Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/FcoCODn_owcwb1xkDnmxIhOh8oI.roa
File:                     FcoCODn_owcwb1xkDnmxIhOh8oI.roa (raw, json)
Hash identifier:          xL9KOjbHhIqdPiHOgSqqQ4pZhZ35Ue6/NP6bMmF4b6c=
Subject key identifier:   15:CA:02:38:39:FF:A3:07:30:6F:5C:64:0E:79:B1:22:13:A1:F2:82
Certificate issuer:       /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial:       01856FF02B36A57ECE566A21B570652CC801
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/FcoCODn_owcwb1xkDnmxIhOh8oI.roa
Signing time:             Mon 02 Jan 2023 00:44:48 +0000
ROA not before:           Mon 02 Jan 2023 00:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207346
IP address blocks:        185.242.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:2b:36:a5:7e:ce:56:6a:21:b5:70:65:2c:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
        Validity
            Not Before: Jan  2 00:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15ca023839ffa307306f5c640e79b12213a1f282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8d:8e:45:50:3b:8e:0b:66:3c:07:63:42:88:
                    dd:ab:f2:89:70:0a:55:da:3a:35:2f:dd:8e:ab:16:
                    eb:85:99:08:98:52:04:59:64:05:35:c3:b9:ff:01:
                    15:e5:19:5f:e7:d6:ab:2d:d3:29:7b:c6:06:0e:6b:
                    e9:cd:31:ee:9c:a5:a0:19:d7:6a:30:2a:f1:64:e8:
                    66:c0:8b:33:ec:4f:b1:43:b6:87:37:fb:d2:f1:ae:
                    37:34:15:25:d9:f3:e6:30:0c:26:d2:4d:c1:66:52:
                    03:ef:2f:e3:32:1b:5b:13:b0:c2:0b:23:bb:03:9a:
                    0b:85:26:f9:c7:c5:fb:73:ee:f8:1e:74:82:c8:42:
                    a8:ec:34:e4:9f:b5:e8:81:c4:f5:ca:3c:2c:34:ee:
                    5d:6c:d8:18:38:06:a8:86:a3:f8:70:d8:67:6d:39:
                    ed:0a:ae:6f:20:93:7e:76:d0:7f:5d:1e:5c:55:fe:
                    8f:e3:d1:ce:aa:12:6e:d8:34:b4:10:3e:2b:03:7c:
                    76:3c:ee:c9:2b:cd:69:80:d0:a0:6c:6f:fc:44:c6:
                    e4:d9:eb:9e:90:ee:2f:40:85:b6:69:23:fa:a2:a4:
                    8a:52:94:25:1d:0b:06:e5:11:1e:ee:79:18:33:e7:
                    22:79:a0:34:a9:6d:ca:f6:2a:e9:5b:b4:70:1d:d5:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:02:38:39:FF:A3:07:30:6F:5C:64:0E:79:B1:22:13:A1:F2:82
            X509v3 Authority Key Identifier:
                keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/FcoCODn_owcwb1xkDnmxIhOh8oI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:60:7f:22:28:cf:4c:1c:b5:ec:2f:8c:49:f9:3a:28:a6:e5:
         cf:37:f9:29:bf:35:bc:b9:6c:27:d9:9e:d1:60:67:97:c5:9d:
         49:2a:39:d7:50:26:46:f8:84:4f:d3:2d:e0:1f:6d:01:f4:4f:
         54:d1:f4:1b:d0:81:43:d4:03:22:19:1d:52:07:9b:3e:32:03:
         eb:ee:e6:e5:16:d4:7e:48:62:48:41:f8:cc:16:b4:58:3f:15:
         f7:68:01:42:4e:fa:81:70:92:90:dc:66:ab:69:d5:8a:cc:4b:
         d3:a1:72:27:76:b4:60:30:8e:db:21:15:de:f3:9e:04:34:c9:
         e6:77:75:f3:6c:79:9b:fa:e1:29:be:de:7b:92:09:cd:6d:f4:
         b9:88:7f:79:95:ad:32:6d:45:43:cb:19:43:d6:ef:98:d6:da:
         53:6b:f6:ef:69:65:58:86:36:ea:86:39:e8:cb:c3:b3:4e:ed:
         64:f7:e7:66:98:ac:59:20:66:88:3f:56:a1:56:bb:49:99:8e:
         80:77:c1:13:40:d5:b5:a2:f5:d9:43:5a:cd:50:7a:d4:de:5a:
         e9:c5:13:3f:77:fc:a1:21:86:b6:06:c2:22:bd:5d:08:1e:da:
         3a:68:a3:28:d2:8b:e6:16:10:f4:29:79:1f:e0:ba:d2:51:50:
         ac:f7:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:53 2024 by rpki-client on console-fra.rpki-client.org