Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/FySOkOZQP1psZrQGIagcaJFt5kk.roa
File:                     FySOkOZQP1psZrQGIagcaJFt5kk.roa (raw, json)
Hash identifier:          2wAMJ3FpU5iYdtbNJvyvbVWolHJTP86O2qz0CQwqQl0=
Subject key identifier:   17:24:8E:90:E6:50:3F:5A:6C:66:B4:06:21:A8:1C:68:91:6D:E6:49
Certificate issuer:       /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial:       018572DF05E269870715D20B49043B536C09
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/FySOkOZQP1psZrQGIagcaJFt5kk.roa
Signing time:             Mon 02 Jan 2023 14:24:56 +0000
ROA not before:           Mon 02 Jan 2023 14:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60976
IP address blocks:        185.192.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jul 2023 06:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:df:05:e2:69:87:07:15:d2:0b:49:04:3b:53:6c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
        Validity
            Not Before: Jan  2 14:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17248e90e6503f5a6c66b40621a81c68916de649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:5c:a9:70:e8:4a:75:78:4f:2f:6b:b1:6d:
                    99:d7:1f:d5:f8:89:a0:18:56:fc:a3:8f:ce:ee:36:
                    4f:83:55:6d:b4:d4:41:e9:8e:81:7f:f3:ee:f8:65:
                    c0:5f:71:cc:04:d7:5a:1b:b0:68:a8:0c:cf:d1:d1:
                    6d:ed:07:c3:ac:dc:bd:0f:61:c8:79:a8:4b:49:cf:
                    ed:98:ac:c5:d8:50:ee:38:de:d9:18:18:66:1d:63:
                    2a:d3:6e:08:a2:5b:32:3d:2d:73:29:c0:10:5a:87:
                    77:bc:69:cf:af:c8:ae:0a:ef:6b:58:5e:e0:21:12:
                    3f:c6:7a:0a:6f:79:fc:1f:32:65:1a:b1:b7:4b:f4:
                    1a:0e:c9:ac:53:4b:3f:b4:48:0a:dc:23:9d:b2:81:
                    b9:09:e9:62:7f:e2:fe:0c:ca:76:99:25:bf:20:07:
                    cc:67:a0:cb:6c:27:bf:8a:e3:eb:f6:d4:2b:2d:41:
                    28:6b:fa:91:9d:9f:cf:6b:99:96:5f:c2:a1:18:a3:
                    16:5f:b4:a7:15:cc:a6:72:74:6c:35:18:c5:52:3e:
                    29:ee:83:4d:ef:a0:da:7f:4c:4f:2d:b8:c0:5d:b6:
                    01:c1:96:c3:14:4d:f2:7d:f9:26:9d:71:1c:1b:13:
                    ea:76:8f:93:99:d2:a4:d2:01:f4:5f:aa:04:5d:a3:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:24:8E:90:E6:50:3F:5A:6C:66:B4:06:21:A8:1C:68:91:6D:E6:49
            X509v3 Authority Key Identifier:
                keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/FySOkOZQP1psZrQGIagcaJFt5kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:aa:1b:15:97:3a:cf:e0:0b:dd:91:6e:b3:42:e5:62:26:
         02:c0:ab:4c:a9:fc:87:a7:1b:ae:5f:df:8d:b7:bb:57:bb:25:
         f5:75:d2:c3:d6:8c:ca:58:6e:58:00:5f:40:22:89:bc:ea:19:
         25:b4:21:1d:02:ec:01:89:33:c0:91:ab:74:9e:dc:75:28:c2:
         60:96:54:0a:b1:b5:d0:ac:ac:91:42:53:72:d6:45:1b:47:e5:
         eb:f0:33:e4:0d:5b:fa:6e:df:55:04:09:bb:02:60:1c:b9:89:
         68:33:8a:4c:61:55:60:17:f6:66:f3:d0:39:18:16:66:65:6c:
         56:fa:64:ef:59:bd:47:0b:98:27:b1:26:b9:92:37:95:a1:dd:
         af:9d:13:be:5a:9e:e3:8b:88:9c:8a:d7:a7:59:f9:38:75:ab:
         8c:bf:51:da:15:42:2a:20:53:c2:9f:83:29:38:9e:da:d7:e1:
         ef:fa:22:59:20:1a:1c:7b:1f:91:79:f6:f6:a7:ba:1a:55:15:
         f6:58:06:04:09:dd:69:65:a6:5a:72:bb:da:18:b3:6a:05:8e:
         4a:66:0a:68:db:c5:f7:85:e5:83:12:ca:ad:47:53:c3:a0:d8:
         ab:78:e9:f2:92:df:44:cd:4e:71:61:ef:2c:72:d9:86:bd:3f:
         e7:7e:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org