Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zzQM-7SfDX6IdmGAsYZwKAXpthY.roa
File:                     zzQM-7SfDX6IdmGAsYZwKAXpthY.roa (raw, json)
Hash identifier:          t0jwifIANqModTUxNl8R07oQQ7YwX2ZZEHvLqTjhfA8=
Subject key identifier:   CF:34:0C:FB:B4:9F:0D:7E:88:76:61:80:B1:86:70:28:05:E9:B6:16
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018A5E7CB1A28BF3E893C0FA3F6BFB346247
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zzQM-7SfDX6IdmGAsYZwKAXpthY.roa
Signing time:             Mon 04 Sep 2023 04:39:04 +0000
ROA not before:           Mon 04 Sep 2023 04:39:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59432
IP address blocks:        83.147.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 01 Oct 2023 06:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5e:7c:b1:a2:8b:f3:e8:93:c0:fa:3f:6b:fb:34:62:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Sep  4 04:39:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf340cfbb49f0d7e88766180b186702805e9b616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:37:99:18:03:ec:b1:f1:e9:f8:84:b3:c2:
                    09:7d:d9:58:ac:73:e1:e6:6a:62:30:96:f0:f0:09:
                    67:e3:4e:9e:eb:94:8c:19:e8:cd:ba:f8:c7:3d:be:
                    8b:e9:ec:a4:40:fc:54:b1:03:a0:b7:41:56:0b:21:
                    45:aa:b6:26:f4:c7:7b:bf:a2:4e:7d:6b:89:9f:7e:
                    e5:03:d2:99:4d:94:79:30:a6:0f:7c:c9:05:a5:0b:
                    15:f7:dd:13:6f:11:b9:ae:1a:24:45:bd:f2:92:69:
                    05:b7:7d:2d:09:44:a3:04:6f:99:3c:2e:e4:e7:d8:
                    8a:8c:0e:2d:a9:c9:6e:33:7c:42:19:95:48:56:b1:
                    9f:a5:93:c8:b8:17:31:55:9d:d8:ae:fd:e1:ba:37:
                    ed:d6:e0:a4:05:b0:c5:d4:ef:7b:ec:be:53:78:f2:
                    5d:f7:28:aa:14:b4:bd:8f:88:21:ca:37:58:69:2b:
                    d5:01:0d:63:66:08:50:e5:38:5a:72:28:bd:77:c5:
                    e9:bf:38:43:86:17:e0:a5:62:54:17:c3:e3:f2:82:
                    f6:8d:81:bb:89:4c:18:c7:51:18:69:7c:ea:14:84:
                    b6:a7:d1:67:d8:2a:4a:11:5e:45:09:70:89:b5:20:
                    ab:4e:fe:43:6c:60:d7:99:8e:52:93:37:9a:e0:73:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:0C:FB:B4:9F:0D:7E:88:76:61:80:B1:86:70:28:05:E9:B6:16
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zzQM-7SfDX6IdmGAsYZwKAXpthY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:29:90:79:7a:27:db:9d:7e:f0:9f:6d:53:2e:c4:cc:27:c6:
         ab:33:b8:f0:c1:2d:bd:ca:d7:c5:50:17:7e:9d:4d:d9:eb:ac:
         61:8d:88:a9:ca:f4:a8:ce:c8:67:98:d9:d6:f5:09:35:0a:aa:
         0c:68:37:4b:76:6c:af:25:6b:c8:77:37:ba:c3:35:09:79:ee:
         15:8f:92:20:7d:65:b3:e1:b6:d0:d3:9b:21:13:2e:47:4a:85:
         72:00:73:32:5d:82:21:cf:69:d3:52:55:dc:2e:d3:42:e3:ca:
         e0:99:a7:d1:49:50:22:17:78:63:0b:e4:46:73:f4:8c:3a:d1:
         f9:4d:21:0c:d0:d8:5b:e2:82:58:35:32:46:f5:2d:21:6a:f1:
         fc:67:39:a9:b1:c2:6d:0d:ef:1e:f5:bf:4f:5d:88:f7:d9:c7:
         3b:d0:ce:b1:ec:e7:90:7a:77:d8:4a:31:6d:7c:8b:43:2a:99:
         a9:45:2b:5a:ec:60:19:20:82:20:07:f6:3a:26:20:2d:f5:16:
         02:fd:e4:c7:fa:4e:b9:44:61:a0:20:1a:95:4b:a2:01:dd:0d:
         18:da:af:a8:4a:11:cc:91:35:67:2a:d6:b7:67:61:0e:81:c0:
         06:69:95:7d:ba:d9:c0:10:24:06:c7:81:4e:54:b3:3c:a9:95:
         36:b2:55:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpefLGii/Pok8D6P2v7NGJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjMwOTA0MDQzOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjM0MGNmYmI0OWYwZDdlODg3NjYxODBiMTg2NzAyODA1ZTliNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEQ3mRgD7LHx6fiEs8IJfdlYrHPh
5mpiMJbw8Aln406e65SMGejNuvjHPb6L6eykQPxUsQOgt0FWCyFFqrYm9Md7v6JO
fWuJn37lA9KZTZR5MKYPfMkFpQsV990TbxG5rhokRb3ykmkFt30tCUSjBG+ZPC7k
59iKjA4tqcluM3xCGZVIVrGfpZPIuBcxVZ3Yrv3hujft1uCkBbDF1O977L5TePJd
9yiqFLS9j4ghyjdYaSvVAQ1jZghQ5Thacii9d8XpvzhDhhfgpWJUF8Pj8oL2jYG7
iUwYx1EYaXzqFIS2p9Fn2CpKEV5FCXCJtSCrTv5DbGDXmY5Skzea4HMLTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM80DPu0nw1+iHZhgLGGcCgF6bYWMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvenpRTS03U2ZEWDZJZG1HQXNZWndLQVhwdGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU5MaMA0G
CSqGSIb3DQEBCwUAA4IBAQAUKZB5eifbnX7wn21TLsTMJ8arM7jwwS29ytfFUBd+
nU3Z66xhjYipyvSozshnmNnW9Qk1CqoMaDdLdmyvJWvIdze6wzUJee4Vj5IgfWWz
4bbQ05shEy5HSoVyAHMyXYIhz2nTUlXcLtNC48rgmafRSVAiF3hjC+RGc/SMOtH5
TSEM0Nhb4oJYNTJG9S0havH8ZzmpscJtDe8e9b9PXYj32cc70M6x7OeQenfYSjFt
fItDKpmpRSta7GAZIIIgB/Y6JiAt9RYC/eTH+k65RGGgIBqVS6IB3Q0Y2q+oShHM
kTVnKta3Z2EOgcAGaZV9utnAECQGx4FOVLM8qZU2slU4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org