Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Fa_ObsaGUXEiTiMfEDOIsay6DCU.roa
File:                     Fa_ObsaGUXEiTiMfEDOIsay6DCU.roa (raw, json)
Hash identifier:          UWjJ0ISi8QOvSEtnvLRCrjg1VTjNKfyr8aN0UQmKDu4=
Subject key identifier:   15:AF:CE:6E:C6:86:51:71:22:4E:23:1F:10:33:88:B1:AC:BA:0C:25
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       01874B4FD09283511A614A62780B0964458C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Fa_ObsaGUXEiTiMfEDOIsay6DCU.roa
Signing time:             Tue 04 Apr 2023 08:08:54 +0000
ROA not before:           Tue 04 Apr 2023 08:08:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200131
IP address blocks:        185.106.192.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 12:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4b:4f:d0:92:83:51:1a:61:4a:62:78:0b:09:64:45:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Apr  4 08:08:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15afce6ec6865171224e231f103388b1acba0c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:36:81:67:43:91:67:32:99:a7:59:00:27:
                    77:22:e0:f4:2b:9b:f9:77:d8:5d:5b:57:63:40:15:
                    55:8d:cf:83:eb:3e:6f:b1:93:68:0c:14:ed:1c:c3:
                    a2:51:38:03:be:45:cf:61:d4:52:7d:77:cf:10:ea:
                    9c:d4:bf:b6:d9:d2:1d:cb:ae:56:1d:e8:97:f3:85:
                    68:0f:14:50:18:9d:cf:83:18:d8:b6:38:07:24:5d:
                    01:d5:cd:35:6e:55:1b:7e:9b:54:53:5a:fc:58:62:
                    65:3c:9d:3d:da:d5:e1:c9:8b:05:18:01:5a:65:19:
                    12:c2:52:1f:00:cd:2f:fe:ee:df:18:76:c0:8a:98:
                    f1:4f:b1:7a:b0:70:79:c6:21:56:64:9e:2b:35:6d:
                    ca:70:1b:d4:b2:f5:9b:f0:66:a7:f0:d9:c7:a2:a5:
                    b7:42:8e:89:44:47:08:48:84:69:0e:f6:6e:15:df:
                    59:e9:06:96:62:d7:5c:c6:3d:54:64:86:22:d2:31:
                    a8:e5:9b:34:fa:48:2d:ab:dd:4d:99:f6:bc:94:6b:
                    d1:0a:c4:c8:df:08:a0:36:07:a8:0f:df:4b:f9:57:
                    f6:e9:26:31:89:46:4d:42:c1:48:b1:51:fb:7b:13:
                    d4:8e:ca:be:2f:c8:7a:22:e7:2e:18:b5:3c:3a:ed:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AF:CE:6E:C6:86:51:71:22:4E:23:1F:10:33:88:B1:AC:BA:0C:25
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Fa_ObsaGUXEiTiMfEDOIsay6DCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:36:34:d2:26:ff:da:a1:3d:ac:77:cf:f5:50:5f:30:c5:95:
         94:8a:11:9d:ae:43:ce:59:99:59:1a:c9:4e:4c:a6:cc:d9:94:
         69:96:98:d5:2f:12:bf:31:50:19:b7:f3:a0:45:1e:98:63:b9:
         e4:f2:f6:87:a7:c0:98:d0:35:4c:f4:05:46:8e:0e:c1:21:bd:
         d0:ba:bb:d8:fb:a9:d1:5c:3b:ed:4e:01:f4:d2:24:cc:48:5c:
         cd:06:c2:ae:d9:cb:fe:7f:ef:8c:47:c2:ea:aa:61:fc:c1:fd:
         f1:89:18:1c:bb:29:b6:9c:43:d3:24:c7:c9:e1:df:1e:43:26:
         0c:eb:74:e0:61:be:01:e0:83:e7:52:47:5b:ab:0d:2f:82:51:
         66:ae:f3:78:34:2a:ed:a5:d7:db:77:68:c2:22:9e:58:c8:06:
         f5:f6:d2:f3:d4:03:8f:fb:a1:01:bb:e3:af:b8:1a:aa:a9:61:
         8f:ff:a5:e8:a3:a4:03:f9:4b:4b:dc:5c:3e:14:71:46:f2:67:
         61:fb:cf:ee:ee:9f:5e:d8:5e:41:87:e2:54:44:4c:a9:60:ab:
         4b:d1:70:07:f0:e3:82:a6:9b:52:c0:65:3b:e9:e8:af:2a:f8:
         ca:f0:ba:75:0e:0c:ef:90:f8:47:db:c0:fa:ab:ac:40:6a:5a:
         41:f3:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org