Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/f7Sr-sxJXupG6ue_XHr-litX6us.roa
File:                     f7Sr-sxJXupG6ue_XHr-litX6us.roa (raw, json)
Hash identifier:          O+V9YzL9MWyk90yQSHRXm3yeVquCaiJwOENqfbfYkkc=
Subject key identifier:   7F:B4:AB:FA:CC:49:5E:EA:46:EA:E7:BF:5C:7A:FE:96:2B:57:EA:EB
Certificate issuer:       /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial:       018CC26D6A1F96AB120548150A0091154717
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/f7Sr-sxJXupG6ue_XHr-litX6us.roa
Signing time:             Mon 01 Jan 2024 00:29:59 +0000
ROA not before:           Mon 01 Jan 2024 00:29:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8851
IP address blocks:        194.207.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:6a:1f:96:ab:12:05:48:15:0a:00:91:15:47:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
        Validity
            Not Before: Jan  1 00:29:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7fb4abfacc495eea46eae7bf5c7afe962b57eaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:6d:fe:66:69:bf:d7:fc:9c:26:c9:84:ee:
                    b2:33:62:90:15:ee:f6:bb:9c:95:89:0e:a0:bb:6b:
                    d1:ad:66:a1:e9:3f:48:0c:34:24:43:ac:a3:4b:97:
                    7c:91:4b:4d:ba:6a:ec:34:f1:ca:2b:ea:95:78:a9:
                    f4:bd:40:6b:37:62:3e:0e:6c:ed:40:76:b3:6c:eb:
                    ca:77:fc:e2:95:a3:3c:fc:d7:57:2a:83:47:d8:66:
                    35:9f:ab:85:99:cf:7e:04:7a:46:02:f8:82:4d:1b:
                    90:e6:ff:83:e0:c9:4e:9b:9e:9b:5d:c0:37:15:ed:
                    1d:4e:30:ff:26:1c:e0:80:13:68:9f:95:46:00:bc:
                    cc:a6:0b:b4:50:89:f3:e8:37:92:a5:90:82:05:8a:
                    a4:26:e7:10:46:0c:a6:bc:5b:7c:d9:33:05:a1:ab:
                    f2:8c:7a:2c:15:ce:f4:bf:a5:93:b4:58:31:e9:58:
                    dd:f7:12:b2:3f:f9:fb:54:ed:52:9b:4f:3a:82:b6:
                    8b:60:e8:8b:e4:ae:7f:d0:10:bf:c8:01:c6:89:86:
                    68:b6:06:46:05:92:fb:34:a1:a4:1c:e5:d0:e8:1a:
                    6b:80:df:c2:bb:91:b6:1b:b9:c9:65:21:1d:02:ca:
                    af:82:55:ce:5c:1f:89:8f:e6:59:60:a3:63:39:f1:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:AB:FA:CC:49:5E:EA:46:EA:E7:BF:5C:7A:FE:96:2B:57:EA:EB
            X509v3 Authority Key Identifier:
                keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/f7Sr-sxJXupG6ue_XHr-litX6us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.207.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:88:1e:b6:70:cb:26:98:44:ee:fa:cc:41:02:cc:59:84:
         e4:47:c0:af:50:d7:5a:7b:09:73:f4:c3:74:2f:94:9c:12:d2:
         72:60:92:b8:e0:7f:63:84:3d:54:c6:24:08:17:3f:b3:86:bc:
         bb:90:05:65:bd:9c:74:02:90:82:20:61:0f:b0:fd:b2:ab:fe:
         a6:d0:58:44:35:ca:02:ec:96:02:00:49:27:a1:d8:70:cc:6f:
         b3:26:25:62:4b:44:be:1e:11:30:d8:81:57:ef:99:7a:0d:af:
         8e:b8:84:09:c3:88:ab:b7:16:ab:3c:a4:b4:3c:80:2e:2a:3c:
         12:85:fc:71:e7:cb:71:2d:9a:4a:7c:e5:9d:ac:1b:3e:05:8f:
         95:18:32:a7:4d:22:dd:6f:ea:fe:b2:b9:d0:cd:59:bf:70:71:
         f8:6f:cb:7f:94:28:5c:5d:b8:1c:a6:55:d0:e9:5c:64:fc:24:
         3f:0b:46:27:59:f4:7e:93:52:08:f5:fc:bf:51:db:79:8f:83:
         89:c5:67:1b:ed:d6:af:33:f9:e0:76:4f:65:ff:3a:78:a3:6f:
         18:d8:fd:49:a1:a9:80:a0:23:69:d4:18:a0:64:7f:30:27:c0:
         03:a6:9d:45:f3:45:4d:a4:6b:27:86:29:2f:a0:ba:9c:26:a1:
         4f:e3:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:19 2024 by rpki-client on console-ams.rpki-client.org