Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_69ygDbowIpQTGD_TYk3QvEYnrI.roa
File:                     _69ygDbowIpQTGD_TYk3QvEYnrI.roa (raw, json)
Hash identifier:          fk7S70IXJ9ysjishHnyVhyZ4OW3eRIFrFUa0ygcU6to=
Subject key identifier:   FF:AF:72:80:36:E8:C0:8A:50:4C:60:FF:4D:89:37:42:F1:18:9E:B2
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       018ADD382909699043572D4D51F0878D9257
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_69ygDbowIpQTGD_TYk3QvEYnrI.roa
Signing time:             Thu 28 Sep 2023 19:15:59 +0000
ROA not before:           Thu 28 Sep 2023 19:15:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60683
IP address blocks:        212.64.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 01 Oct 2023 15:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:dd:38:29:09:69:90:43:57:2d:4d:51:f0:87:8d:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Sep 28 19:15:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ffaf728036e8c08a504c60ff4d893742f1189eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:e1:1b:3e:28:b1:9d:7c:af:20:de:f3:4f:
                    b6:3b:8c:cb:82:dd:a1:4c:a7:78:e0:ee:2e:d2:c8:
                    2b:70:e8:67:4f:2d:bd:23:4e:15:2b:8c:51:04:3d:
                    f4:8c:25:8f:b2:32:5a:0c:7d:fb:8f:a3:91:91:74:
                    ba:88:a8:9d:cd:9d:90:ae:be:b9:21:c2:a2:f9:d1:
                    1b:c0:02:61:69:d5:42:b1:f6:4d:f3:6f:b7:41:09:
                    fc:a3:5e:c8:2c:e1:0a:68:25:31:87:36:b1:87:3c:
                    d0:1b:77:92:bd:95:a6:40:05:7d:c1:6b:83:bf:77:
                    8d:2e:ac:71:97:b0:71:a0:4a:08:76:21:9e:32:22:
                    42:d0:2f:ed:c4:52:61:d8:ea:88:04:a5:7c:2d:94:
                    d3:57:df:c7:69:03:1b:5d:18:ba:47:af:68:9f:4b:
                    a9:5b:91:ae:7f:73:eb:b9:c0:b3:f1:f2:c4:d9:1b:
                    b6:ff:8b:95:a0:6f:0b:a1:43:38:b4:56:08:75:b9:
                    d9:82:50:00:c9:3c:ce:4f:aa:e4:e0:e9:f1:44:fb:
                    f4:f6:44:2f:0f:df:3e:97:98:81:a5:82:a7:b6:de:
                    8e:99:47:8d:b4:6a:d1:4d:ee:2d:0c:48:28:e2:0e:
                    a6:98:67:8a:ef:cf:25:5b:57:34:9c:f9:70:8a:6b:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:72:80:36:E8:C0:8A:50:4C:60:FF:4D:89:37:42:F1:18:9E:B2
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_69ygDbowIpQTGD_TYk3QvEYnrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.64.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:07:54:8e:62:b1:51:86:14:ba:cd:ce:0b:9c:8f:09:b0:e7:
         70:1d:f7:88:4d:c2:9e:3d:23:5e:9f:66:f2:fb:d4:4e:38:f8:
         a6:6b:4a:31:89:2b:cc:e2:ae:b2:27:8b:0b:ad:db:d2:6a:10:
         15:44:1c:b2:6b:ca:de:33:11:d8:9f:f8:07:5f:58:ae:05:a1:
         81:95:55:f9:12:d6:00:5d:5f:09:37:75:dd:b8:52:f6:48:ef:
         e8:78:6d:4d:41:ca:23:fb:1c:f5:11:d2:99:6c:47:47:2c:24:
         db:24:b0:e7:33:11:e7:8c:92:a4:fc:bc:5f:91:0e:a2:34:23:
         e5:cb:95:c1:15:f6:cd:4c:dd:e2:fb:d3:86:04:d8:ec:94:59:
         7d:c6:0f:c7:d2:d5:cb:98:02:90:85:b7:0c:21:7a:78:23:69:
         98:67:c4:24:ad:96:82:76:a2:e4:0c:1c:ba:a8:d3:fb:4c:a5:
         ad:7a:80:dd:df:fb:76:95:19:3d:f5:7e:92:06:7b:66:63:1e:
         75:9e:57:9b:83:8f:d2:80:0b:e4:71:58:71:92:0b:47:3b:62:
         54:f9:f4:45:ce:e0:a6:71:48:13:77:1b:45:78:53:b1:7c:a3:
         17:09:49:15:95:a7:ef:6f:81:a0:13:0e:92:60:18:83:5c:a8:
         67:e8:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org