Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/FOmUhMOtYqR5RB9h4HDG55F4QZQ.roa
File:                     FOmUhMOtYqR5RB9h4HDG55F4QZQ.roa (raw, json)
Hash identifier:          vauhUCw/gEZ+tA4QNLW2QQiKkGRrohK8LbS40z2mDyU=
Subject key identifier:   14:E9:94:84:C3:AD:62:A4:79:44:1F:61:E0:70:C6:E7:91:78:41:94
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       018A05941283C68E6ED71F44D4CC0C16767C
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/FOmUhMOtYqR5RB9h4HDG55F4QZQ.roa
Signing time:             Thu 17 Aug 2023 22:18:24 +0000
ROA not before:           Thu 17 Aug 2023 22:18:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216442
IP address blocks:        185.51.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:05:94:12:83:c6:8e:6e:d7:1f:44:d4:cc:0c:16:76:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Aug 17 22:18:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14e99484c3ad62a479441f61e070c6e791784194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:0e:e6:76:59:12:b1:73:05:96:7a:34:af:
                    f5:ff:dd:7a:d1:b8:b9:06:b6:32:07:c9:41:5c:4e:
                    54:05:db:b0:36:48:d1:dc:e9:28:75:ce:63:ae:3e:
                    19:0f:2e:01:58:8f:6b:e1:09:02:b1:93:f0:db:f7:
                    a6:df:32:8e:1c:4c:1f:8d:c0:df:9a:9c:3c:b6:42:
                    9f:87:58:85:ff:f2:41:bf:7d:7b:2e:0e:ae:0d:3f:
                    05:9d:fb:87:0c:fd:a4:67:00:be:a2:e4:84:f1:78:
                    e4:45:64:20:11:14:72:a6:17:30:93:54:1e:0d:c7:
                    c1:48:42:7a:fe:c5:99:38:bc:88:1e:cc:50:4c:cd:
                    4f:0a:8d:68:0c:8a:c1:fe:3e:79:c3:d2:bc:b0:5f:
                    03:fe:83:fe:f1:81:02:25:76:d5:29:d8:9b:6c:76:
                    08:99:d4:f5:da:6a:d7:dd:c0:d0:68:88:f8:68:b5:
                    b4:74:f9:dc:fd:17:3a:58:2e:ca:f6:08:dd:70:b9:
                    e2:02:7b:ed:49:6a:5b:d9:6a:4e:a6:0d:9b:13:60:
                    bd:db:54:94:d8:7c:3c:4e:ba:9e:27:fe:34:c8:1c:
                    85:38:f6:5d:42:b3:a3:2e:44:dc:eb:e6:d9:88:cd:
                    45:c6:f8:e4:3a:e1:c6:ce:d7:0a:ab:91:73:e7:13:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:94:84:C3:AD:62:A4:79:44:1F:61:E0:70:C6:E7:91:78:41:94
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/FOmUhMOtYqR5RB9h4HDG55F4QZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:5c:f2:d4:23:f1:00:44:8d:65:64:1b:52:1a:e7:a9:dc:
         31:e4:2b:a1:48:88:86:c9:72:1e:7d:b8:1f:c1:31:8e:97:98:
         b5:62:fd:f7:2c:d9:66:6c:54:b6:03:0b:44:10:ae:08:af:17:
         56:e2:c6:8f:5e:29:f5:7f:e4:4e:fc:14:5a:5e:21:b8:8d:5f:
         b9:17:61:69:40:a2:ea:45:47:94:15:df:c9:42:71:c4:19:83:
         d9:f7:70:df:18:1e:53:f1:97:2f:cf:cd:18:2e:09:f3:7d:be:
         7a:f4:ed:9f:d4:6c:e9:ff:ae:7e:0b:c6:fe:7f:d9:62:f7:da:
         88:92:3c:50:79:b6:be:5a:15:d5:21:58:c4:18:97:7c:d9:a5:
         4c:c6:5e:19:3e:7c:07:13:ed:a0:3a:6d:fc:bf:03:c3:9b:bd:
         22:73:ac:1a:bf:4e:f4:28:a3:67:2b:77:59:bb:e2:5b:2a:f7:
         74:fe:53:a7:22:17:19:be:fa:2c:34:e5:15:5b:4b:a7:8a:1c:
         bd:03:ed:6d:5a:36:61:1c:50:1c:bd:86:d2:3f:a6:05:c8:ad:
         1f:00:fc:dd:78:ef:b7:7f:11:c7:89:c4:6d:d0:d9:32:d0:ff:
         36:8e:e8:06:a9:1e:e0:76:7f:54:2b:94:47:01:98:9e:c1:b5:
         a6:65:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:21 2024 by rpki-client on console.sobornost.net