Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/_tT10vJhM0YZcYZhbS4jBprI9Qo.roa
File:                     _tT10vJhM0YZcYZhbS4jBprI9Qo.roa (raw, json)
Hash identifier:          zG7GIRdDHy7pg9GBL4lrZShtpBuZvfA1gJ0lO7rfrng=
Subject key identifier:   FE:D4:F5:D2:F2:61:33:46:19:71:86:61:6D:2E:23:06:9A:C8:F5:0A
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       0186C04174100D584E0893184DCAA8294A58
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/_tT10vJhM0YZcYZhbS4jBprI9Qo.roa
Signing time:             Wed 08 Mar 2023 08:06:00 +0000
ROA not before:           Wed 08 Mar 2023 08:06:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        185.103.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Apr 2023 11:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c0:41:74:10:0d:58:4e:08:93:18:4d:ca:a8:29:4a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Mar  8 08:06:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fed4f5d2f2613346197186616d2e23069ac8f50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:f1:7d:28:33:75:df:4a:08:1d:f4:6a:f9:
                    9e:af:16:2e:e5:c0:4d:fc:a9:b2:ed:38:87:51:cd:
                    e7:8a:16:bd:34:00:18:c1:66:7e:62:13:51:9e:f7:
                    4f:67:71:4f:b7:92:1c:e5:b7:73:02:d2:12:72:8e:
                    1f:c2:1d:f2:88:99:77:9f:d2:46:6b:0c:6a:65:bf:
                    a6:4a:8e:9f:6f:b6:c3:b4:45:29:59:c7:58:f1:a7:
                    f3:90:4d:ca:2c:ee:fb:7d:da:c8:c0:2f:a4:59:51:
                    81:0b:95:f7:64:5e:0d:52:21:c3:8f:b3:f3:b0:94:
                    49:49:07:fe:d0:ed:89:4d:13:ce:d3:8e:77:87:3d:
                    54:7c:64:6e:61:2a:bc:b3:cb:7d:b7:dc:e2:b0:f8:
                    97:b1:2b:6d:b9:5f:50:c5:08:21:a6:42:5e:99:e0:
                    df:8e:3c:66:42:63:c4:55:25:33:7a:dd:18:98:33:
                    58:55:b8:e1:61:1f:bd:55:b5:52:72:aa:4a:a0:af:
                    ae:18:20:f4:4a:19:7c:4e:a2:b3:74:cf:cc:b0:d0:
                    3d:40:96:cc:73:5e:76:b0:22:ab:ac:63:9f:2f:1b:
                    f6:b0:6b:d4:c7:d8:39:23:d9:a7:39:f7:8a:65:99:
                    fb:80:a6:2a:e9:fb:17:a6:52:ad:52:ec:9e:89:c6:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D4:F5:D2:F2:61:33:46:19:71:86:61:6D:2E:23:06:9A:C8:F5:0A
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/_tT10vJhM0YZcYZhbS4jBprI9Qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:23:e6:da:f1:57:2a:73:c8:d3:78:ae:39:5c:40:fc:ea:
         ae:f4:93:a3:8c:7d:4d:59:95:fc:71:f2:38:a7:14:9b:af:85:
         67:86:ad:c5:a8:2f:ba:58:87:ea:0f:74:f1:eb:6c:ca:cf:a6:
         96:80:f3:f4:f6:a4:f6:9b:ab:b4:87:da:15:1b:8a:b2:33:d8:
         fa:a9:a9:9a:77:24:31:91:de:9b:8e:01:8d:d0:bc:44:51:73:
         1a:de:dc:87:b3:cf:ae:5b:d0:6d:7e:b1:d8:53:c8:a7:eb:3a:
         ff:96:bb:93:1a:e9:9b:14:f8:dc:ce:04:6c:b2:79:e2:94:6f:
         37:df:80:86:37:25:e2:bf:0f:eb:7f:eb:e5:fc:a6:6a:6b:84:
         af:5f:e6:33:d2:cb:9b:4a:d7:8a:81:d3:5c:34:4c:a7:96:e6:
         a8:a0:69:d5:fe:ad:08:7c:f0:a5:5c:97:a6:88:09:6f:bd:84:
         b8:d2:12:69:ee:e4:60:3e:b0:93:d2:89:e7:fd:19:f9:04:69:
         eb:d7:3f:a5:97:be:f1:48:0b:9e:1d:d0:ca:f7:24:32:b4:6a:
         90:a2:93:87:be:5d:64:e6:af:61:39:8b:64:a4:fc:e1:ca:4d:
         91:4d:bf:e2:3d:3e:ce:cd:64:b0:2d:b7:a9:95:14:81:7d:34:
         60:29:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:10 2024 by rpki-client on console-fra.rpki-client.org