Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/FTSUeYtUMdkDiTfA29oIjluo5BI.roa
File:                     FTSUeYtUMdkDiTfA29oIjluo5BI.roa (raw, json)
Hash identifier:          lHclqojbvALLRm/fgosogqwbDC2imcwEKOBHUx+Py3U=
Subject key identifier:   15:34:94:79:8B:54:31:D9:03:89:37:C0:DB:DA:08:8E:5B:A8:E4:12
Certificate issuer:       /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial:       0190DE779C69A145123C71B82BDFF6C0B847
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/FTSUeYtUMdkDiTfA29oIjluo5BI.roa
Signing time:             Tue 23 Jul 2024 07:21:39 +0000
ROA not before:           Tue 23 Jul 2024 07:21:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.171.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 02:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:de:77:9c:69:a1:45:12:3c:71:b8:2b:df:f6:c0:b8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
        Validity
            Not Before: Jul 23 07:21:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=153494798b5431d9038937c0dbda088e5ba8e412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:93:f3:06:a5:2a:7b:c4:66:b3:ef:dc:14:4b:
                    14:74:f1:82:db:83:df:cf:ec:85:20:23:1e:4b:10:
                    d3:b6:06:47:d8:20:29:70:af:f2:fb:b5:86:62:e4:
                    11:93:0e:4e:62:44:41:2a:09:2f:13:a1:de:7b:8a:
                    ed:f7:87:82:06:36:05:58:32:30:e8:8d:c0:32:12:
                    0d:59:b8:07:35:79:bc:e7:92:aa:20:2e:de:61:bf:
                    06:6d:48:fd:66:f2:b9:e3:45:de:9f:b4:00:29:7a:
                    0f:ba:f8:84:d5:d5:ad:f9:24:a5:0f:85:ed:bb:00:
                    de:1b:53:0e:5b:32:3e:3f:96:c2:c6:a7:bd:a3:38:
                    56:e9:d9:74:61:64:3d:3d:98:63:70:3b:ef:ac:4e:
                    4c:6b:78:fe:02:e3:7c:1c:23:91:b3:a3:f5:31:36:
                    e0:2c:09:01:bf:32:58:ac:7d:12:7b:6d:b6:c3:c4:
                    84:3d:86:87:ef:b8:74:da:e5:4e:d6:fd:6a:39:a1:
                    ea:96:48:a6:02:70:9b:b3:0e:e3:b6:91:dd:3f:3a:
                    61:f9:f8:ef:8c:96:3e:cf:69:a8:50:72:2c:e8:76:
                    8f:74:05:c1:e0:e2:67:b2:75:1a:03:57:45:da:1f:
                    9c:95:76:48:02:5a:b0:f4:fb:49:cf:8b:cb:f5:7e:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:94:79:8B:54:31:D9:03:89:37:C0:DB:DA:08:8E:5B:A8:E4:12
            X509v3 Authority Key Identifier:
                keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/FTSUeYtUMdkDiTfA29oIjluo5BI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:15:6c:81:61:ae:f3:d7:0f:2b:4e:76:22:95:8f:65:44:05:
         5a:c2:8c:6c:61:94:92:78:db:a5:69:3f:f6:fc:b3:6c:a9:70:
         62:7f:5f:68:bb:70:04:7c:41:33:27:18:6a:97:2e:d1:7b:67:
         2e:21:75:65:a9:01:31:ee:9a:2c:3b:36:3c:8e:5e:7e:a3:94:
         47:03:70:f2:46:9f:57:99:a8:f1:38:ab:53:fd:25:20:bf:8b:
         b4:b0:51:b8:a6:6b:4e:ce:47:b3:1c:4a:dc:84:f4:d1:d0:a5:
         a5:ce:48:10:f0:66:06:3d:ec:8a:01:6e:41:59:f7:d6:b7:16:
         7e:6c:f6:e6:f6:46:40:91:98:18:b9:7a:2d:b9:29:05:dd:63:
         f6:6d:7d:04:b0:5f:1a:39:ca:31:af:79:0b:13:37:45:e1:e0:
         83:d8:e7:a3:85:2f:39:89:06:10:f4:d8:aa:c1:a1:e9:00:a9:
         0c:d4:a7:f2:6b:b8:f4:9d:bc:29:3b:69:94:43:20:ff:ab:09:
         a7:5a:15:3a:63:3f:66:47:58:b6:bd:ab:d5:3b:df:8f:7d:b2:
         be:84:bd:09:51:be:4b:a4:6d:a5:5e:fd:ab:eb:64:60:d7:7c:
         a8:d4:14:c4:00:1a:69:38:48:35:46:a6:62:b8:b4:25:40:38:
         c5:ab:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 04:56:29 2024 by rpki-client on console-ams.rpki-client.org