Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/FPWP_b4nT8T7kcHKxb0Gc0zU8Tg.roa
File:                     FPWP_b4nT8T7kcHKxb0Gc0zU8Tg.roa (raw, json)
Hash identifier:          kTkQs+96f5LIokP6uUr264wMdhPlm18TrAnSR070/zY=
Subject key identifier:   14:F5:8F:FD:BE:27:4F:C4:FB:91:C1:CA:C5:BD:06:73:4C:D4:F1:38
Certificate issuer:       /CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Certificate serial:       01857355EF81A820F2F5D1AEB2E6F6869799
Authority key identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/FPWP_b4nT8T7kcHKxb0Gc0zU8Tg.roa
Signing time:             Mon 02 Jan 2023 16:34:49 +0000
ROA not before:           Mon 02 Jan 2023 16:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211479
IP address blocks:        2001:67c:109c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:55:ef:81:a8:20:f2:f5:d1:ae:b2:e6:f6:86:97:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
        Validity
            Not Before: Jan  2 16:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14f58ffdbe274fc4fb91c1cac5bd06734cd4f138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:41:51:16:de:e5:b0:e8:40:07:7b:1f:e7:
                    39:a9:da:96:84:b2:e7:7e:44:f8:bf:ee:a0:11:5d:
                    3d:3a:5f:b2:7d:bf:0b:82:c5:a6:c9:7b:65:80:2c:
                    2c:32:e9:8d:ca:59:33:92:ff:35:2f:ce:49:dd:1b:
                    68:99:5a:76:d1:de:d3:dd:cb:e2:1e:68:0c:a3:8c:
                    29:b3:52:6c:69:83:e6:8a:52:5f:8d:e6:be:4f:2a:
                    ee:0b:20:bb:28:06:4b:4c:35:1d:89:59:fd:0d:31:
                    65:cd:9e:91:16:5f:ca:3b:5b:4e:e6:b1:53:c3:40:
                    78:b5:07:a3:0b:14:1e:37:4c:3a:55:03:69:20:ea:
                    6c:e3:0d:dc:6d:85:29:1a:dc:0c:84:f8:d5:99:e4:
                    d7:cd:a7:83:a9:95:21:33:1b:11:2d:a1:8b:fb:d7:
                    f3:68:c5:7b:1b:a9:45:18:cf:f9:f8:27:a9:4a:a1:
                    34:5d:2c:b2:78:20:55:e0:3a:30:35:c7:d8:1b:f4:
                    e8:da:d3:6e:e4:ef:c4:37:5c:70:39:6b:d6:96:a7:
                    63:12:cf:a0:69:f8:59:ef:04:60:ed:f7:55:2b:43:
                    cf:aa:a4:c5:d2:9d:fb:a9:dd:1a:71:cf:79:7a:69:
                    e8:e7:a7:68:23:aa:5c:b2:48:05:5c:95:5b:12:39:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:8F:FD:BE:27:4F:C4:FB:91:C1:CA:C5:BD:06:73:4C:D4:F1:38
            X509v3 Authority Key Identifier:
                keyid:FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/FPWP_b4nT8T7kcHKxb0Gc0zU8Tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:109c::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:0c:08:16:38:58:a0:7b:18:f7:cb:64:1c:5e:2a:e1:b5:
         06:25:c9:2e:e2:90:14:53:bc:b0:c2:77:14:bd:1e:a0:9c:d1:
         97:09:cc:85:3e:4e:89:c6:13:56:0d:13:7f:77:c6:66:22:60:
         17:7c:4d:fd:f2:ab:f0:b6:c2:24:ed:fc:22:aa:45:75:a0:73:
         3d:a7:99:e0:c2:9e:17:56:72:67:58:4a:1a:72:0c:c9:57:2e:
         24:69:94:98:cd:a8:fd:8e:7a:bc:2b:f2:b3:98:68:ba:99:fd:
         6c:41:fb:ca:4d:2d:fb:11:84:e3:3d:7f:48:c3:25:3f:93:c9:
         29:21:49:83:1f:24:77:4f:f5:06:6c:b5:21:68:81:66:b5:81:
         d5:6c:6f:2e:60:67:a7:cc:07:92:25:19:22:4f:b2:15:5d:29:
         3c:7a:e0:58:9e:22:da:32:ba:5f:0d:9f:ec:0a:dc:91:f1:43:
         2f:ed:ba:5f:44:92:cb:36:6a:77:9f:5a:fe:c9:3f:3b:e7:13:
         a6:42:fd:71:06:04:c9:78:a0:13:89:b9:43:04:1b:b8:d0:c3:
         c9:43:8d:28:f7:11:8e:75:b7:ec:53:2a:90:ed:b6:57:2a:d5:
         8a:57:cd:48:75:cf:8d:b0:60:bb:4b:30:12:f4:ea:6b:08:63:
         3d:da:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org