Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/FWcuh7fdLQ_2sPpUqFVPwkph21Q.roa
File:                     FWcuh7fdLQ_2sPpUqFVPwkph21Q.roa (raw, json)
Hash identifier:          VF5P117QQ6hLRjVkiSt1xbvpxznar+QLdfjHYOhO84Q=
Subject key identifier:   15:67:2E:87:B7:DD:2D:0F:F6:B0:FA:54:A8:55:4F:C2:4A:61:DB:54
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       0188F82C0F7CCFBC4634B02AC39D027AF8D8
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/FWcuh7fdLQ_2sPpUqFVPwkph21Q.roa
Signing time:             Mon 26 Jun 2023 14:46:57 +0000
ROA not before:           Mon 26 Jun 2023 14:46:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        193.36.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f8:2c:0f:7c:cf:bc:46:34:b0:2a:c3:9d:02:7a:f8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Jun 26 14:46:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15672e87b7dd2d0ff6b0fa54a8554fc24a61db54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:70:5c:8e:ac:f9:23:8c:03:87:c8:44:22:
                    5d:9e:5e:98:fd:c2:e9:1d:89:57:1d:06:55:14:b6:
                    27:0f:9e:aa:13:3b:78:d3:0f:90:18:00:48:eb:a8:
                    d4:f0:09:12:f0:de:7f:18:88:fe:16:c5:5f:b8:ce:
                    a0:55:84:66:8f:d5:46:cf:15:51:1d:3f:95:a7:8f:
                    ee:35:59:de:c2:a9:2f:c3:db:ad:a4:3d:a2:8f:21:
                    cb:eb:8f:9b:e6:a5:6c:30:7b:35:b7:dd:a3:86:f8:
                    d4:0b:d3:63:7c:43:ef:58:8c:da:52:dc:cb:0b:27:
                    a8:b7:ed:1c:e7:2b:de:e3:2f:d5:7b:04:34:99:b2:
                    cd:ca:66:4d:98:e2:18:8f:70:84:43:c0:2a:f8:a1:
                    88:6d:f6:22:6c:14:17:54:cf:96:e1:d2:37:b3:e0:
                    36:e9:ef:a1:03:67:63:1f:3e:64:8e:58:1e:d6:59:
                    d2:3c:e3:a3:2e:27:38:65:0a:b4:0d:b2:bc:00:24:
                    53:d7:4c:10:ab:3d:19:d8:69:3b:66:0b:8f:4b:4c:
                    eb:88:19:b9:ed:8d:e0:5e:a9:5c:e8:f2:d5:a3:b0:
                    74:4c:0d:d0:e4:8d:53:66:64:ae:33:ae:d2:3d:e6:
                    d2:f2:b8:3a:a0:c2:2f:73:0d:45:ba:b3:f2:56:99:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:2E:87:B7:DD:2D:0F:F6:B0:FA:54:A8:55:4F:C2:4A:61:DB:54
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/FWcuh7fdLQ_2sPpUqFVPwkph21Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:3e:29:36:c0:1f:83:f4:0c:b5:b5:16:91:86:12:9e:49:
         85:b3:a2:24:e6:ea:e6:25:d4:52:e0:c5:9e:6f:bd:fe:44:87:
         2c:04:7d:5a:f4:b7:5d:8a:e5:69:ee:8b:44:92:78:39:87:52:
         35:06:95:c8:57:cf:f0:51:a7:fa:4f:c3:43:d2:73:1d:de:0e:
         2c:99:23:88:82:86:51:65:40:a7:57:2e:84:50:24:f1:b4:32:
         7e:87:d0:b6:26:39:41:ef:05:35:85:af:68:0d:38:f9:62:08:
         03:c7:b1:56:ec:51:b2:44:15:dc:53:74:8e:16:ed:94:1e:43:
         96:4f:07:9a:bf:fd:f8:7b:45:98:e1:41:f6:0c:c7:bb:2e:a9:
         91:ac:44:5f:d6:57:dd:bb:e3:41:16:8e:46:4e:75:c7:b5:f1:
         9d:b7:e3:a5:46:f9:d8:f2:30:80:69:bb:2b:84:95:1b:b7:df:
         58:9f:5a:bb:d7:d2:5a:16:2e:35:e7:d5:d6:62:e7:23:47:67:
         7f:0d:a7:bd:85:bb:68:33:62:0f:7b:e1:8d:e3:2f:d8:c9:3e:
         e1:b4:e2:66:fd:26:7b:40:db:58:e5:8c:cf:cd:44:a8:94:6b:
         e4:11:75:88:03:7e:7a:30:8c:b6:3d:bc:4d:45:b4:33:c7:29:
         2a:c8:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:06 2024 by rpki-client on console.sobornost.net