Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Fua1oo-Oq5C-jR4Jc-hdLGMrEW8.roa
File:                     Fua1oo-Oq5C-jR4Jc-hdLGMrEW8.roa (raw, json)
Hash identifier:          EaQamQsBebEqQDVBqhw08EYB6Efzk64mmdbGZRzQLQw=
Subject key identifier:   16:E6:B5:A2:8F:8E:AB:90:BE:8D:1E:09:73:E8:5D:2C:63:2B:11:6F
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       0186E7BD4A4FA9CDD44E60244B94845FED07
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Fua1oo-Oq5C-jR4Jc-hdLGMrEW8.roa
Signing time:             Thu 16 Mar 2023 00:06:27 +0000
ROA not before:           Thu 16 Mar 2023 00:06:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     11342
IP address blocks:        185.156.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e7:bd:4a:4f:a9:cd:d4:4e:60:24:4b:94:84:5f:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Mar 16 00:06:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16e6b5a28f8eab90be8d1e0973e85d2c632b116f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:b3:1b:f8:b7:d7:13:2e:0a:bc:f7:0a:8e:
                    85:df:61:d3:a2:e7:6f:ce:44:07:d1:b4:aa:18:ca:
                    b8:95:92:01:79:ef:f7:7f:9e:11:f2:92:c3:66:46:
                    62:5c:40:20:07:82:1a:2e:ef:d9:d5:a8:5f:d3:e3:
                    c7:69:62:4d:95:b4:52:67:40:28:7a:56:c8:06:35:
                    86:5f:c3:fc:cc:d6:f2:d0:aa:cc:5b:02:4c:19:6d:
                    67:fd:40:49:67:09:81:92:e6:8d:25:b9:fb:5b:60:
                    0e:65:8a:24:6a:f4:de:0a:95:05:75:fe:22:e7:22:
                    8e:44:d5:0a:74:93:25:1d:e4:c4:1a:b2:34:46:bb:
                    88:bc:ed:a0:75:26:fd:88:f3:fa:ca:a7:69:08:9b:
                    c5:00:52:ba:4c:63:3b:78:7f:98:c2:28:62:bd:b4:
                    0d:ec:9d:0d:8a:4d:55:46:a0:55:ad:ea:e9:25:58:
                    e8:4e:5b:cf:c3:08:dd:59:e0:2f:bb:5c:b5:cd:c9:
                    06:d0:8f:50:c4:f0:7c:d4:ab:cd:68:36:b5:a4:9c:
                    74:49:2c:eb:bc:ab:26:fd:fc:56:2b:d3:75:dc:27:
                    5e:1c:7a:71:df:a9:1c:18:37:86:af:6a:71:6e:2f:
                    09:12:86:dc:30:75:95:6e:2e:57:15:46:3a:91:91:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:B5:A2:8F:8E:AB:90:BE:8D:1E:09:73:E8:5D:2C:63:2B:11:6F
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Fua1oo-Oq5C-jR4Jc-hdLGMrEW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:0d:c9:11:56:02:1c:85:c3:71:32:d6:41:1b:63:84:e9:
         7f:64:ac:40:4d:a1:e2:53:d0:42:88:8f:70:6c:3e:6b:2a:fe:
         6b:7e:ca:42:43:77:a0:ae:5d:a1:91:c5:9a:6b:7c:3e:4e:8e:
         48:20:d2:c3:3b:ad:9a:99:d8:3c:de:8c:78:d1:34:ff:b3:1f:
         66:73:77:ea:58:2f:60:a9:d5:fd:4c:c9:62:3e:02:6d:81:3f:
         38:ce:5b:3d:e6:88:ab:20:91:54:e0:22:84:12:96:58:89:2d:
         18:10:02:52:f5:0f:2d:45:fe:79:b4:8a:1e:2d:5f:8a:95:9a:
         10:0e:0b:68:1e:44:e7:cb:91:22:4e:8b:1d:86:a2:d3:24:cf:
         f1:53:d7:5b:00:eb:09:61:f0:e4:6e:ef:8e:ff:0e:cd:c0:2c:
         5e:98:49:a9:90:cd:fa:9f:00:17:b9:42:1b:2d:60:a5:5d:6d:
         44:18:87:93:05:4b:02:31:b8:cb:41:92:ad:d4:b3:01:c2:d0:
         6d:73:a8:ad:6e:aa:2e:f6:89:94:83:5b:70:89:5a:13:6f:63:
         b0:65:47:e6:47:05:3a:94:78:3d:35:31:ab:13:6f:04:89:b2:
         33:f2:61:16:31:52:e5:d0:a4:e5:af:d0:da:f7:e5:d1:97:15:
         f3:bd:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org