Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa
File:                     FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa (raw, json)
Hash identifier:          CCYziCqB9Ew1QlW16/RU/nfFv24LradcgNHR3NHFVwo=
Subject key identifier:   15:E5:63:4C:9F:F8:4A:99:1E:71:DB:DE:57:44:19:F8:64:D0:47:DC
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       01856D6633BD53C0A5C8DED1F9A93B3AA700
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa
Signing time:             Sun 01 Jan 2023 12:54:52 +0000
ROA not before:           Sun 01 Jan 2023 12:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200762
IP address blocks:        178.57.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:33:bd:53:c0:a5:c8:de:d1:f9:a9:3b:3a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Jan  1 12:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15e5634c9ff84a991e71dbde574419f864d047dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:dc:17:3b:c9:e5:62:19:5c:72:72:fb:1d:
                    16:7b:08:21:86:b5:dd:fc:e4:e6:14:27:1b:e4:4e:
                    0e:61:e9:da:ea:4c:0f:a4:72:64:94:01:fc:ef:87:
                    f3:91:ce:db:d9:a6:4d:25:45:61:ee:9c:a2:0e:be:
                    0f:ba:e8:66:ad:79:df:d3:62:e6:ff:2b:15:0b:d2:
                    b9:82:ea:cd:6d:c3:da:f8:56:e5:2b:45:b7:7a:f5:
                    7f:72:07:20:6c:69:fb:d2:9f:f9:67:2a:89:44:3a:
                    15:d6:03:3e:4b:b3:67:9e:70:20:33:ff:68:54:e5:
                    db:c2:f3:31:04:ad:4e:58:86:bb:e6:74:9c:53:97:
                    77:14:9c:b5:05:0a:9d:91:3e:1b:1f:40:48:22:05:
                    5e:98:d9:b0:b6:ba:94:20:6f:f4:e6:87:b3:bb:e4:
                    3b:db:5f:c0:22:77:8a:4d:e3:9e:b6:37:08:ec:7b:
                    e7:d3:a2:1e:22:3d:5c:e3:6b:06:49:8f:4a:85:6c:
                    56:e7:9a:f6:c1:34:31:ca:a2:07:08:89:ad:01:0e:
                    9e:df:f8:c9:cd:14:e5:ae:c9:ef:d3:18:97:df:f2:
                    13:26:f9:23:e5:c0:81:56:98:c3:f6:fa:89:d3:c1:
                    43:55:57:d6:dd:4f:ed:fb:9e:ba:3b:4a:92:44:81:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:63:4C:9F:F8:4A:99:1E:71:DB:DE:57:44:19:F8:64:D0:47:DC
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.57.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:f1:99:0c:bd:79:33:5d:7c:92:f0:19:c3:85:15:64:3b:
         cf:10:f8:f0:e2:7f:63:84:ad:ed:98:e3:65:7d:17:38:ed:63:
         64:de:5c:2a:83:68:0a:35:dc:6f:d2:8a:b8:a9:66:90:e9:a8:
         b7:48:53:b5:95:2c:78:53:ab:78:88:4a:45:37:d4:c1:33:a4:
         20:9f:32:ea:97:e7:32:ca:03:4c:fb:9d:07:4e:04:f6:16:5a:
         4e:ab:b5:18:0e:9f:32:f9:9b:a3:bf:b8:06:90:da:03:c6:50:
         28:7d:6c:d4:3f:4b:24:8d:60:b8:5d:58:aa:62:ce:31:30:c4:
         5f:92:f2:8f:76:46:6f:5f:a7:bb:5f:87:02:08:4b:dd:bd:7a:
         70:57:71:2b:de:ef:e6:4f:10:a3:a7:3a:7f:cb:f2:c2:97:72:
         4d:7d:7e:1e:a0:4d:ac:48:57:04:f7:42:02:3b:7c:27:b4:42:
         d4:4d:f3:ff:de:06:5f:e4:af:d9:11:0c:4a:43:5d:31:89:78:
         65:a8:9e:45:85:41:11:e2:91:9f:cb:cb:89:f7:92:e8:36:90:
         05:1c:98:be:46:eb:ca:76:f8:f0:6b:7a:43:32:5b:be:cc:0a:
         82:31:70:33:15:d1:37:23:59:56:b5:3a:18:bb:93:4d:69:c8:
         da:7e:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:26 2024 by rpki-client on console-fra.rpki-client.org