxgDetWqVl0NvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwNDE5MDMxNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2EyZGUzZDMzYjljMjg5M2NjMjE0ZTcyYmVkNjUyNzE2NDMyYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyXaWyDEyY9on/B6IFqZdFjm5Yir
2gFNehaMrC6Hm6oGLREntdxKpjtkrZL0T5LEL5cuhcu9Q06R4BLNZbtmbEPxMjAz
uAF4DCUiMuQbx0oE0qjv6GJ7h6wl2GV3YO0sztHyjvbl0SrzOkJANMze9XsWfnxC
6FOq3eg/57D83x5XhZligAfQO/Q1nOxHr5T8reI9uyrayFn9G+I9OCKp2zS+q7cu
hxyfGYg/wVPXE73GWh/8+eCny6BZV/vkcSRwsLAuS3zXRyVtG/45ROTdAXQqRSkI
b2XZkpEksiDX2Q4kX8KXK/qst+Q7AduaRfDdUAQPSmt0NJflZ4oqdV9HVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOi3j0zucKJPMIU5yvtZScWQyw+MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvdzZMZVBUTzV3b2s4d2hUbkstMWxKeFpETEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MZMA0G
CSqGSIb3DQEBCwUAA4IBAQAO1TO3EXyjQ975d8fclgiv0/dN6Q+lnDd19GopM/R7
xVB31JiCSIqP6MiTUCw3xdkT6JZLlCv4ejy/uIF+fmxKe0RR7SMJzlU4DS59jznC
VIXEcpFIDYVThUX5vFQZ/qSGFc2j4m2QknOzi0T7yYTa199RqmHEGA1ZpTZpv2xz
TG1U/67b6i2bFqVmM3ZLE8kkVAMwCXC0mVu0W5fCneYkyGSm7/dRSH+oYyR8Gf9/
jflieSvL208p834XpIsp1erAvF6u0MbkGTr42JYuwMC7zN10y9kQv2rZK+SE60v2
SJ9YdoE5lSUNWe6Z/YND/BT+jVsPNUzv5VGRX3FB+jHo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org