Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/i9GICFtQoSiSpROH_vASbkfI7xI.roa
File:                     i9GICFtQoSiSpROH_vASbkfI7xI.roa (raw, json)
Hash identifier:          zE/KPCjYO4Nh8w9DZHxnSjKk4vpwq4V7PVaKVrTkEqI=
Subject key identifier:   8B:D1:88:08:5B:50:A1:28:92:A5:13:87:FE:F0:12:6E:47:C8:EF:12
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019251905F9E43A63F45022F7BFCD156DFDB
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/i9GICFtQoSiSpROH_vASbkfI7xI.roa
Signing time:             Thu 03 Oct 2024 08:47:48 +0000
ROA not before:           Thu 03 Oct 2024 08:47:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        85.115.208.0/23 maxlen: 24
                          213.145.68.0/23 maxlen: 23
                          213.145.68.0/24 maxlen: 24
                          213.145.72.0/21 maxlen: 24
                          213.145.82.0/23 maxlen: 24
                          213.145.82.0/24 maxlen: 24
                          213.145.83.0/24 maxlen: 24
                          213.145.84.0/23 maxlen: 23
                          213.145.86.0/23 maxlen: 23
                          213.145.88.0/21 maxlen: 24
                          213.145.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 22:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:51:90:5f:9e:43:a6:3f:45:02:2f:7b:fc:d1:56:df:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Oct  3 08:47:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8bd188085b50a12892a51387fef0126e47c8ef12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:93:47:40:c8:cd:10:01:07:18:28:14:fe:
                    b6:a7:ae:fb:2b:da:50:eb:42:fb:e0:ea:5a:8c:d0:
                    bd:c8:92:38:ba:9e:f7:1f:2a:69:2b:47:82:df:df:
                    b2:ed:50:cc:61:7f:12:3b:cc:1b:d9:ab:c1:76:93:
                    be:75:17:09:92:cb:09:20:14:d8:90:8d:40:ce:d4:
                    f0:70:10:b0:3c:59:da:af:6f:d0:37:ef:1d:35:d4:
                    e3:5e:65:2b:a3:ea:65:4a:38:53:29:c9:7d:68:73:
                    79:9d:f4:a7:76:bc:a8:db:02:4d:bb:b6:97:6d:4d:
                    5d:f1:ef:1d:09:43:5a:8a:19:e2:e7:41:99:5d:6e:
                    d2:29:af:40:37:d1:6c:d9:95:c9:a1:d3:de:c9:43:
                    1a:3f:e2:ce:b2:80:7a:87:91:a5:19:31:81:25:36:
                    a7:97:0e:cb:f4:31:15:49:94:b4:3c:1d:92:9c:4f:
                    af:73:78:7d:11:4b:b9:96:b5:df:ac:c0:7e:90:87:
                    e2:1f:55:9d:7f:9d:ea:57:d9:8d:43:0b:72:60:f8:
                    8a:2a:02:94:31:e5:a4:21:ad:c4:19:88:79:96:cf:
                    b4:97:28:bf:61:04:ab:d6:cf:e3:27:2e:7c:07:c4:
                    00:ea:24:23:65:ed:9c:33:92:f7:57:6c:a3:ea:1f:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:88:08:5B:50:A1:28:92:A5:13:87:FE:F0:12:6E:47:C8:EF:12
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/i9GICFtQoSiSpROH_vASbkfI7xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.208.0/23
                  213.145.68.0/23
                  213.145.72.0/21
                  213.145.82.0-213.145.95.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:bf:4d:58:1a:ca:54:d4:7a:20:99:65:4a:72:c5:b5:3d:b1:
         99:f7:7a:2f:bb:b9:3a:d8:5f:b3:63:32:a6:0e:58:37:ce:a1:
         8e:35:11:0e:bb:14:54:dd:3d:33:f8:28:a7:ff:3f:2b:ba:34:
         4f:d2:bb:83:c0:94:d2:d3:34:42:48:b7:cb:5a:fd:24:af:45:
         99:aa:73:50:a7:5f:d4:54:93:f0:17:5a:4f:3c:2f:ad:26:eb:
         90:59:8d:bc:50:93:3c:d4:de:f3:9b:00:c8:23:e5:fd:6d:34:
         a1:d4:4a:ff:b1:30:3b:0e:2b:90:8c:6c:0a:f7:37:45:54:e9:
         78:ee:2a:0f:0e:4a:8a:32:95:73:c7:e3:ee:1e:79:31:e3:db:
         e8:e8:10:bc:73:67:df:4c:da:e2:e5:f9:27:15:75:22:d3:57:
         c1:91:1e:7d:ca:e2:cb:34:6b:3a:54:13:11:5b:29:67:f6:80:
         d2:cb:a4:ff:8b:83:2b:9e:1b:91:95:73:e3:fe:c6:30:50:88:
         d3:40:43:ef:f8:7f:d8:6b:08:c7:bc:9a:b2:ff:8c:15:d6:d9:
         77:85:73:ae:2f:00:09:7f:cb:05:b5:ca:5f:cf:08:16:31:61:
         17:d9:0e:ad:44:05:19:2e:53:de:f9:a6:aa:78:fa:07:7a:08:
         12:bc:38:c4
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 7 00:33:34 2024 by rpki-client on console-ams.rpki-client.org