Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/fy4RA4fGNl65gfYxI8kCaZr9HCA.roa
File:                     fy4RA4fGNl65gfYxI8kCaZr9HCA.roa (raw, json)
Hash identifier:          7qgFq3Dhuzx5vHaFoptpasm0fvBIs8gmP4PHQDywEnk=
Subject key identifier:   7F:2E:11:03:87:C6:36:5E:B9:81:F6:31:23:C9:02:69:9A:FD:1C:20
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       018572A80292312FDD4179FE393C5BAF7167
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/fy4RA4fGNl65gfYxI8kCaZr9HCA.roa
Signing time:             Mon 02 Jan 2023 13:24:51 +0000
ROA not before:           Mon 02 Jan 2023 13:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44072
IP address blocks:        185.178.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:a8:02:92:31:2f:dd:41:79:fe:39:3c:5b:af:71:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Jan  2 13:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f2e110387c6365eb981f63123c902699afd1c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:69:c9:e0:26:4b:fc:97:56:1d:37:7a:90:
                    c1:cb:80:4b:25:45:9a:29:69:da:c9:bf:c3:32:50:
                    be:f8:fe:64:bc:9b:63:4c:c1:4f:89:e7:b6:1d:e3:
                    ce:ed:10:b6:e9:59:c8:c1:37:51:61:0f:81:58:20:
                    db:2b:ed:c7:aa:ac:93:ec:5f:8b:92:96:79:71:81:
                    2a:15:5d:ba:99:cf:f3:84:3b:5f:87:0d:ca:05:26:
                    44:b7:2c:77:63:26:d6:48:39:eb:0a:5c:78:fb:2d:
                    d2:6b:c9:32:f6:59:d2:be:39:ce:2a:74:ae:d6:aa:
                    f7:fc:6c:1a:cd:ae:63:8f:ef:68:b5:56:81:f8:0a:
                    f9:04:93:a6:07:e2:7a:1f:53:71:49:e0:00:6f:9d:
                    9f:37:64:36:59:95:a8:bc:b7:67:b6:ec:5d:97:2f:
                    f8:d9:f2:b9:6f:32:f3:03:63:2f:09:de:d9:81:01:
                    44:8f:b0:87:ff:5e:c9:5a:1c:fd:4b:b1:2e:db:94:
                    41:6c:b7:97:19:09:91:af:30:60:6a:ef:dd:a3:8f:
                    55:fa:9c:ae:2a:24:c8:a6:b7:11:00:c4:14:4e:08:
                    6c:6c:8f:fa:e5:18:3b:c4:3c:80:bb:cb:30:02:f4:
                    c7:f6:ae:89:c0:44:0a:ce:a7:8d:c3:70:df:d5:8b:
                    96:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:11:03:87:C6:36:5E:B9:81:F6:31:23:C9:02:69:9A:FD:1C:20
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/fy4RA4fGNl65gfYxI8kCaZr9HCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:ca:5d:87:47:6f:7a:e4:25:c8:15:ba:80:fa:97:a9:82:
         35:1e:fb:6e:ab:c0:10:e6:3d:fa:19:ee:63:94:b8:75:03:45:
         b3:60:1f:f6:77:ae:40:e9:77:97:28:13:a6:f1:cd:27:51:aa:
         a1:89:47:18:dd:3e:7c:3f:1e:68:12:7d:e4:e2:ae:42:dc:18:
         a3:e7:c7:2b:12:e9:a3:39:24:d3:2b:dc:ec:b5:7b:e1:3f:8f:
         4d:25:42:1b:67:e1:62:bf:44:07:19:c1:c3:17:0b:b7:9e:b6:
         60:1a:e7:dc:2c:65:de:5e:13:45:fc:d9:00:1b:12:06:7d:ec:
         c5:6a:f9:c3:b4:b7:bf:60:77:26:21:47:da:b4:d5:72:a6:d0:
         38:f3:7e:bb:5e:e9:88:2f:37:b9:88:11:df:e3:78:48:fb:d4:
         aa:8e:e4:2b:bf:27:bd:b3:b5:49:cd:1d:5d:61:56:bb:7d:c7:
         fb:28:db:91:e8:e8:68:50:f6:ea:1d:e9:06:e0:72:f1:6d:9c:
         8a:c3:d6:f6:47:b0:9e:8f:73:73:6a:d6:7a:5c:09:03:09:f7:
         b5:89:ba:9d:75:7e:91:c7:1f:59:60:5f:88:aa:ac:62:fb:59:
         81:8f:e0:45:92:72:70:95:55:15:75:9f:f8:f0:5d:f0:a1:3d:
         94:eb:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org