Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/FMku-CIPqXhJdIuR19cN6F2KvVM.roa
File:                     FMku-CIPqXhJdIuR19cN6F2KvVM.roa (raw, json)
Hash identifier:          ZHjxMf9p1BHclbr6j7+S4sT/aDchv5WiuezwlS/TMXM=
Subject key identifier:   14:C9:2E:F8:22:0F:A9:78:49:74:8B:91:D7:D7:0D:E8:5D:8A:BD:53
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       0185724723E895AE688B6435A7C15E647B5B
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/FMku-CIPqXhJdIuR19cN6F2KvVM.roa
Signing time:             Mon 02 Jan 2023 11:39:02 +0000
ROA not before:           Mon 02 Jan 2023 11:39:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205512
IP address blocks:        185.233.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:47:23:e8:95:ae:68:8b:64:35:a7:c1:5e:64:7b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Jan  2 11:39:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14c92ef8220fa97849748b91d7d70de85d8abd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:17:a4:6b:7d:60:84:74:6b:59:26:08:1f:
                    86:9d:18:e5:31:03:f0:c4:70:2e:9f:04:fe:d1:2e:
                    97:cb:bd:46:4e:98:f8:dc:ef:81:a8:8c:c6:9d:9b:
                    06:27:84:8c:31:de:23:9a:ff:f5:5b:7a:dc:77:a0:
                    37:f0:6a:39:52:27:b6:73:a6:17:c3:68:9a:fd:72:
                    44:c7:23:a1:06:d8:79:c6:ff:20:d1:d3:21:9c:05:
                    c9:43:60:97:ba:c3:a7:02:17:8c:48:a4:09:f3:b7:
                    88:03:fc:75:69:bf:0c:f3:c3:3a:7c:eb:31:0f:01:
                    89:17:2f:0a:4f:6e:ef:ef:5a:95:80:13:17:89:0c:
                    00:3d:68:84:76:a6:3a:18:db:5e:0a:67:e7:b6:0b:
                    11:52:9d:4a:82:ec:00:1d:ef:79:ef:82:05:b8:19:
                    c8:14:18:0f:68:9d:73:26:e3:34:da:58:eb:3d:de:
                    77:b7:0b:32:5e:4f:8b:4f:22:90:22:6b:cf:f5:93:
                    8b:91:a7:bf:41:fe:e6:b9:f4:18:f1:e6:f1:de:d9:
                    d4:99:f6:96:f5:b3:df:10:f1:de:66:e5:a3:e3:dd:
                    83:36:8c:57:fa:e4:b5:69:61:49:c5:20:41:3e:ba:
                    05:63:e1:31:6d:3e:0d:70:5c:6f:0f:29:b4:1b:78:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:2E:F8:22:0F:A9:78:49:74:8B:91:D7:D7:0D:E8:5D:8A:BD:53
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/FMku-CIPqXhJdIuR19cN6F2KvVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:f9:f4:cf:c4:22:fe:86:50:4b:ce:13:fb:61:09:f6:6d:
         d5:92:08:eb:5b:5b:51:37:ec:2b:be:33:ca:a0:a4:36:ab:78:
         ab:f0:d8:54:11:4d:49:25:75:93:5e:2a:5d:39:49:02:fe:e4:
         83:62:80:d1:56:a0:11:31:fc:1c:a4:e0:c3:0c:09:d1:04:b6:
         dc:32:4e:e8:c4:01:fc:ea:80:1e:01:78:d2:57:3f:9b:14:87:
         74:90:7e:35:13:43:d8:84:a5:0f:c1:a0:b4:ef:53:6e:eb:94:
         81:52:d9:62:a3:40:c3:c7:e4:98:e7:c6:2d:51:6b:c7:16:5f:
         c3:16:83:03:e5:bf:4a:fe:eb:0d:a0:e3:2c:33:f5:f1:7e:c5:
         de:79:ca:e9:a5:ff:29:95:ae:16:f2:15:7c:2b:58:fb:ba:d9:
         eb:24:24:43:a5:aa:f7:ab:e9:e8:6e:f3:42:b7:f6:f9:ab:90:
         4c:77:4a:5f:30:e6:81:d6:89:03:1a:f8:80:b5:53:5e:6f:1c:
         e8:df:cf:7e:78:7f:e7:fa:08:fb:ba:27:3b:b2:e8:c8:2e:c6:
         42:6c:e0:47:44:60:ae:59:80:34:8a:c7:52:60:c4:c0:9c:e2:
         7c:7b:83:ca:06:0f:ce:66:aa:bc:b4:94:98:76:12:77:c3:2b:
         63:e2:ab:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRyPola5oi2Q1p8FeZHtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2
NTIxNDAwHhcNMjMwMTAyMTEzOTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGM5MmVmODIyMGZhOTc4NDk3NDhiOTFkN2Q3MGRlODVkOGFiZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLgXpGt9YIR0a1kmCB+GnRjlMQPw
xHAunwT+0S6Xy71GTpj43O+BqIzGnZsGJ4SMMd4jmv/1W3rcd6A38Go5Uie2c6YX
w2ia/XJExyOhBth5xv8g0dMhnAXJQ2CXusOnAheMSKQJ87eIA/x1ab8M88M6fOsx
DwGJFy8KT27v71qVgBMXiQwAPWiEdqY6GNteCmfntgsRUp1KguwAHe9574IFuBnI
FBgPaJ1zJuM02ljrPd53twsyXk+LTyKQImvP9ZOLkae/Qf7mufQY8ebx3tnUmfaW
9bPfEPHeZuWj492DNoxX+uS1aWFJxSBBProFY+ExbT4NcFxvDym0G3g5pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTJLvgiD6l4SXSLkdfXDehdir1TMB8GA1UdIwQY
MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt
MThlMThkNjU5ZDhmLzEvRk1rdS1DSVBxWGhKZEl1UjE5Y042RjJLdlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm
LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuenqMA0G
CSqGSIb3DQEBCwUAA4IBAQAjtfn0z8Qi/oZQS84T+2EJ9m3VkgjrW1tRN+wrvjPK
oKQ2q3ir8NhUEU1JJXWTXipdOUkC/uSDYoDRVqARMfwcpODDDAnRBLbcMk7oxAH8
6oAeAXjSVz+bFId0kH41E0PYhKUPwaC071Nu65SBUtlio0DDx+SY58YtUWvHFl/D
FoMD5b9K/usNoOMsM/XxfsXeecrppf8pla4W8hV8K1j7utnrJCRDpar3q+nobvNC
t/b5q5BMd0pfMOaB1okDGviAtVNebxzo389+eH/n+gj7uic7sujILsZCbOBHRGCu
WYA0isdSYMTAnOJ8e4PKBg/OZqq8tJSYdhJ3wytj4qu/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-fra.rpki-client.org