Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/FHMzwsiUMWITGvox935q8JhGas0.roa
File:                     FHMzwsiUMWITGvox935q8JhGas0.roa (raw, json)
Hash identifier:          MI0KVozdkI7++eNLkx24XYJrK0j5ktDBBDsVcSh7hwY=
Subject key identifier:   14:73:33:C2:C8:94:31:62:13:1A:FA:31:F7:7E:6A:F0:98:46:6A:CD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       01863691C5EE4C1794DA8A37457F72C30841
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/FHMzwsiUMWITGvox935q8JhGas0.roa
Signing time:             Thu 09 Feb 2023 14:26:08 +0000
ROA not before:           Thu 09 Feb 2023 14:26:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199982
IP address blocks:        195.5.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:91:c5:ee:4c:17:94:da:8a:37:45:7f:72:c3:08:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Feb  9 14:26:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=147333c2c8943162131afa31f77e6af098466acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:bf:a0:04:d2:74:cb:00:21:60:6e:3f:d2:
                    06:f5:d9:58:f0:49:59:33:a5:49:73:c9:fa:9a:8a:
                    cc:14:3e:f3:28:8d:28:4f:2a:27:c8:04:a3:24:17:
                    68:7e:bc:5e:1b:5e:35:06:6d:81:89:2a:55:a6:71:
                    9f:8e:d4:57:4c:6c:dd:56:5f:cb:81:11:db:88:3d:
                    7a:3a:1f:77:f9:0d:4f:e0:61:2d:4a:47:4d:0a:ff:
                    3c:14:66:02:e6:0c:34:fd:16:ca:e0:72:49:3d:75:
                    86:79:be:77:a8:70:33:b7:19:25:50:40:b9:58:0e:
                    49:ac:e9:da:5e:d8:61:f2:7b:36:05:a5:a0:be:b6:
                    f1:53:e4:80:39:71:28:6b:c9:6a:eb:90:6b:86:f2:
                    55:2d:55:7b:85:07:d3:32:16:99:1a:02:0c:f4:40:
                    c9:f8:a1:fe:fe:73:5a:a5:b3:1b:fe:7c:73:3f:93:
                    2a:98:30:98:42:39:a7:f1:50:58:cf:9d:9b:d5:ff:
                    3f:d5:0a:6d:c0:5c:98:41:81:a0:47:55:94:36:df:
                    ed:d9:d5:0a:2d:0d:e2:b6:88:20:50:63:29:13:ae:
                    25:c3:a8:c1:72:7e:2c:fc:0c:fe:e7:dd:48:85:ea:
                    fc:8d:16:8f:54:71:75:d4:ee:7a:34:96:0f:77:33:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:33:C2:C8:94:31:62:13:1A:FA:31:F7:7E:6A:F0:98:46:6A:CD
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/FHMzwsiUMWITGvox935q8JhGas0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:df:86:1e:a0:c6:0b:57:75:b3:6a:20:51:61:db:f8:12:89:
         fb:a1:b1:75:63:7b:fa:81:28:53:ce:c2:09:ed:c8:a5:34:ef:
         6b:1a:0a:e7:19:63:f0:63:a9:80:8a:a0:d6:79:8a:4d:77:f3:
         6a:90:23:02:f8:f0:55:21:54:06:b5:23:d8:4d:f2:a8:26:8d:
         ca:28:ee:da:f8:e0:97:e9:b9:ad:e0:5c:0e:52:7a:94:f0:04:
         5a:b7:a8:45:dd:57:80:44:57:35:c2:4c:cb:14:b2:67:94:d4:
         33:95:ae:66:9c:15:6d:0b:1e:8d:71:85:e0:e0:02:31:dc:ce:
         ee:4b:0f:50:59:7b:4c:c9:45:96:b5:12:cf:89:6b:4b:c9:27:
         42:11:b4:ad:20:c0:72:8f:3c:bf:98:ea:e5:a4:46:8d:e3:e9:
         44:0b:22:0a:7b:8f:4a:e3:2a:c1:7d:ea:8d:2a:c0:fd:3c:ba:
         a3:55:96:70:60:46:36:ae:40:bf:9c:5f:db:fe:ba:4c:45:ac:
         56:7b:07:69:5c:98:47:e1:1b:8b:22:05:fe:a8:24:e0:a3:e3:
         d9:78:fd:78:57:e3:ea:0f:64:57:9d:ed:9d:29:74:14:74:ee:
         5e:af:3c:16:a2:fa:77:c4:11:fd:11:77:81:34:d7:8b:cc:46:
         b7:8d:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org