Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fx518pwisvmF9Qque3iFzhaNglo.roa
File:                     fx518pwisvmF9Qque3iFzhaNglo.roa (raw, json)
Hash identifier:          n5Byp0XqTcY+FnPoWFSmmINHxRVFTG4e8a3TYKba+aw=
Subject key identifier:   7F:1E:75:F2:9C:22:B2:F9:85:F5:0A:AE:7B:78:85:CE:16:8D:82:5A
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018D5FFB39CE56B65D0568078ED4EFF9786B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fx518pwisvmF9Qque3iFzhaNglo.roa
Signing time:             Wed 31 Jan 2024 14:45:16 +0000
ROA not before:           Wed 31 Jan 2024 14:45:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212027
IP address blocks:        194.120.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 03:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5f:fb:39:ce:56:b6:5d:05:68:07:8e:d4:ef:f9:78:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan 31 14:45:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f1e75f29c22b2f985f50aae7b7885ce168d825a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:ed:3e:56:48:d7:82:0f:db:b2:17:c4:ab:
                    c5:58:82:34:97:be:cd:7a:c6:3c:0e:91:b0:79:0e:
                    30:47:b4:b8:e4:0d:71:31:3c:19:57:69:95:38:52:
                    a8:97:c7:2d:c7:eb:ed:33:89:46:0b:cf:5b:f5:79:
                    19:90:ef:16:52:ea:f4:80:4d:68:a0:69:fc:9a:f1:
                    d8:c4:a0:77:3e:55:5b:9d:f5:07:05:25:b6:ca:17:
                    f5:bd:57:1f:c3:7e:6d:de:7f:eb:f2:56:ac:c8:a3:
                    30:b0:47:44:3b:09:c3:41:88:87:b3:9b:41:3c:6f:
                    4c:53:dd:00:cc:8d:fd:ba:04:db:1d:6c:5c:a7:67:
                    4c:25:77:1f:b9:47:5c:d5:72:7d:9c:54:29:b9:6d:
                    9f:be:10:2e:39:9c:cf:fc:8d:99:12:ad:86:9e:0d:
                    9f:60:38:b4:c6:2f:8b:9d:62:9f:8d:e5:62:af:19:
                    47:07:a1:2f:d7:2a:26:ab:38:67:59:14:2d:fe:a6:
                    6e:f6:ba:75:45:74:f3:b4:e3:23:75:70:e6:1b:77:
                    6d:ea:65:de:0d:29:ae:5f:49:e0:ae:f0:ca:d4:3c:
                    e7:46:7a:90:ce:bd:77:6d:b0:71:a5:eb:79:12:ce:
                    df:ee:06:78:26:59:8c:02:7d:d4:18:df:ea:20:9b:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:75:F2:9C:22:B2:F9:85:F5:0A:AE:7B:78:85:CE:16:8D:82:5A
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fx518pwisvmF9Qque3iFzhaNglo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.120.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:be:62:ad:d3:a9:19:95:01:9e:12:c2:40:5a:32:45:0e:00:
         9b:0f:ed:4b:29:8e:54:e8:c7:62:9a:82:2a:64:cf:aa:cf:66:
         cf:f9:04:26:f7:65:0b:2b:9e:03:f1:85:9e:14:70:43:30:1d:
         16:91:87:73:03:98:b8:17:a8:55:cc:2c:e2:e1:b3:5b:d6:b3:
         f4:41:0d:16:c3:05:cd:37:25:32:3b:21:c9:bb:78:9c:14:a7:
         8f:f0:92:b2:76:a8:5d:17:46:a9:1d:83:fb:df:00:0b:3a:a9:
         99:56:87:00:ad:ff:2f:52:dc:95:71:61:4d:35:ce:a0:43:b8:
         3e:87:e4:90:82:bf:23:fa:e0:78:80:f0:25:26:ba:43:85:bf:
         6a:71:c2:e4:26:40:53:3d:db:57:9c:bb:9b:bc:2c:ae:f7:65:
         2a:93:07:e9:49:4c:2b:31:8c:52:83:3a:00:cc:0c:fe:9c:d9:
         2e:e5:49:d4:4b:0b:b8:16:97:da:75:d1:0f:18:b9:e0:d2:16:
         56:15:74:57:da:fb:bd:15:c1:41:e7:35:8b:78:b6:da:7b:da:
         d1:10:53:0a:80:82:9d:69:cc:1f:bc:a2:14:80:a8:93:48:35:
         b0:81:1a:61:39:93:06:cb:1e:5d:6e:1f:45:ac:ca:8b:89:a5:
         f1:33:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org