Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/FeQHHIXGiDz5ZfqRl5Qkl-2d01Y.roa
File:                     FeQHHIXGiDz5ZfqRl5Qkl-2d01Y.roa (raw, json)
Hash identifier:          RJhZS90agcy5HejivlZTRwJArYaVTr99G47kr7Ai/DA=
Subject key identifier:   15:E4:07:1C:85:C6:88:3C:F9:65:FA:91:97:94:24:97:ED:9D:D3:56
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       01856DE6486EFF72FEBD81EBCAE372E60F63
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/FeQHHIXGiDz5ZfqRl5Qkl-2d01Y.roa
Signing time:             Sun 01 Jan 2023 15:14:46 +0000
ROA not before:           Sun 01 Jan 2023 15:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206883
IP address blocks:        188.212.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:e6:48:6e:ff:72:fe:bd:81:eb:ca:e3:72:e6:0f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Jan  1 15:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15e4071c85c6883cf965fa9197942497ed9dd356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:44:3a:25:36:8f:46:95:f7:cf:e8:2b:47:
                    1e:16:f7:e0:d6:1f:aa:0d:95:31:e8:06:e6:0d:5b:
                    46:e5:14:f8:00:32:01:77:ff:8e:b6:ff:a1:ca:19:
                    3f:7a:9f:3a:fa:ba:c6:e7:3e:7e:da:e4:ca:f9:04:
                    f2:08:b3:78:5b:91:fc:73:3c:89:2d:23:53:65:33:
                    5d:1a:4a:d4:8e:2f:b8:ec:b2:3a:30:36:07:c5:24:
                    59:1f:61:84:ed:05:2b:d1:bf:8f:41:96:6a:e6:3e:
                    da:0d:80:76:c8:79:a5:06:34:7b:6c:ac:d3:c5:3d:
                    b9:b2:39:40:ff:9b:b8:fc:d4:81:e5:51:4b:06:f1:
                    7e:41:d0:ef:7f:cb:90:e4:39:3e:9f:e7:4a:7f:e6:
                    76:74:89:df:c1:af:c9:96:e3:42:26:61:ea:3d:e2:
                    d3:92:38:e9:41:02:db:40:12:bf:f7:8b:9f:49:34:
                    5c:1f:23:3f:80:f8:1a:a3:94:a3:cb:d5:f4:43:bb:
                    80:b0:ed:09:5f:e0:93:0c:58:ed:f8:7d:43:5f:7c:
                    a3:03:7b:6a:64:13:43:94:1c:ca:7e:73:2b:ff:5e:
                    3c:26:9f:1d:2c:e0:a3:4a:7d:dd:4c:b2:15:c1:79:
                    28:80:4a:e2:d5:ea:a0:97:be:5b:28:92:d5:f0:f6:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:07:1C:85:C6:88:3C:F9:65:FA:91:97:94:24:97:ED:9D:D3:56
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/FeQHHIXGiDz5ZfqRl5Qkl-2d01Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.212.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:71:ee:c4:c8:3f:30:78:62:a4:a9:03:d4:9a:e5:a7:62:
         36:69:e9:05:e4:e6:0c:74:68:8d:9e:a5:ef:29:9d:b8:a8:2a:
         29:40:1d:59:99:50:a3:78:82:aa:bd:3f:66:0d:98:01:ee:0e:
         a4:3f:0e:e8:40:83:84:34:08:d8:13:0d:a8:c7:3e:1a:2d:33:
         1a:e8:79:bd:9e:3a:46:20:70:ec:07:c2:62:cf:2c:68:23:67:
         0c:c1:9c:22:85:ea:9d:01:40:12:9f:d4:62:63:10:53:65:40:
         b2:a8:33:cd:69:95:35:35:d6:da:c5:54:49:47:8a:b1:18:a5:
         b9:05:e4:5d:b7:74:3f:df:e2:6c:79:e6:57:dc:c8:d8:25:82:
         69:d6:9b:96:a8:87:d3:30:3c:f2:26:ca:65:97:94:d9:06:f3:
         2b:5e:f3:4b:66:4c:95:d5:27:4b:02:d8:9a:45:33:6b:ae:11:
         be:23:86:d9:2b:b4:8c:2b:b8:d8:2d:b2:5b:c8:a4:e1:fa:93:
         e1:ed:00:c1:ef:bb:ef:f0:6f:f3:57:86:09:53:e5:35:8b:2c:
         6c:4b:85:02:23:2f:09:e2:b3:2f:37:e4:e5:b8:c2:ec:b0:27:
         af:29:16:42:33:88:73:95:b3:25:99:5a:89:46:a1:90:52:e7:
         38:70:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:22 2024 by rpki-client on console-ams.rpki-client.org