Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/fjk7e8lBp-Htv36Ar_FBI7F4XdM.roa
File:                     fjk7e8lBp-Htv36Ar_FBI7F4XdM.roa (raw, json)
Hash identifier:          fZV4ySGgA89fKdeF13/RluzqytuPg77jikdZf4Vl4Z4=
Subject key identifier:   7E:39:3B:7B:C9:41:A7:E1:ED:BF:7E:80:AF:F1:41:23:B1:78:5D:D3
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       01856D8AC9E5FF99476BD1A360AEA83BAEC6
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/fjk7e8lBp-Htv36Ar_FBI7F4XdM.roa
Signing time:             Sun 01 Jan 2023 13:34:50 +0000
ROA not before:           Sun 01 Jan 2023 13:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204645
IP address blocks:        213.232.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 01 Feb 2023 11:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:c9:e5:ff:99:47:6b:d1:a3:60:ae:a8:3b:ae:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: Jan  1 13:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e393b7bc941a7e1edbf7e80aff14123b1785dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:2f:56:8e:f4:f1:dd:2b:31:7c:d2:7e:b7:
                    85:18:5c:0c:66:1b:64:28:c6:26:73:a0:d6:b6:3e:
                    71:92:cb:65:de:e0:ae:12:0e:26:ae:0a:91:7d:fe:
                    7a:18:90:f7:b3:67:29:f8:0f:7d:76:ca:4a:af:46:
                    02:98:6d:22:7a:45:71:aa:46:d6:33:9e:63:23:0a:
                    d8:43:98:ea:f0:2e:e3:21:cb:ba:c5:83:3f:4f:ae:
                    5e:ac:db:04:1b:5e:6d:7d:ab:8e:bd:b2:83:68:0d:
                    cf:28:86:cd:31:68:c4:0c:04:59:e8:30:e5:70:d9:
                    29:91:23:0d:8d:36:f6:fa:89:39:db:7a:a8:6d:e9:
                    8c:8f:2c:f9:56:2f:7c:80:f8:12:b7:f1:76:8e:e9:
                    92:af:6d:0e:4b:d2:71:3e:54:bb:08:f7:81:26:c7:
                    38:01:d3:ca:0d:9a:f3:6f:83:25:c4:37:c3:63:99:
                    f4:50:93:03:08:d6:73:1e:05:8a:61:b7:6c:bc:97:
                    d3:bb:08:29:5c:55:6d:2f:0b:8f:b6:1a:a6:1e:d5:
                    4f:bb:d4:78:9c:7f:29:8e:92:d1:fc:fe:18:95:ff:
                    7c:65:fa:5b:c1:21:90:7f:00:da:8d:3d:e9:39:91:
                    fe:40:cd:9e:6f:95:f4:40:11:be:68:f5:a6:0b:a2:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:3B:7B:C9:41:A7:E1:ED:BF:7E:80:AF:F1:41:23:B1:78:5D:D3
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/fjk7e8lBp-Htv36Ar_FBI7F4XdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:84:f4:21:cf:82:fa:c6:48:42:c9:18:47:66:d7:4c:81:
         7f:49:1b:0d:c3:a9:21:59:e8:35:a8:30:99:39:f1:f0:23:67:
         48:f2:e3:49:e4:28:cf:58:ca:a5:ad:75:d8:fd:80:06:1a:30:
         f5:83:08:84:ca:4d:fe:a5:5c:7a:c9:ea:d9:3b:06:18:38:5d:
         6b:55:ac:ee:89:00:42:17:ab:cb:3b:13:79:75:65:2c:bb:43:
         80:63:7e:e9:8b:41:39:06:e5:1b:c3:33:29:d9:66:95:fe:6a:
         a1:0d:fa:7f:cf:60:c0:93:b7:41:da:82:8c:2d:13:e5:a9:f0:
         3a:a7:d5:f4:85:86:28:7b:46:f0:c5:e5:5d:1f:6c:8e:d6:32:
         5c:9f:09:71:5a:f6:01:d9:52:4b:52:69:ab:80:1d:eb:83:e2:
         81:d3:6f:8f:a2:fa:e5:12:02:25:a0:9e:79:86:fc:ef:68:4a:
         74:aa:e2:6b:99:9f:77:81:ad:0f:3b:84:ac:37:00:c1:0d:66:
         61:49:54:1e:c7:ed:8c:33:2a:77:7c:74:e9:c3:4a:5b:48:52:
         dd:bc:00:32:37:de:44:78:b7:1c:9e:91:0c:ff:02:59:1e:28:
         25:f3:9d:5f:44:6f:d1:2d:61:69:fe:90:dd:38:7c:04:c5:17:
         22:d2:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:46 2024 by rpki-client on console-fra.rpki-client.org