Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/FcOBV0GR429UTeJaBNySLVT24DY.roa
File:                     FcOBV0GR429UTeJaBNySLVT24DY.roa (raw, json)
Hash identifier:          iTvFyfXGMMTcFxMM43pwf6OruWxiTAzQhbuFX7Rr5vw=
Subject key identifier:   15:C3:81:57:41:91:E3:6F:54:4D:E2:5A:04:DC:92:2D:54:F6:E0:36
Certificate issuer:       /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial:       018570F07366A36B32919CE7FF9196FF50C5
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/FcOBV0GR429UTeJaBNySLVT24DY.roa
Signing time:             Mon 02 Jan 2023 05:24:44 +0000
ROA not before:           Mon 02 Jan 2023 05:24:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203425
IP address blocks:        185.105.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:73:66:a3:6b:32:91:9c:e7:ff:91:96:ff:50:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
        Validity
            Not Before: Jan  2 05:24:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15c381574191e36f544de25a04dc922d54f6e036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:f6:c1:4a:07:e4:9c:e3:44:35:ca:a6:79:
                    51:7e:33:ff:30:27:41:58:6b:b2:2a:2f:28:44:58:
                    f3:6e:36:72:fd:04:f9:d9:b6:e9:24:f2:25:1e:ed:
                    56:de:25:59:38:e7:ab:32:77:d7:30:d2:ca:e2:2b:
                    1c:56:62:a8:64:7d:a3:ea:c9:15:c4:dc:60:3a:1f:
                    9c:c8:ea:2e:0d:61:4d:09:c5:16:ea:11:dc:0a:ae:
                    08:85:89:92:07:50:a8:51:15:62:9f:ee:7c:28:fc:
                    71:87:65:15:5d:39:96:9a:25:fa:84:a5:9c:33:d7:
                    ca:33:4d:24:ee:55:03:33:1a:19:85:97:5e:2a:38:
                    cd:91:80:2e:79:9e:2c:16:26:7f:28:09:1d:db:23:
                    5c:e6:97:7f:0b:57:38:cf:fe:91:36:ba:14:8e:f9:
                    55:aa:ef:93:64:95:2d:8b:98:78:23:ea:38:e9:b0:
                    27:fe:de:63:35:d0:5d:1a:e8:34:4f:10:ba:bb:ca:
                    3d:8f:fa:95:0a:ff:3e:ea:a0:e4:f0:33:30:a2:bc:
                    f5:17:80:a5:92:a6:60:7d:f2:0d:c1:5b:56:ed:2c:
                    a7:e9:30:66:d9:52:95:cc:c8:7c:2b:fd:3a:58:c8:
                    bc:c8:64:0b:91:f8:95:e8:f8:b7:84:66:63:e2:66:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C3:81:57:41:91:E3:6F:54:4D:E2:5A:04:DC:92:2D:54:F6:E0:36
            X509v3 Authority Key Identifier:
                keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/FcOBV0GR429UTeJaBNySLVT24DY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:68:63:7c:f1:94:bc:a7:b1:74:43:d3:59:33:7a:f8:a5:d6:
         a4:c4:73:d9:c4:dc:80:74:da:d2:c0:3a:a5:1e:f3:b0:9b:61:
         8f:05:33:bb:ed:85:5c:a2:9e:21:fc:a6:5b:59:d1:f3:ca:80:
         14:2f:11:45:bb:61:b2:ec:5c:f0:ab:e0:ab:f8:c2:8d:7e:84:
         1b:24:cf:b8:3f:e4:5b:de:51:94:e4:89:f0:bf:b2:41:71:1c:
         b5:8e:34:e5:3b:78:06:b5:dd:fd:78:55:69:07:c6:55:bd:d3:
         39:44:c7:fd:0d:46:f1:07:e6:12:db:be:68:7f:e1:b3:11:6e:
         e9:63:9a:89:02:eb:61:e9:7c:5a:76:d8:95:d3:8b:6e:d5:be:
         48:96:5f:2a:7d:79:c7:eb:4e:0c:6f:06:33:9d:7c:83:68:f2:
         72:33:a5:c0:36:29:f9:d7:86:87:a8:71:e7:ca:a3:cb:8a:10:
         9a:49:d4:ec:83:82:fe:4b:36:a9:31:25:ba:bc:38:37:b5:a3:
         da:1d:18:d0:b7:fc:aa:f0:69:06:68:7b:69:0d:d8:47:c8:93:
         b6:a8:a3:d2:a3:1f:05:5e:8b:21:a8:1e:e1:01:da:45:79:5c:
         6a:ec:8f:fa:d4:5b:db:e4:4f:12:39:cf:fb:51:d6:a2:f7:17:
         2e:0b:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:26 2024 by rpki-client on console-ams.rpki-client.org