Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/faFSzhoX7QxVlIk2wIBiQhbMrsg.roa
File:                     faFSzhoX7QxVlIk2wIBiQhbMrsg.roa (raw, json)
Hash identifier:          59QQxBKnEL6kOyjUofmZlEMaRexvWZoW3+bFSiJoTlw=
Subject key identifier:   7D:A1:52:CE:1A:17:ED:0C:55:94:89:36:C0:80:62:42:16:CC:AE:C8
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       0189632367F560AAAA159992F3E02CEFE3C8
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/faFSzhoX7QxVlIk2wIBiQhbMrsg.roa
Signing time:             Mon 17 Jul 2023 09:16:52 +0000
ROA not before:           Mon 17 Jul 2023 09:16:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211183
IP address blocks:        79.133.183.0/24 maxlen: 24
                          79.133.182.0/24 maxlen: 24
                          79.133.181.0/24 maxlen: 24
                          91.200.84.0/24 maxlen: 24
                          185.240.103.0/24 maxlen: 24
                          185.244.51.0/24 maxlen: 24
                          193.187.96.0/24 maxlen: 24
                          185.250.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Sep 2023 12:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:63:23:67:f5:60:aa:aa:15:99:92:f3:e0:2c:ef:e3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Jul 17 09:16:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7da152ce1a17ed0c55948936c080624216ccaec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:63:87:f8:30:82:0d:4e:0b:66:67:42:ed:
                    b0:ea:a9:ce:95:e8:7a:fc:0d:35:bd:56:df:25:5b:
                    dc:79:65:40:ac:c9:49:93:ed:2c:85:e9:65:58:ed:
                    65:14:de:3d:77:67:97:6b:54:c2:4d:24:30:83:9c:
                    d3:96:5d:c5:a6:d6:fb:8a:ef:db:58:fc:5a:1b:26:
                    0f:e0:2f:2b:6a:52:14:b6:4b:6b:04:5d:2a:f6:72:
                    bc:c8:b3:b1:ad:18:f6:ad:ea:7e:a1:23:07:39:17:
                    15:7f:d3:e3:03:a5:74:2e:d6:2b:79:b4:ed:0c:29:
                    72:55:af:92:69:d4:f4:04:d9:34:80:f8:41:80:f6:
                    df:47:c5:b4:68:83:a2:4c:7a:e3:46:47:0d:87:72:
                    ea:4a:de:8c:d6:2b:58:0d:9c:3e:c1:47:e7:96:30:
                    95:32:a2:d8:a7:44:71:70:01:cf:98:d3:26:d7:99:
                    f5:ee:69:f5:9a:98:f5:5c:b9:e6:7f:f8:32:93:31:
                    6b:f3:a2:36:3d:ad:82:65:28:ca:33:4c:3b:e2:80:
                    6a:d0:fc:f3:54:3c:0f:78:1a:67:90:fd:63:59:9b:
                    c6:99:a4:bd:a5:fe:1d:07:b2:58:5d:d0:ee:1a:05:
                    06:65:ce:ea:24:e6:65:16:8b:18:b3:c9:d8:af:d0:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A1:52:CE:1A:17:ED:0C:55:94:89:36:C0:80:62:42:16:CC:AE:C8
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/faFSzhoX7QxVlIk2wIBiQhbMrsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.181.0-79.133.183.255
                  91.200.84.0/24
                  185.240.103.0/24
                  185.244.51.0/24
                  185.250.44.0/24
                  193.187.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:80:3d:19:18:04:4c:ba:d3:48:7b:7f:13:1c:07:25:de:32:
         05:09:25:84:b4:8b:f5:b9:78:90:09:a0:c1:66:d5:45:c4:e4:
         52:42:6a:d7:12:a1:42:32:40:47:1d:e0:b6:4b:9c:a5:22:9c:
         3d:bb:d1:e1:20:6f:d7:82:45:8a:41:5c:79:14:b5:52:a0:a7:
         3b:23:0d:bc:d7:d7:db:19:ac:be:4d:c7:e6:b4:ae:f2:17:e8:
         43:1d:5a:06:42:fc:89:8a:1a:7d:d0:c9:38:23:03:99:5e:c6:
         62:4b:2f:af:63:a4:10:e1:63:ab:52:cb:2e:37:e4:05:21:62:
         ad:78:b1:dd:dc:9a:75:63:cc:90:5c:2e:96:30:76:59:11:f4:
         78:f0:b7:98:a9:e2:de:db:43:8a:4f:0e:71:b3:1f:e7:e1:67:
         b5:b7:d7:de:7e:9f:be:8f:ea:17:68:3b:23:8b:d9:19:f0:fb:
         88:c2:14:f7:5e:9b:a2:a0:73:f4:c5:5f:13:bc:70:79:3c:67:
         04:23:24:da:1c:28:e8:87:0a:12:be:dd:6f:04:16:69:65:41:
         8e:dd:15:4d:70:dc:96:cd:4c:02:32:c1:91:72:78:3d:75:22:
         5a:43:12:8d:72:b4:21:53:b2:2d:25:0a:99:38:12:5c:d9:7c:
         01:9a:bf:23
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYljI2f1YKqqFZmS8+As7+PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjMwNzE3MDkxNjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGExNTJjZTFhMTdlZDBjNTU5NDg5MzZjMDgwNjI0MjE2Y2NhZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC5jh/gwgg1OC2ZnQu2w6qnOleh6
/A01vVbfJVvceWVArMlJk+0shellWO1lFN49d2eXa1TCTSQwg5zTll3Fptb7iu/b
WPxaGyYP4C8ralIUtktrBF0q9nK8yLOxrRj2rep+oSMHORcVf9PjA6V0LtYrebTt
DClyVa+SadT0BNk0gPhBgPbfR8W0aIOiTHrjRkcNh3LqSt6M1itYDZw+wUfnljCV
MqLYp0RxcAHPmNMm15n17mn1mpj1XLnmf/gykzFr86I2Pa2CZSjKM0w74oBq0Pzz
VDwPeBpnkP1jWZvGmaS9pf4dB7JYXdDuGgUGZc7qJOZlFosYs8nYr9CWiwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFH2hUs4aF+0MVZSJNsCAYkIWzK7IMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvZmFGU3pob1g3UXhWbElrMndJQmlRaGJNcnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBABPhbUD
BANPhbADBABbyFQDBAC58GcDBAC59DMDBAC5+iwDBADBu2AwDQYJKoZIhvcNAQEL
BQADggEBACKAPRkYBEy600h7fxMcByXeMgUJJYS0i/W5eJAJoMFm1UXE5FJCatcS
oUIyQEcd4LZLnKUinD270eEgb9eCRYpBXHkUtVKgpzsjDbzX19sZrL5Nx+a0rvIX
6EMdWgZC/ImKGn3QyTgjA5lexmJLL69jpBDhY6tSyy435AUhYq14sd3cmnVjzJBc
LpYwdlkR9Hjwt5ip4t7bQ4pPDnGzH+fhZ7W3195+n76P6hdoOyOL2Rnw+4jCFPde
m6Kgc/TFXxO8cHk8ZwQjJNocKOiHChK+3W8EFmllQY7dFU1w3JbNTAIywZFyeD11
IlpDEo1ytCFTsi0lCpk4ElzZfAGavyM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org