Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/FgJ2GY0UAYrTMZuqlAtHLn5xVmo.roa
File:                     FgJ2GY0UAYrTMZuqlAtHLn5xVmo.roa (raw, json)
Hash identifier:          5YYWsT1zZuAgLP88Ro71KPjfQX1ZrKFkx05n7+SKMNM=
Subject key identifier:   16:02:76:19:8D:14:01:8A:D3:31:9B:AA:94:0B:47:2E:7E:71:56:6A
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       018FBEB103313366ECB9CDF306A884DDBEB2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/FgJ2GY0UAYrTMZuqlAtHLn5xVmo.roa
Signing time:             Tue 28 May 2024 10:13:42 +0000
ROA not before:           Tue 28 May 2024 10:13:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35664
IP address blocks:        94.176.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 12:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:be:b1:03:31:33:66:ec:b9:cd:f3:06:a8:84:dd:be:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May 28 10:13:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=160276198d14018ad3319baa940b472e7e71566a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:fc:6f:23:a7:28:2b:e4:ec:b0:2b:3b:64:
                    5c:85:76:59:4f:08:95:e7:43:ed:6a:8f:00:3f:5c:
                    f2:42:57:2e:8b:9c:bf:7c:d5:fa:81:62:72:35:4f:
                    41:54:ce:f3:6a:31:83:97:bd:3e:41:a0:34:61:e0:
                    bd:57:76:0f:6e:07:e8:85:6d:38:9c:83:20:f4:b0:
                    78:e1:c1:ae:7d:0a:69:c1:5a:25:3e:6b:7d:e6:9c:
                    74:38:69:2f:1d:0e:50:06:5e:8b:0c:fd:41:af:89:
                    28:f9:bb:77:f8:42:50:45:85:2a:07:75:89:1e:bc:
                    b8:32:df:58:ca:65:a0:93:47:96:98:8e:c1:48:87:
                    95:3c:8c:03:0f:d1:75:9d:93:34:60:98:d2:ff:c6:
                    7c:15:10:7b:cb:39:f7:1b:38:9c:8b:1e:f8:18:23:
                    fb:91:1a:07:ff:69:0f:19:b7:ac:be:3b:f9:cf:00:
                    55:86:d8:ba:b1:e1:b1:77:79:6a:bd:7d:0a:92:be:
                    49:f2:7c:42:13:a0:82:ed:01:1a:6a:14:0e:ac:73:
                    af:73:da:b3:b7:9f:de:f9:e0:16:ca:41:45:c6:af:
                    0f:44:14:cd:14:ef:a2:3a:5c:8b:82:3b:3f:9b:1a:
                    bd:60:94:b0:01:00:8c:f7:16:4d:b4:bc:79:a1:21:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:76:19:8D:14:01:8A:D3:31:9B:AA:94:0B:47:2E:7E:71:56:6A
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/FgJ2GY0UAYrTMZuqlAtHLn5xVmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:82:4b:5e:da:3f:7e:78:45:7c:cc:01:b7:53:f6:e4:6c:0b:
         e1:72:4a:63:50:0c:98:09:e9:65:f3:f1:6c:44:82:e2:e3:47:
         d6:61:65:cd:49:ac:f4:f2:57:e4:98:2c:61:20:b3:1a:4a:09:
         59:59:19:b9:26:8d:24:eb:8e:6a:57:bb:56:bb:f6:5c:6c:e0:
         dd:9c:3d:c8:36:7b:2c:e3:e1:df:06:67:9e:8d:10:06:4c:7f:
         df:6c:2d:4b:cb:6e:f2:0f:44:c5:d6:9d:41:ab:c1:33:5d:d5:
         23:a8:2a:4e:3b:c3:bc:84:2b:02:56:68:5a:ef:49:af:b8:6f:
         57:07:31:b8:69:5a:c6:5c:b6:20:01:fc:be:0c:32:3a:3d:51:
         97:9c:fc:64:09:42:58:fa:84:52:64:32:b8:b2:f4:b2:6c:a2:
         7f:e2:c0:63:24:5f:92:95:14:3d:fe:08:fe:5a:c4:ac:a2:24:
         9c:c3:91:57:35:94:06:74:4e:5f:82:26:29:3a:6f:0d:73:1f:
         bb:18:2b:55:60:33:15:35:1e:de:3a:a8:16:a5:88:62:bd:57:
         fc:c4:0d:87:18:ad:0c:9c:ca:d3:d6:6c:6f:4a:31:de:43:61:
         15:e4:31:61:74:68:d1:45:35:4b:ba:fb:ca:5c:99:1c:e0:1e:
         6e:a9:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org