Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/FPOZ2UDoddUtrJ6yAAOnATpVKuI.roa
File:                     FPOZ2UDoddUtrJ6yAAOnATpVKuI.roa (raw, json)
Hash identifier:          IgzmY0bK/lfXH0GPpWeSpBCPNsS0dgf6fBdOHu1hWIQ=
Subject key identifier:   14:F3:99:D9:40:E8:75:D5:2D:AC:9E:B2:00:03:A7:01:3A:55:2A:E2
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       01856E41D04DA5F82A4CCC0AA7079EA84C17
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/FPOZ2UDoddUtrJ6yAAOnATpVKuI.roa
Signing time:             Sun 01 Jan 2023 16:54:44 +0000
ROA not before:           Sun 01 Jan 2023 16:54:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        83.118.224.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:41:d0:4d:a5:f8:2a:4c:cc:0a:a7:07:9e:a8:4c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Jan  1 16:54:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14f399d940e875d52dac9eb20003a7013a552ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:ff:91:0b:52:e1:63:96:c1:64:10:37:4a:
                    16:92:b0:f4:4c:df:cc:a5:20:87:7a:c5:19:de:8a:
                    3c:fb:e4:66:02:ed:79:6e:1e:52:d2:60:23:4b:81:
                    89:de:14:ba:2e:83:aa:bb:8d:70:df:f6:41:d4:88:
                    74:9a:e5:6c:ac:a5:7e:d4:36:10:ad:41:55:84:b7:
                    de:93:c2:7d:66:fb:2c:c3:0b:c1:73:f5:9c:a9:4c:
                    b9:71:5a:4f:92:1a:e8:f2:5f:c0:1d:43:76:b7:31:
                    e7:45:1a:f2:1a:37:86:c7:b7:77:1f:1e:68:a8:53:
                    3c:d4:ab:b8:25:84:47:e5:40:59:42:40:95:47:a4:
                    fc:fc:91:70:e1:a7:42:96:63:63:5e:95:cf:ec:91:
                    6a:0c:46:fa:34:0f:be:19:41:77:79:a8:5c:60:31:
                    17:c0:58:f8:ec:cb:c2:b4:32:e3:05:f0:7a:47:0e:
                    7f:b3:1a:70:95:65:3a:e1:b6:9e:31:d1:66:56:04:
                    f5:da:c5:2f:cc:e4:29:31:15:49:c8:ec:84:6f:b7:
                    ca:06:d8:cd:00:d1:81:d3:b0:50:c0:07:3f:a7:13:
                    56:28:5d:47:20:9a:30:e3:ba:a0:04:42:62:2e:09:
                    f8:f0:5d:1d:88:84:29:5a:cb:0b:15:9b:d9:34:93:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F3:99:D9:40:E8:75:D5:2D:AC:9E:B2:00:03:A7:01:3A:55:2A:E2
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/FPOZ2UDoddUtrJ6yAAOnATpVKuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:0b:77:94:14:52:68:b8:4e:01:0d:2b:df:fb:8e:76:30:
         ce:28:a1:40:d9:8c:25:82:98:cf:1e:97:ef:af:1f:f0:f8:0a:
         5a:4b:ce:ab:03:7b:33:69:12:d2:14:fe:a6:26:7a:c4:f9:7b:
         8c:43:e4:79:a7:44:0a:ac:ff:cd:3e:d4:ed:49:25:0d:d2:4b:
         45:b9:5b:6e:b2:76:42:cc:74:c5:9f:ab:ed:90:1a:de:4d:62:
         d1:fe:9b:c7:01:d6:6c:67:e8:b6:d7:e2:36:36:53:62:2e:10:
         f2:d1:c2:70:00:1d:61:a5:cc:6a:22:a5:8a:fb:9c:80:9b:dd:
         f6:5e:25:9d:1d:7e:3f:37:22:f4:f9:a9:93:3c:dd:97:08:87:
         d5:e3:e0:f9:ba:40:a8:91:a6:aa:0b:a9:a3:49:4c:0e:30:6a:
         7e:ce:6e:08:09:8f:99:79:81:74:c9:22:cb:47:38:12:52:b6:
         0c:2a:36:80:44:3a:9e:12:14:a0:6d:8f:65:04:32:59:22:44:
         49:dc:23:46:88:6c:09:14:40:64:a4:9f:5c:35:ac:a7:c3:8e:
         47:a9:d6:0f:33:e9:df:fa:a3:2a:b2:d2:4b:d7:e0:f0:fd:cf:
         f6:35:31:a4:7c:ad:75:25:f1:7f:ff:cc:4d:df:3e:d7:63:d0:
         a7:88:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:07 2024 by rpki-client on console-fra.rpki-client.org