Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/FGCvi1ZVdovJQO1IxhFBN7XNK5M.roa
File:                     FGCvi1ZVdovJQO1IxhFBN7XNK5M.roa (raw, json)
Hash identifier:          TvOZAUou3wsZ99q+Y8uLNJ1tSH2nsbkZ1S48DsRnMf0=
Subject key identifier:   14:60:AF:8B:56:55:76:8B:C9:40:ED:48:C6:11:41:37:B5:CD:2B:93
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       018CCA2BC43521362579C8E4254D22A3F273
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/FGCvi1ZVdovJQO1IxhFBN7XNK5M.roa
Signing time:             Tue 02 Jan 2024 12:35:15 +0000
ROA not before:           Tue 02 Jan 2024 12:35:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49223
IP address blocks:        185.145.233.0/24 maxlen: 24
                          146.19.159.0/24 maxlen: 24
                          193.228.127.0/24 maxlen: 24
                          5.44.250.0/24 maxlen: 24
                          212.6.63.0/24 maxlen: 24
                          193.56.147.0/24 maxlen: 24
                          194.56.149.0/24 maxlen: 24
                          212.18.97.0/24 maxlen: 24
                          185.249.54.0/24 maxlen: 24
                          193.163.6.0/24 maxlen: 24
                          185.99.23.0/24 maxlen: 24
                          185.218.186.0/24 maxlen: 24
                          109.107.143.0/24 maxlen: 24
                          109.205.59.0/24 maxlen: 24
                          62.106.82.0/24 maxlen: 24
                          213.109.195.0/24 maxlen: 24
                          194.126.176.0/24 maxlen: 24
                          195.234.29.0/24 maxlen: 24
                          176.126.108.0/24 maxlen: 24
                          178.23.191.0/24 maxlen: 24
                          185.252.209.0/24 maxlen: 24
                          91.242.246.0/24 maxlen: 24
                          185.197.151.0/24 maxlen: 24
                          195.69.149.0/24 maxlen: 24
                          91.224.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 18:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:c4:35:21:36:25:79:c8:e4:25:4d:22:a3:f2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jan  2 12:35:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1460af8b5655768bc940ed48c6114137b5cd2b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:59:05:1c:54:b5:f2:a7:ef:e6:ca:a9:ea:
                    33:bd:2d:03:19:03:06:e7:4b:99:07:1c:cb:4f:ba:
                    5a:c9:44:a1:2c:47:56:91:2b:6e:73:39:ff:43:25:
                    42:5f:ed:c6:fa:cf:b0:9c:fe:0c:fa:f5:0e:57:96:
                    02:4c:61:f1:fa:7f:33:4c:12:61:1d:5e:da:ee:2b:
                    36:05:f5:1b:a6:fd:38:7c:09:bb:f3:e7:8f:76:96:
                    60:37:e2:a8:67:09:a0:b7:36:50:8b:fa:8e:4c:73:
                    f3:6a:8b:04:81:5f:ca:e4:50:f4:a7:83:aa:a2:df:
                    f4:a0:cd:a3:85:9e:ab:16:6c:85:d5:9e:8d:20:9d:
                    1b:ff:34:06:75:86:ac:24:72:b3:77:cf:b7:1b:78:
                    aa:90:c4:f3:a5:c9:f4:5e:b5:5d:5c:8c:03:0c:52:
                    c7:ee:11:0e:7d:a7:22:e8:a0:5d:af:a4:02:8b:1e:
                    5a:21:42:b7:05:1c:81:9c:cb:0e:78:77:ef:4d:b0:
                    5f:52:ba:73:0d:8d:ba:0c:28:ac:c8:87:8d:86:e5:
                    b4:8e:a1:53:84:1a:57:76:4e:d9:38:a9:b1:2d:41:
                    f1:9e:40:01:47:11:8a:85:33:8c:a7:be:8a:4e:f8:
                    39:f3:40:98:3e:48:00:f0:45:c5:27:a1:f2:aa:fb:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:60:AF:8B:56:55:76:8B:C9:40:ED:48:C6:11:41:37:B5:CD:2B:93
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/FGCvi1ZVdovJQO1IxhFBN7XNK5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.250.0/24
                  62.106.82.0/24
                  91.224.141.0/24
                  91.242.246.0/24
                  109.107.143.0/24
                  109.205.59.0/24
                  146.19.159.0/24
                  176.126.108.0/24
                  178.23.191.0/24
                  185.99.23.0/24
                  185.145.233.0/24
                  185.197.151.0/24
                  185.218.186.0/24
                  185.249.54.0/24
                  185.252.209.0/24
                  193.56.147.0/24
                  193.163.6.0/24
                  193.228.127.0/24
                  194.56.149.0/24
                  194.126.176.0/24
                  195.69.149.0/24
                  195.234.29.0/24
                  212.6.63.0/24
                  212.18.97.0/24
                  213.109.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:ce:15:dd:aa:51:47:d3:d7:7f:ed:6a:60:27:00:22:ac:93:
         77:49:4e:65:40:04:f7:38:57:fa:31:d6:94:23:5d:fa:62:46:
         3a:c4:ba:71:ea:3c:51:5f:af:5f:42:2f:1b:74:41:22:8c:46:
         91:36:b7:c0:8e:97:c5:5f:cc:66:2a:be:ab:f4:2f:8f:1f:a4:
         57:14:a5:0d:23:89:6a:51:e3:de:70:20:f6:35:76:68:eb:59:
         9e:90:d9:47:ec:5e:32:08:f0:65:22:5f:6d:9c:11:5b:d1:95:
         bc:b4:cf:a8:b5:db:ce:35:e1:9d:7e:89:f7:0a:0d:29:64:c2:
         74:2b:e6:7e:6b:e3:28:aa:9e:8a:0b:57:24:e7:33:26:14:db:
         7a:a5:be:f5:23:ba:a7:bc:8d:e2:e3:10:39:9f:fc:e7:d0:76:
         8c:46:0e:3d:24:9a:68:14:4e:2f:a0:24:a0:0e:af:6d:c2:5b:
         fc:02:5c:4f:d9:45:22:c9:a1:18:75:91:b5:13:35:8d:f8:27:
         d8:fb:e3:05:41:41:5e:40:8e:92:b6:c4:19:59:57:27:21:6e:
         5b:16:6e:fe:d8:a3:a6:d7:55:6a:32:9f:c2:22:c4:f3:14:c5:
         33:3d:9d:78:4c:5f:d3:b2:b6:3f:ff:21:29:70:71:11:2d:91:
         8d:e3:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:49 2024 by rpki-client on console-fra.rpki-client.org