Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FaplbyVmrDNooU4A7NZFqadZ0Is.roa
File:                     FaplbyVmrDNooU4A7NZFqadZ0Is.roa (raw, json)
Hash identifier:          7J3sO6K9JECyuiVnIod8kSoY0fUqXpV6Q+CfIO8tDNY=
Subject key identifier:   15:AA:65:6F:25:66:AC:33:68:A1:4E:00:EC:D6:45:A9:A7:59:D0:8B
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       018C7363719A419574FD1E3CBD89E4852A5C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FaplbyVmrDNooU4A7NZFqadZ0Is.roa
Signing time:             Sat 16 Dec 2023 16:09:06 +0000
ROA not before:           Sat 16 Dec 2023 16:09:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        85.237.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Dec 2023 18:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:73:63:71:9a:41:95:74:fd:1e:3c:bd:89:e4:85:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Dec 16 16:09:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15aa656f2566ac3368a14e00ecd645a9a759d08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:d5:81:cc:5a:88:cb:64:ba:3e:c7:8f:11:
                    27:68:03:c1:cb:bf:0d:9d:70:c5:54:56:7f:49:0f:
                    18:8c:16:b6:ad:d2:9b:e7:76:4e:18:40:9a:ad:39:
                    c6:9f:00:0e:38:0a:f5:04:41:72:40:6a:a4:1e:1e:
                    68:5a:c4:5e:e8:6c:2a:9f:f8:d1:1a:e9:29:0b:5a:
                    73:80:a2:b6:d3:c1:b4:d7:1a:33:bf:b6:88:2e:79:
                    e1:15:18:46:b2:38:99:0d:f9:fe:93:74:b3:dc:69:
                    6b:b7:ad:83:d2:70:33:ed:75:d7:1d:92:40:99:a0:
                    bb:46:88:b0:59:64:5b:4a:93:70:59:26:c4:46:44:
                    68:19:a5:ae:a8:fb:04:0d:50:76:42:41:c8:f4:bf:
                    69:71:35:5c:64:38:67:38:fd:9c:bd:51:58:72:4c:
                    a1:84:a5:f6:21:15:97:b8:ae:22:6c:f9:af:e4:92:
                    f2:16:08:42:c1:b6:62:12:5c:0b:14:35:aa:49:81:
                    e5:af:ea:2c:d2:f9:f9:a3:18:8d:49:a9:f5:c9:d8:
                    0a:84:61:8a:9d:27:04:59:ee:da:7c:13:a9:22:95:
                    5e:85:14:51:95:39:a0:2d:80:1c:8e:3a:39:54:8a:
                    db:6b:9a:7d:fa:90:aa:93:2d:51:9b:c9:10:5e:e3:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:65:6F:25:66:AC:33:68:A1:4E:00:EC:D6:45:A9:A7:59:D0:8B
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FaplbyVmrDNooU4A7NZFqadZ0Is.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:da:e4:d6:d8:74:88:fe:d3:2c:6f:af:39:6f:1a:ff:5a:
         77:c5:03:1e:6b:9f:5a:2b:99:0b:98:fb:ea:3f:cc:c6:de:d3:
         9d:cc:95:5f:fb:72:06:8e:27:ed:d9:40:5d:32:b0:02:91:83:
         ed:0a:24:ba:c5:5e:7f:e1:9e:99:61:0f:37:91:14:28:97:2e:
         f8:43:01:95:57:46:88:fc:69:87:37:d8:81:bb:9c:0a:5e:68:
         bc:19:20:3f:a5:00:8c:13:8f:23:38:4e:e5:b7:41:49:42:fb:
         02:7d:f2:65:c5:aa:85:3c:c1:ba:5c:73:0b:7b:19:36:27:04:
         2d:8f:6d:a5:e5:12:3f:18:1c:c0:b1:4d:52:41:db:c7:0a:b9:
         ad:3a:81:16:6c:bf:65:47:18:04:0d:e4:03:f4:64:a1:4d:82:
         1b:b9:65:71:3b:7e:e3:77:5a:40:be:0f:fa:db:7f:45:f9:fc:
         80:5d:14:cc:ae:0e:a5:c6:fb:6b:70:0e:68:5f:d0:94:66:32:
         ac:e4:fc:19:92:a2:2b:62:38:9e:ed:51:2b:46:0f:00:20:87:
         b7:54:e7:b8:64:f8:d4:6d:e9:4e:b5:82:e6:45:53:83:27:9f:
         18:35:44:3c:6a:fe:13:9e:a5:16:12:70:bc:e8:80:4c:c7:5d:
         98:d7:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org