Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/UIK7E__BVeGjLsdN3mk2y2ZqBOg.roa
File:                     UIK7E__BVeGjLsdN3mk2y2ZqBOg.roa (raw, json)
Hash identifier:          WQNtJTITglYmdmJ02ZDVUYcQOaj6+0vWsXRiBe8RfIQ=
Subject key identifier:   50:82:BB:13:FF:C1:55:E1:A3:2E:C7:4D:DE:69:36:CB:66:6A:04:E8
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       01856D53CD6B836D93FF294B7178C4B772E1
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/UIK7E__BVeGjLsdN3mk2y2ZqBOg.roa
Signing time:             Sun 01 Jan 2023 12:34:46 +0000
ROA not before:           Sun 01 Jan 2023 12:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12605
IP address blocks:        83.164.0.0/17 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:cd:6b:83:6d:93:ff:29:4b:71:78:c4:b7:72:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Jan  1 12:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5082bb13ffc155e1a32ec74dde6936cb666a04e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:57:70:c2:c9:f0:ad:23:73:9d:e0:81:53:
                    7a:2f:92:81:ab:08:74:52:bc:56:32:96:0b:2b:2d:
                    bd:0e:be:7a:da:c4:7f:9a:ec:a6:43:ac:14:69:7d:
                    d9:b1:8a:68:7f:2f:42:cf:c0:bf:c7:61:f1:8f:a2:
                    fe:48:f6:ac:5a:e3:ff:e0:12:17:5f:fb:ba:77:de:
                    06:74:d5:15:43:d5:d2:71:d7:79:bc:59:4e:92:40:
                    20:b6:fd:ae:fb:92:ac:a7:1c:d2:bf:ee:8a:b4:ce:
                    ef:9e:9b:55:ae:62:d5:b2:c6:8a:f4:a6:03:4c:4a:
                    99:bc:00:92:fa:93:19:dd:c0:01:42:a6:42:bb:cd:
                    06:73:8d:3a:79:c6:7e:3c:50:41:da:44:14:90:d7:
                    d5:00:04:b7:20:c3:0d:d6:6b:6d:8f:01:09:46:d6:
                    99:5e:d8:20:70:c2:c7:51:65:7f:df:4b:2e:b5:a3:
                    35:66:3d:60:22:b2:00:bc:c2:7c:23:d6:5f:1e:54:
                    79:9b:ac:83:1b:21:38:b2:e4:ef:72:6b:2e:6e:01:
                    c5:bb:f3:41:a3:ee:d2:9e:61:59:82:40:1e:ab:77:
                    cc:62:ff:2d:1e:2e:f1:a2:5f:f4:76:00:5b:a6:82:
                    c2:b5:94:02:4a:49:f3:f4:f6:66:df:67:5f:cd:96:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:BB:13:FF:C1:55:E1:A3:2E:C7:4D:DE:69:36:CB:66:6A:04:E8
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/UIK7E__BVeGjLsdN3mk2y2ZqBOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.164.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         71:61:bd:4d:4a:6e:94:6f:7c:b5:12:b4:85:e3:d9:61:3c:ab:
         5c:28:4a:1d:c2:83:ae:3e:9b:74:ee:08:e5:5e:74:7e:8f:35:
         76:d9:90:35:7e:8b:fc:74:9d:8d:19:ce:0b:38:8c:46:37:23:
         a9:12:d7:b4:27:4a:ab:69:fc:ea:ea:74:39:3a:d8:c2:d4:95:
         9a:51:db:f0:f4:cb:9f:cc:c9:6b:11:d4:64:f9:41:9c:91:03:
         e6:e6:d9:e4:71:0e:39:7b:ad:86:71:c0:71:99:4c:a5:ab:e1:
         06:84:2b:4a:aa:5a:db:f7:f9:21:ed:8b:6f:7c:cc:8a:bc:66:
         e3:f2:45:9c:05:9c:c1:0d:60:95:5b:97:3e:fe:d4:b3:da:cb:
         ba:3d:d1:f9:ef:c5:49:e1:ff:c1:5e:b2:a2:e6:66:ad:c1:ed:
         d6:d1:ac:aa:8b:67:0d:bf:4d:d7:09:0b:81:2c:c3:59:1b:bc:
         d9:7e:ab:5f:62:53:1f:74:7c:6b:dd:2f:fc:4e:e5:3b:1f:99:
         ba:e5:42:dd:7c:bf:85:a8:c2:d9:7b:78:fe:46:32:e3:2d:f5:
         02:9a:c3:3f:5c:16:d9:80:7b:5f:0e:e1:1b:89:02:36:02:f5:
         1f:53:a1:95:ad:6c:e6:ab:b9:c2:4d:d3:42:33:60:bd:e3:4a:
         53:44:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:21 2024 by rpki-client on console-ams.rpki-client.org