Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/F8AoL_J3i4IZH_LX7yZAFiSE640.roa
File:                     F8AoL_J3i4IZH_LX7yZAFiSE640.roa (raw, json)
Hash identifier:          HwTcZiPHkJJxGfvOGwwZzyO59OKgvjb9P2lxo4miWiA=
Subject key identifier:   17:C0:28:2F:F2:77:8B:82:19:1F:F2:D7:EF:26:40:16:24:84:EB:8D
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       0186120B82F2F013DF20173E8B93297E4311
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/F8AoL_J3i4IZH_LX7yZAFiSE640.roa
Signing time:             Thu 02 Feb 2023 12:13:09 +0000
ROA not before:           Thu 02 Feb 2023 12:13:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        92.53.172.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 02 Apr 2023 06:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:12:0b:82:f2:f0:13:df:20:17:3e:8b:93:29:7e:43:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Feb  2 12:13:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17c0282ff2778b82191ff2d7ef2640162484eb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:37:8f:5d:ac:e2:62:3a:a5:42:4a:72:0e:
                    39:a0:07:52:cf:75:f2:23:9c:87:c7:7a:85:3a:87:
                    fe:e9:3f:8d:89:8c:b8:7e:ca:17:2c:16:1a:47:0d:
                    b2:9f:58:67:ae:e6:80:06:22:4e:a6:0a:c2:b7:68:
                    ea:da:48:e6:59:4e:e4:82:b4:05:39:d8:2f:c7:83:
                    3f:3c:d8:d8:cd:1d:10:c3:97:2b:e7:e0:a3:82:d6:
                    c7:29:86:66:1b:14:cf:29:6a:5d:c7:47:a4:ff:d1:
                    7f:40:f2:29:89:2b:c1:d2:b5:74:be:99:8b:ae:28:
                    a1:c5:e6:5b:16:79:66:5a:53:7b:e7:0f:7a:00:f7:
                    50:94:b5:ae:cb:41:08:52:cc:ed:13:35:31:b6:62:
                    2f:ec:ee:00:0a:a3:37:51:a2:be:86:dd:b5:63:f0:
                    29:79:08:10:bf:15:41:fc:78:6e:17:35:22:7f:0f:
                    a9:65:71:d1:09:f0:e2:d0:10:2d:1a:cb:26:5e:22:
                    b2:bd:80:ca:d8:45:dd:a8:3e:71:b3:69:45:e5:5b:
                    64:6f:57:0b:bc:13:5f:22:1f:8d:f3:50:c7:eb:4c:
                    b9:97:46:14:75:5b:79:e1:f0:f2:e5:c8:d8:39:ae:
                    c0:e9:ac:4b:42:8b:39:29:7f:a5:e5:3c:d0:05:a0:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:28:2F:F2:77:8B:82:19:1F:F2:D7:EF:26:40:16:24:84:EB:8D
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/F8AoL_J3i4IZH_LX7yZAFiSE640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:85:76:b0:96:13:f6:be:de:70:40:67:dd:2f:38:1c:a3:
         0d:f5:12:69:27:0f:21:a3:9c:72:9b:5d:18:f1:55:1c:e7:51:
         89:88:da:a7:4e:46:dc:c0:eb:b3:60:7e:b2:89:0a:ac:22:25:
         1d:04:63:0a:1d:00:1a:2a:b0:fe:7b:2b:9f:d7:07:dc:6f:48:
         dd:ba:47:c8:77:8c:c6:8f:79:4a:e7:e9:6f:aa:43:84:71:34:
         f1:fb:13:44:ff:c2:fc:08:5b:eb:aa:5c:86:8a:51:08:3b:0d:
         62:88:28:ec:75:a5:30:71:56:fd:f9:bb:a4:43:0f:fa:92:70:
         c7:81:b0:0c:db:e5:01:4c:c7:07:cd:81:24:69:dd:e2:55:b3:
         e1:51:f5:24:93:da:7f:37:66:8e:ca:9c:87:65:b6:68:f4:9d:
         ba:07:76:be:9c:ec:5e:bc:d5:40:d5:4f:63:7e:10:49:f8:a6:
         cb:c0:1d:de:bc:b0:1e:1f:c6:9e:fd:9b:be:b8:d9:ef:3e:57:
         a0:4e:97:ec:39:28:c5:88:ce:86:7a:5a:33:01:b3:26:d8:e0:
         0e:e2:f0:fb:95:eb:10:21:5d:61:7f:4a:2c:81:27:e2:ee:51:
         d3:da:75:30:78:4e:1f:fc:37:b1:bd:57:d8:9a:cc:34:cc:3a:
         d5:08:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org