Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/D3q_7_4rbYM5nutmf4ME_ANFhBs.roa
File:                     D3q_7_4rbYM5nutmf4ME_ANFhBs.roa (raw, json)
Hash identifier:          O9w3VP2Rcm2R0/cd9cCjmhO7KB5/D+wxaC9XA2ITFgw=
Subject key identifier:   0F:7A:BF:EF:FE:2B:6D:83:39:9E:EB:66:7F:83:04:FC:03:45:84:1B
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       01899433ED73F7349D96255D99CBE4D246E2
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/D3q_7_4rbYM5nutmf4ME_ANFhBs.roa
Signing time:             Wed 26 Jul 2023 21:56:18 +0000
ROA not before:           Wed 26 Jul 2023 21:56:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        85.115.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 09:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:94:33:ed:73:f7:34:9d:96:25:5d:99:cb:e4:d2:46:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jul 26 21:56:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f7abfeffe2b6d83399eeb667f8304fc0345841b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:e3:ba:af:74:7c:84:ea:a5:0a:e0:e7:cd:
                    2c:11:2b:11:79:71:aa:b5:49:5d:0c:d9:85:f2:1c:
                    1f:8d:67:de:a8:9c:bf:fc:fc:a4:f2:06:78:1d:10:
                    0d:05:22:62:ec:f8:33:ba:f1:78:bb:fa:9d:10:df:
                    d1:e1:ac:9c:2d:93:54:49:ff:1c:9a:12:b4:d0:c3:
                    e9:d7:ba:9a:a2:5e:74:5e:58:fb:19:23:0d:6e:30:
                    84:d7:69:f0:e0:5f:a4:88:a1:9c:cd:d6:7a:15:11:
                    95:9a:c0:0c:3d:94:b3:ad:98:f3:24:c3:8a:e4:d4:
                    76:58:a7:67:6e:28:14:c3:ee:bc:4f:99:04:58:49:
                    28:2d:7b:56:b7:70:fd:56:df:90:a8:21:46:3d:d1:
                    eb:fd:10:2f:34:55:1c:01:ca:68:2d:93:14:fd:07:
                    c3:ed:8d:a3:23:ff:d2:9b:8a:64:34:98:1c:c5:40:
                    60:4d:d7:87:46:b5:b0:ec:92:8f:cc:21:77:a9:1f:
                    2d:2a:da:6f:20:71:2e:e2:d9:9e:9c:ec:00:94:8e:
                    3d:08:c1:cb:4b:a1:19:60:48:a8:24:97:a0:17:bb:
                    c0:72:15:33:e5:24:09:6c:49:e3:2f:ef:e3:b2:4e:
                    86:4c:79:ab:23:cb:cb:28:55:d7:6d:9d:90:36:5b:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7A:BF:EF:FE:2B:6D:83:39:9E:EB:66:7F:83:04:FC:03:45:84:1B
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/D3q_7_4rbYM5nutmf4ME_ANFhBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:38:ea:f0:71:89:e4:6e:63:86:5f:05:73:71:34:4a:49:63:
         12:7b:19:e6:1b:f8:b5:ea:3d:a5:bf:43:67:56:2b:84:63:41:
         6b:44:bd:56:6d:82:08:45:73:c2:2e:a5:19:a0:a5:89:0d:fe:
         40:17:4d:51:c0:d2:32:3b:a0:db:8f:5d:85:0c:70:59:cd:ca:
         c3:e5:6d:39:60:54:7d:af:91:e2:f1:19:8b:f4:b7:fd:76:54:
         6b:70:cd:8c:72:40:b0:d1:66:24:96:84:d9:74:f4:8d:d6:51:
         81:28:a4:16:6b:05:84:38:53:df:1b:86:1a:fd:a3:af:1a:ad:
         01:eb:c7:34:ca:5d:cf:24:a5:58:48:1e:e7:8a:0b:ba:9d:ce:
         b1:36:12:52:42:9e:b6:34:7d:98:43:cd:51:c9:68:ef:a5:4e:
         4b:f3:98:d9:1b:49:d2:57:df:35:13:b4:1f:40:0e:30:57:88:
         f8:84:46:09:46:c4:5a:aa:17:3a:4d:e5:62:1f:be:15:b3:d2:
         17:a1:d7:af:50:41:86:60:af:c8:0c:cb:38:12:3f:41:1e:f3:
         42:74:25:68:14:8e:48:c5:d3:9a:24:d9:00:93:53:a2:4a:5d:
         80:c6:46:0f:e2:6f:3b:5d:f5:f1:55:bd:7a:8a:8b:e9:dd:7a:
         0b:67:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org