Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/FGNcAxnwDHU_J-XlpOvPZdEaiAk.roa
File:                     FGNcAxnwDHU_J-XlpOvPZdEaiAk.roa (raw, json)
Hash identifier:          qU6eSQQCsQmpr09O/FLTEq5/vXB5qr9oxaBr3ZtdwGw=
Subject key identifier:   14:63:5C:03:19:F0:0C:75:3F:27:E5:E5:A4:EB:CF:65:D1:1A:88:09
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0186EF4CB6E05D095F75A5D13668E8DD9AFC
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/FGNcAxnwDHU_J-XlpOvPZdEaiAk.roa
Signing time:             Fri 17 Mar 2023 11:20:27 +0000
ROA not before:           Fri 17 Mar 2023 11:20:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        85.117.240.0/24 maxlen: 24
                          2a09:ff00:8800::/37 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ef:4c:b6:e0:5d:09:5f:75:a5:d1:36:68:e8:dd:9a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Mar 17 11:20:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14635c0319f00c753f27e5e5a4ebcf65d11a8809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:9b:84:fe:98:30:d1:e1:47:3a:4b:9f:8c:
                    1a:7b:8e:5a:09:f0:b6:20:7f:1b:4a:22:19:9e:ee:
                    84:bd:5b:2b:34:7c:43:a9:83:fd:79:27:2c:cd:24:
                    f3:5d:af:61:22:ed:71:6d:95:9f:81:0d:c3:ee:83:
                    af:e6:2e:c7:a3:9e:2b:3f:d4:e1:79:89:b1:80:3d:
                    85:aa:a8:98:c5:44:25:7c:14:e4:67:54:53:66:d2:
                    07:f4:16:26:6c:46:93:0d:20:a3:94:f4:84:7a:48:
                    2f:46:f0:9a:26:b9:7c:96:df:59:35:c6:a1:11:49:
                    4b:08:2f:f7:db:29:91:d1:56:fe:67:9e:a4:d4:e6:
                    39:2a:c9:e1:62:67:56:17:00:87:2a:ea:b4:16:bf:
                    77:9a:2f:a6:9e:53:f0:69:80:51:9a:e2:f6:be:6d:
                    36:81:b1:50:12:16:55:b9:f5:27:bc:ba:d5:5e:20:
                    71:3e:31:c1:67:78:ef:d7:65:80:66:0d:ed:68:56:
                    4b:a6:68:2b:6d:29:5f:e7:31:0b:e0:19:2b:1e:fc:
                    1d:eb:9b:85:bd:6a:db:db:07:82:19:a7:48:a5:1d:
                    e3:c8:44:74:de:c0:3e:26:48:2a:63:e3:25:40:05:
                    86:8c:f3:dc:ea:56:9b:fa:2a:ee:1d:80:17:62:9c:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:63:5C:03:19:F0:0C:75:3F:27:E5:E5:A4:EB:CF:65:D1:1A:88:09
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/FGNcAxnwDHU_J-XlpOvPZdEaiAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.117.240.0/24
                IPv6:
                  2a09:ff00:8800::/37

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:fc:0f:c2:06:33:a6:22:80:0d:8a:8a:dc:f5:8a:93:89:
         0c:e6:e6:d0:45:20:96:6f:ae:4e:83:f1:c8:a0:4d:89:31:af:
         f6:79:89:c9:f5:d4:c1:cd:64:4f:46:2c:80:5d:41:67:2b:5f:
         c6:d7:86:96:3d:01:68:8f:f0:ba:83:58:29:e4:16:2d:50:4e:
         eb:36:40:c8:40:86:f8:5b:38:3f:ec:35:29:72:91:43:96:c1:
         54:5f:d9:03:68:a6:75:99:36:72:6f:2e:32:b2:14:b9:07:1a:
         2a:aa:65:b2:d0:d5:f4:ff:1f:de:15:26:4d:c2:84:5c:c1:f3:
         a9:8f:4a:59:8c:17:de:1e:18:c5:e6:84:d2:ce:c4:5f:e4:3e:
         e5:df:ce:90:04:59:78:a2:68:01:31:6c:fb:00:83:72:63:e4:
         2d:35:ec:01:e3:eb:57:5c:48:ee:d4:37:ba:ab:50:aa:bc:b6:
         3b:9f:5e:23:9e:dd:b5:b9:4f:81:ae:ca:09:c1:c2:1d:10:0b:
         94:b6:18:c8:25:8d:5d:63:86:b3:c2:26:71:92:f1:11:55:f8:
         ae:5b:46:50:10:42:27:3b:91:ff:bf:39:3d:ea:4c:db:03:e3:
         45:bc:d6:3c:fd:20:27:3b:5b:0e:45:6e:66:9e:2c:19:c0:38:
         62:1b:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:23 2024 by rpki-client on console-fra.rpki-client.org