Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fCzg_EqI8V1Pu-eTR7xyDPBAcAs.roa
File:                     fCzg_EqI8V1Pu-eTR7xyDPBAcAs.roa (raw, json)
Hash identifier:          NomgvuckIC4pU8a1VPWOjj5y1NaAx2F3kzYFsX4erEU=
Subject key identifier:   7C:2C:E0:FC:4A:88:F1:5D:4F:BB:E7:93:47:BC:72:0C:F0:40:70:0B
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       0189B675755C6BE01959A3575D3301121C02
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fCzg_EqI8V1Pu-eTR7xyDPBAcAs.roa
Signing time:             Wed 02 Aug 2023 13:34:58 +0000
ROA not before:           Wed 02 Aug 2023 13:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        45.66.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Oct 2023 09:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b6:75:75:5c:6b:e0:19:59:a3:57:5d:33:01:12:1c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Aug  2 13:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c2ce0fc4a88f15d4fbbe79347bc720cf040700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:37:af:8a:03:3f:cc:d2:12:00:a3:ae:ba:
                    47:4b:dc:11:30:fb:01:ac:74:76:a8:34:d4:31:5f:
                    50:f5:47:42:e1:6f:6e:d1:38:a4:22:73:5c:95:8b:
                    25:31:f8:16:75:ec:1c:73:6a:d5:fe:29:dd:08:05:
                    25:47:98:f7:2a:22:d5:8b:6b:5b:57:25:89:9e:b8:
                    2d:a5:cd:c3:a4:60:ee:39:23:8a:17:a6:c4:e7:af:
                    fb:3e:84:e4:33:00:17:ca:89:cf:43:fa:24:27:14:
                    a0:c5:d5:92:f0:a9:f6:f7:6b:48:f3:6d:f0:45:f5:
                    17:00:21:ba:c4:ab:ba:82:9f:29:8a:cf:29:61:39:
                    ee:fd:9a:c6:20:0b:30:96:94:60:b5:c3:68:a8:dc:
                    f1:d9:18:b1:5b:15:04:c8:f1:d2:35:3e:dc:69:78:
                    4b:b6:86:39:0c:f0:42:a6:d6:7f:8d:bb:36:df:9f:
                    08:af:13:d1:74:78:6d:27:d6:fd:62:dc:63:20:f7:
                    cc:1e:8b:c1:b0:b3:9c:84:86:ca:5c:6b:26:93:05:
                    7c:9e:39:c3:48:78:a1:1f:7e:44:f8:69:69:b5:8f:
                    f0:d4:30:94:f1:4c:bb:c4:4a:09:38:45:33:93:66:
                    95:99:99:53:3b:98:00:f5:f8:f4:4d:e4:2a:5f:97:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:E0:FC:4A:88:F1:5D:4F:BB:E7:93:47:BC:72:0C:F0:40:70:0B
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fCzg_EqI8V1Pu-eTR7xyDPBAcAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:52:fe:01:cc:42:ec:1f:a8:b2:19:8a:52:a2:73:98:e0:
         5f:f5:c5:99:e7:ce:6e:7d:21:3f:6a:81:1d:f7:c7:0b:75:2d:
         5a:95:2d:d9:9d:af:ec:6c:1d:02:23:4e:ec:5d:d8:94:ac:fd:
         d6:66:70:80:fb:c2:39:b9:77:af:c8:10:59:b5:bb:0f:02:b1:
         35:26:93:2a:cb:bb:cc:29:61:a8:b8:ed:08:00:27:a9:ac:00:
         e8:2f:b7:46:80:f1:d7:a7:38:8e:80:3b:21:31:96:2c:a5:15:
         1b:1c:50:b7:16:5c:21:47:97:ea:28:8d:73:51:b3:02:d5:5c:
         92:b9:d5:ba:ce:52:ad:a5:e5:48:51:63:7e:72:b9:71:fa:37:
         87:92:d6:2b:ca:03:13:89:3d:07:b0:c7:97:43:73:44:e8:c1:
         74:a8:91:24:9b:57:e0:a2:fa:68:cf:58:ae:f6:f9:2a:f2:84:
         c7:09:2f:1f:04:12:32:9d:17:e6:0e:16:d5:2b:8a:20:e6:23:
         2a:f3:45:b4:3f:fc:60:c0:ae:38:4d:59:3a:46:3a:84:3b:97:
         50:5f:a0:83:79:0f:42:dc:02:d5:73:e9:1a:dd:48:f4:1e:e8:
         1c:30:fd:79:46:80:9c:4c:f6:31:c0:d9:fd:73:90:24:5b:07:
         64:41:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org