Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ftbV-OwtLWDLDMsql-3F21ubG4c.roa
File:                     ftbV-OwtLWDLDMsql-3F21ubG4c.roa (raw, json)
Hash identifier:          gCFAsAcmSlQSve24Leo+nmFVAjtBUSOA/aohIHTJ41Y=
Subject key identifier:   7E:D6:D5:F8:EC:2D:2D:60:CB:0C:CB:2A:97:ED:C5:DB:5B:9B:1B:87
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018BF523BB4579A312DC0569161BE0E7F5CE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ftbV-OwtLWDLDMsql-3F21ubG4c.roa
Signing time:             Wed 22 Nov 2023 03:47:21 +0000
ROA not before:           Wed 22 Nov 2023 03:47:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9050
IP address blocks:        94.177.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f5:23:bb:45:79:a3:12:dc:05:69:16:1b:e0:e7:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Nov 22 03:47:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ed6d5f8ec2d2d60cb0ccb2a97edc5db5b9b1b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:c9:c7:3a:ef:b4:e5:b3:7e:2d:13:f7:01:
                    2c:e0:5a:22:55:a3:2b:76:0c:a8:52:88:3b:48:27:
                    85:e3:b3:d9:7c:c0:c2:ea:6c:87:24:8d:95:77:87:
                    40:74:49:f9:54:1a:07:f6:ed:85:6f:11:96:c4:8d:
                    28:3d:c2:9a:aa:0e:fb:64:ac:9d:89:03:d8:a1:cf:
                    33:bc:14:26:d8:2d:2e:47:f6:6d:82:18:a1:6d:fb:
                    c8:58:ea:b8:f6:f6:4b:e2:91:63:18:fb:e7:72:b7:
                    e7:84:d7:5f:26:15:21:55:a4:51:44:8e:eb:7a:2a:
                    48:44:66:67:99:7f:f5:de:07:9d:b5:78:59:e4:eb:
                    5e:64:51:9c:3e:ce:5e:01:d4:a0:ae:94:21:a7:32:
                    8e:36:3e:a8:5f:85:24:fb:ef:b0:ea:71:b6:51:96:
                    ed:b8:70:22:f5:52:29:f1:93:3f:f5:ae:28:9c:7b:
                    b5:4d:d4:ff:91:88:3f:3a:6d:38:3c:f9:49:b7:b8:
                    53:2a:b2:bb:87:7d:d8:fd:c1:39:d9:ee:c3:5c:e3:
                    ae:4d:35:74:45:31:13:aa:19:8e:da:59:41:81:63:
                    dd:c0:12:38:b9:01:3c:98:c9:f9:0e:75:b1:ed:37:
                    ef:44:23:7c:39:8a:2e:8a:71:00:7b:c4:37:02:77:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:D5:F8:EC:2D:2D:60:CB:0C:CB:2A:97:ED:C5:DB:5B:9B:1B:87
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ftbV-OwtLWDLDMsql-3F21ubG4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:00:e0:94:b0:79:84:e3:b4:8c:26:10:e9:c4:e2:b4:6a:
         11:d9:2a:86:bb:01:9c:c7:d5:97:04:65:6c:ae:a4:e6:1f:c8:
         5a:0e:82:7b:4c:4c:32:0a:77:3e:98:6f:ca:d2:87:40:71:c8:
         57:ee:0b:78:c0:c8:fd:a4:88:03:f4:72:53:76:04:2e:4b:cf:
         ab:f8:6f:b7:22:7a:ea:3b:9a:23:12:c4:3d:54:85:6b:79:9d:
         fd:1f:d5:4d:7b:5c:4e:a0:a4:e1:ce:9d:30:bb:c1:6b:1d:13:
         3f:41:12:f5:64:ab:2e:b3:d1:3e:b6:c9:dd:53:38:c5:88:06:
         bc:fc:e0:c5:10:b3:0f:86:6c:90:c9:5b:07:38:c1:59:7a:0a:
         f6:b7:32:34:ab:14:9e:ea:bb:0c:1a:6b:3c:ac:2d:d2:f1:07:
         a0:11:23:b2:5e:55:89:3f:d0:78:f0:52:9c:35:2a:a2:1c:12:
         8c:b9:1d:07:ff:d6:87:25:a9:bc:a3:1f:68:01:7a:4f:80:dd:
         1f:8b:0f:71:3b:8d:f6:9a:99:b5:a0:2d:72:d9:7c:13:3a:06:
         5a:e7:de:ab:87:e4:1e:5a:ba:1c:24:9f:43:c0:25:8b:2c:d8:
         8a:b7:d0:47:23:c7:c6:14:f4:d6:10:f8:2a:cc:d1:01:fa:cc:
         9d:8b:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org