Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/Famh1V59ixHT_ODM6R0Pci-xyNc.roa
File:                     Famh1V59ixHT_ODM6R0Pci-xyNc.roa (raw, json)
Hash identifier:          WWCyhws93wmQ00Jsh5dM84upMi4UJUHuLgaGUQWWwrg=
Subject key identifier:   15:A9:A1:D5:5E:7D:8B:11:D3:FC:E0:CC:E9:1D:0F:72:2F:B1:C8:D7
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       01885358BDEE8BAA3CD1C268E663F84F448A
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/Famh1V59ixHT_ODM6R0Pci-xyNc.roa
Signing time:             Thu 25 May 2023 14:38:24 +0000
ROA not before:           Thu 25 May 2023 14:38:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62095
IP address blocks:        185.48.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:53:58:bd:ee:8b:aa:3c:d1:c2:68:e6:63:f8:4f:44:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: May 25 14:38:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15a9a1d55e7d8b11d3fce0cce91d0f722fb1c8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:b5:da:e5:31:5d:2b:7d:4d:ba:e9:33:40:
                    f2:88:68:16:06:b7:70:03:c3:2b:96:bb:6b:37:d4:
                    d5:27:d5:73:7d:fd:a6:4e:63:16:71:9e:55:8e:01:
                    74:f4:8f:a3:46:77:66:a7:f7:56:03:71:b7:3f:6c:
                    1e:16:09:50:99:fd:c3:e1:9a:db:19:74:05:14:c6:
                    df:de:e5:1a:b9:66:65:40:b6:45:a1:80:ce:7e:f8:
                    31:10:f1:85:f4:a0:a0:aa:2b:1d:6e:f6:b2:63:74:
                    03:1d:e5:55:3a:7f:0b:17:56:8c:ef:11:df:2a:62:
                    3b:50:58:90:9a:29:f8:a7:10:2a:46:24:da:03:33:
                    bf:fc:93:94:35:55:74:b2:6c:2e:c4:71:a3:35:43:
                    5f:0f:36:0f:60:ca:d9:fc:e1:51:6d:f6:0c:91:57:
                    21:34:a5:c5:bc:f4:fb:3b:b8:fd:ba:91:05:83:31:
                    29:b5:22:e5:2c:0a:37:69:16:a5:6b:06:63:30:0d:
                    95:fc:bd:14:f3:02:d0:8d:04:40:15:34:f2:29:1a:
                    2b:c7:e1:aa:0e:c0:09:ee:d2:3f:a6:34:c3:ea:de:
                    11:9b:d8:29:36:a6:13:ba:00:31:31:9f:b4:e0:ab:
                    32:d2:03:95:a4:fd:cf:c7:54:f4:42:a2:0e:37:1f:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:A1:D5:5E:7D:8B:11:D3:FC:E0:CC:E9:1D:0F:72:2F:B1:C8:D7
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/Famh1V59ixHT_ODM6R0Pci-xyNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.48.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:50:27:9e:99:19:3c:6a:82:35:3d:42:56:ef:6c:2e:4c:
         11:65:ff:8d:2e:82:6a:b1:43:1f:c8:5c:25:2d:d6:5b:0c:35:
         66:93:f7:89:6f:6a:55:24:31:94:70:d4:6a:c7:bc:60:d2:bd:
         8c:26:39:4e:2f:8c:dc:1c:2f:b3:db:4b:c1:59:59:84:5f:ab:
         47:ca:89:06:30:70:db:41:76:7d:5b:ad:18:cb:48:02:89:9e:
         4e:ea:1c:80:6b:ac:89:22:ed:04:b2:03:a8:3a:7f:a4:7c:26:
         bf:4d:d5:4d:ee:a5:ab:d5:e4:b2:37:8a:94:3e:1b:2e:84:0f:
         16:5a:aa:4d:05:d1:24:8b:01:26:4d:31:c3:f2:30:ea:57:aa:
         80:21:35:d9:d2:2a:4f:cd:ac:98:e1:37:71:8c:15:f3:f8:4e:
         13:07:d4:53:82:2f:69:c3:38:64:0d:3f:b6:b5:2b:77:a1:e7:
         61:cb:10:73:64:03:e1:d3:b1:1c:67:10:78:32:9b:cb:1d:e7:
         ef:10:fe:05:17:9c:78:a2:58:29:51:35:46:57:a8:f6:39:60:
         00:e1:2d:8c:29:bc:db:f5:06:3a:c5:ca:d0:43:64:c8:a5:ea:
         d1:7e:b7:2a:78:fe:47:50:0e:79:7a:e9:a1:70:a7:62:3b:cc:
         c6:86:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:04 2024 by rpki-client on console-ams.rpki-client.org