Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/d2UZHbFugO93K7ccpxXxxb1e2Ao.roa
File:                     d2UZHbFugO93K7ccpxXxxb1e2Ao.roa (raw, json)
Hash identifier:          05n6Uopd3tfNst14usrUED1oSuf0GXkAobQDEElSK3k=
Subject key identifier:   77:65:19:1D:B1:6E:80:EF:77:2B:B7:1C:A7:15:F1:C5:BD:5E:D8:0A
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       01856E6676FC92E17C2FF3882F7E43636716
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/d2UZHbFugO93K7ccpxXxxb1e2Ao.roa
Signing time:             Sun 01 Jan 2023 17:34:46 +0000
ROA not before:           Sun 01 Jan 2023 17:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211239
IP address blocks:        213.169.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:66:76:fc:92:e1:7c:2f:f3:88:2f:7e:43:63:67:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jan  1 17:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7765191db16e80ef772bb71ca715f1c5bd5ed80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d7:f8:2f:d4:c5:8c:e7:59:82:f3:eb:ac:0b:
                    fd:f2:4d:7b:dc:b4:46:00:3b:e2:98:8b:16:7d:6f:
                    20:e8:a5:57:66:f5:fc:ba:5f:be:27:2a:5a:8a:59:
                    4d:69:85:13:2b:a3:31:83:f2:34:4a:78:a7:33:38:
                    95:37:79:ca:21:02:0d:8c:7c:d9:ff:fd:7b:64:61:
                    a9:34:63:c8:76:ca:5f:09:8c:04:3c:d3:7c:86:48:
                    c3:7d:06:5e:33:a5:ea:9b:6d:93:a3:87:18:2c:fd:
                    bb:85:b0:ef:0d:5d:b5:b8:4a:31:df:f0:2f:f8:af:
                    b5:fb:9d:5e:34:f1:45:76:0f:7d:96:49:61:6c:b6:
                    45:92:6f:60:78:a3:c6:9d:21:40:36:43:8c:44:6a:
                    ea:6e:bd:fe:3d:ba:6a:5f:4c:50:3e:79:52:17:24:
                    da:a4:5d:f4:95:d7:01:e8:70:47:0c:6b:ee:92:c2:
                    f5:36:60:0d:4c:51:92:97:f7:42:43:f2:ca:b8:0b:
                    7e:81:4f:e4:66:22:65:87:21:d4:a1:37:59:ed:68:
                    bb:66:c4:d0:9b:ee:fe:4b:ae:3d:04:e9:44:62:9e:
                    a5:95:f3:6b:bc:e6:6c:f0:dd:12:31:a3:bf:60:cc:
                    58:d3:09:43:f0:29:9c:62:bc:0e:df:dc:d9:c7:33:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:65:19:1D:B1:6E:80:EF:77:2B:B7:1C:A7:15:F1:C5:BD:5E:D8:0A
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/d2UZHbFugO93K7ccpxXxxb1e2Ao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.169.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:03:0e:85:ca:ed:b4:05:df:51:59:1d:e3:a9:47:36:6f:
         32:69:b4:69:c7:c1:88:d5:d4:67:31:d6:2a:15:3c:dd:35:51:
         81:83:e7:eb:1d:2f:01:16:3c:9c:40:3c:4b:90:0a:b8:19:04:
         b2:bd:83:73:ca:d6:85:f3:5a:46:1c:2c:32:5c:62:a8:ef:e4:
         98:d4:7d:71:e6:ca:37:94:34:3a:c3:9e:0c:01:5d:5c:b1:a4:
         f1:40:06:ef:9d:5c:e5:11:02:a7:1d:66:2b:ad:f9:fa:35:3f:
         2b:97:4f:a4:4f:c2:3c:30:67:d3:bd:78:37:ed:36:53:42:e3:
         98:75:6b:87:a2:a8:be:1f:b3:32:27:8a:96:00:dc:93:49:71:
         0f:2b:6c:d1:01:30:47:fc:95:65:37:30:03:85:46:1c:21:6a:
         21:07:c5:71:de:74:1d:49:10:c1:af:9b:bb:ee:1d:71:9a:29:
         1a:41:be:bd:ab:ff:6d:0b:93:d8:01:fe:04:75:9d:a5:fc:5c:
         96:c3:b4:c9:e8:66:d6:88:9b:31:17:9c:1d:9d:76:35:d3:e8:
         df:5e:b5:d6:9e:e1:c8:b8:51:9e:7a:2e:70:63:3b:45:94:a6:
         3d:7b:38:dc:39:7a:17:89:c5:fd:b4:7b:04:a2:cb:2d:9d:4b:
         a7:f4:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org