Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FBUA-cdhHCjJT40oNe__5o7o8BU.roa
File:                     FBUA-cdhHCjJT40oNe__5o7o8BU.roa (raw, json)
Hash identifier:          Gyyp8eEdFlqiK4YsePwFc4x4GQgtmuYU/vBMzyMYpMg=
Subject key identifier:   14:15:00:F9:C7:61:1C:28:C9:4F:8D:28:35:EF:FF:E6:8E:E8:F0:15
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       018AA79C07110BB8DA25A443210122646473
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FBUA-cdhHCjJT40oNe__5o7o8BU.roa
Signing time:             Mon 18 Sep 2023 09:25:35 +0000
ROA not before:           Mon 18 Sep 2023 09:25:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        85.237.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Sep 2023 17:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:9c:07:11:0b:b8:da:25:a4:43:21:01:22:64:64:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Sep 18 09:25:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=141500f9c7611c28c94f8d2835efffe68ee8f015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:d3:32:cf:a1:3f:fc:ec:69:05:25:a0:45:
                    d1:97:a3:76:c6:43:8e:33:25:a3:9b:5c:41:52:6b:
                    7f:cd:d5:f4:0f:97:65:1c:49:d9:17:20:1c:4c:7a:
                    b5:4e:9b:cd:89:1c:55:b1:37:b9:cc:3b:b7:91:78:
                    2c:bc:f7:34:0f:89:ed:bd:80:34:74:7d:84:43:a5:
                    28:a0:39:5d:ac:3f:2a:f6:f6:e2:99:0c:06:78:c7:
                    ab:98:6a:74:60:11:07:e8:a5:13:eb:36:af:c1:e0:
                    90:58:9f:73:a6:8b:66:5c:31:5f:6c:21:24:b1:f6:
                    3c:7d:8e:78:ed:11:85:2a:65:11:b5:f3:97:a6:30:
                    6c:c3:69:0f:f8:4a:33:3b:d7:b2:91:af:98:c0:23:
                    6c:d6:50:70:6d:45:88:7d:a8:e5:48:6b:14:a2:83:
                    18:94:8b:b0:4c:a6:0b:94:9d:2a:d0:a6:3d:b9:14:
                    af:96:d4:21:cc:08:53:ba:73:17:cb:e0:58:02:cb:
                    fe:7e:40:ec:2e:2c:b9:99:9d:92:54:7c:b4:c7:8d:
                    0b:07:0c:93:f6:c5:ce:38:3c:8a:01:66:f1:9c:cd:
                    e7:a8:5e:9e:2d:75:6a:fd:fb:a6:69:87:6d:83:9d:
                    1a:ea:64:3d:b3:12:d5:39:d9:47:57:a0:cf:8e:d3:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:15:00:F9:C7:61:1C:28:C9:4F:8D:28:35:EF:FF:E6:8E:E8:F0:15
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FBUA-cdhHCjJT40oNe__5o7o8BU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:4b:33:33:18:f8:2b:cf:36:b3:44:d3:a6:36:c2:d9:90:
         c3:34:22:99:63:89:4c:ca:1a:95:88:88:ba:7c:dd:b1:eb:13:
         be:6c:eb:11:aa:67:15:0d:68:26:1d:3f:f4:84:b7:1c:36:ac:
         95:c6:7d:84:1f:b2:c5:5b:ee:d8:44:a4:4a:cf:18:7e:36:b6:
         aa:00:d5:cb:62:3e:31:d8:a9:a6:69:78:b4:f3:25:38:e4:42:
         56:1b:e7:91:58:8d:5a:e7:85:05:de:b7:00:a1:c9:98:b8:01:
         50:41:b4:a3:c3:1a:45:33:ac:ca:c9:26:f7:94:25:6c:92:d9:
         05:90:3a:64:ee:45:16:13:cb:62:ad:a5:bb:73:82:d3:59:77:
         b1:63:6d:ea:9d:c2:4f:74:55:0a:7f:ce:1f:d5:7c:a4:c6:75:
         dc:26:ab:b1:f2:bd:f1:d2:02:f0:e8:47:8a:e5:43:53:da:a8:
         d6:9f:17:58:38:aa:8f:b3:19:8c:3c:75:5c:ec:eb:79:5d:6a:
         17:f6:c2:46:e0:bb:38:33:af:a6:59:12:31:1d:ae:f4:d6:d3:
         e8:1c:ce:32:79:0b:ad:de:7b:0d:9c:2f:66:d3:57:1a:c8:55:
         b1:25:6e:32:04:09:71:57:37:84:ec:8b:5e:3f:a1:a6:49:41:
         80:57:93:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqnnAcRC7jaJaRDIQEiZGRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwOTE4MDkyNTM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDE1MDBmOWM3NjExYzI4Yzk0ZjhkMjgzNWVmZmZlNjhlZThmMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDPTMs+hP/zsaQUloEXRl6N2xkOO
MyWjm1xBUmt/zdX0D5dlHEnZFyAcTHq1TpvNiRxVsTe5zDu3kXgsvPc0D4ntvYA0
dH2EQ6UooDldrD8q9vbimQwGeMermGp0YBEH6KUT6zavweCQWJ9zpotmXDFfbCEk
sfY8fY547RGFKmURtfOXpjBsw2kP+EozO9eyka+YwCNs1lBwbUWIfajlSGsUooMY
lIuwTKYLlJ0q0KY9uRSvltQhzAhTunMXy+BYAsv+fkDsLiy5mZ2SVHy0x40LBwyT
9sXOODyKAWbxnM3nqF6eLXVq/fumaYdtg50a6mQ9sxLVOdlHV6DPjtNbAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQVAPnHYRwoyU+NKDXv/+aO6PAVMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvRkJVQS1jZGhIQ2pKVDQwb05lX181bzdvOEJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1EMA0G
CSqGSIb3DQEBCwUAA4IBAQB+QUszMxj4K882s0TTpjbC2ZDDNCKZY4lMyhqViIi6
fN2x6xO+bOsRqmcVDWgmHT/0hLccNqyVxn2EH7LFW+7YRKRKzxh+NraqANXLYj4x
2KmmaXi08yU45EJWG+eRWI1a54UF3rcAocmYuAFQQbSjwxpFM6zKySb3lCVsktkF
kDpk7kUWE8tiraW7c4LTWXexY23qncJPdFUKf84f1XykxnXcJqux8r3x0gLw6EeK
5UNT2qjWnxdYOKqPsxmMPHVc7Ot5XWoX9sJG4Ls4M6+mWRIxHa701tPoHM4yeQut
3nsNnC9m01cayFWxJW4yBAlxVzeE7IteP6GmSUGAV5NF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org