Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oWifLwi3EtN5g2TBTuwW5XXZ81M.roa
File:                     oWifLwi3EtN5g2TBTuwW5XXZ81M.roa (raw, json)
Hash identifier:          mfYRGVR/hfIw0HRnngBVG6Nsdhb9b1FZsLXzVbgF1dA=
Subject key identifier:   A1:68:9F:2F:08:B7:12:D3:79:83:64:C1:4E:EC:16:E5:75:D9:F3:53
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0189216762D8692587BD2ACD5E1DC62BA8CC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oWifLwi3EtN5g2TBTuwW5XXZ81M.roa
Signing time:             Tue 04 Jul 2023 14:56:10 +0000
ROA not before:           Tue 04 Jul 2023 14:56:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213305
IP address blocks:        163.5.94.0/24 maxlen: 24
                          163.5.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 13:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:21:67:62:d8:69:25:87:bd:2a:cd:5e:1d:c6:2b:a8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jul  4 14:56:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1689f2f08b712d3798364c14eec16e575d9f353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:f6:63:48:26:04:19:74:1f:df:f1:26:fe:
                    29:ed:37:28:ef:72:62:1e:fd:7f:a0:6e:78:e1:d8:
                    bb:18:ef:58:f9:68:fc:2a:d5:4f:c6:84:51:a4:81:
                    d6:94:6b:f4:5c:dd:e0:a7:6e:16:c0:1b:20:be:7b:
                    aa:a4:f9:40:6f:cf:32:ff:ff:fa:e6:f4:ae:4b:ed:
                    24:b9:6d:a1:d1:b1:34:b8:00:a2:e6:3c:67:28:72:
                    e9:c5:8b:25:4d:65:ee:20:26:38:2c:e4:a7:00:a8:
                    cd:4e:ba:32:64:62:17:d9:48:5e:f3:67:96:2b:62:
                    bb:b9:17:16:b6:e4:aa:a3:11:2e:b8:50:5d:c7:20:
                    8e:34:ba:cc:96:4d:86:6e:c4:e5:24:ba:03:bc:e6:
                    06:c0:a3:a6:8b:e1:69:7b:b0:dd:4f:66:ed:b6:7d:
                    2f:99:f2:c5:84:6e:a6:31:61:fb:01:2c:be:77:4b:
                    0c:16:b2:2f:19:6a:0e:dc:3c:05:5b:61:50:0a:e6:
                    14:05:29:fa:54:36:4b:e5:ba:31:05:31:da:eb:56:
                    06:5f:0f:0a:d9:8b:f9:11:31:d8:5b:78:2c:62:94:
                    d2:4d:bf:2d:2c:37:61:d9:0a:4c:b3:2b:6d:15:07:
                    d4:6a:9e:5c:f7:df:38:68:9a:e0:36:48:cb:1d:59:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:68:9F:2F:08:B7:12:D3:79:83:64:C1:4E:EC:16:E5:75:D9:F3:53
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oWifLwi3EtN5g2TBTuwW5XXZ81M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.94.0/24
                  163.5.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:1b:d9:58:98:22:04:4d:8a:3c:5c:37:72:b1:32:c6:05:
         8c:dc:77:c9:96:85:5f:fd:8d:84:cf:46:82:fe:9d:38:c3:74:
         cc:86:b7:c8:ad:26:8f:01:28:df:da:85:59:49:99:4d:c2:f2:
         f7:1e:eb:8c:5f:38:c4:72:4d:2b:9a:aa:f1:71:17:8e:38:9e:
         01:dd:33:a5:7d:45:11:a2:0d:ae:2c:42:af:ce:9f:40:dc:fc:
         94:18:da:a6:7b:7b:21:3a:83:f1:31:0b:0d:69:70:97:a1:65:
         6b:d0:33:7c:59:b1:07:ea:23:a9:47:2f:47:8b:de:ad:df:ff:
         54:de:a4:ad:ac:c9:ff:49:5c:4d:af:98:55:59:a9:43:d3:28:
         7e:f1:80:e0:43:41:1b:8d:5a:dd:39:2d:6d:0d:35:54:df:71:
         ae:4b:4c:d0:54:71:2b:8c:dc:3c:d0:70:ef:4a:71:41:17:0f:
         5b:fc:63:e0:23:c5:e8:df:69:68:56:52:9b:77:32:1a:6d:d4:
         88:dc:1b:38:f1:94:c0:23:41:ce:5c:79:1c:31:36:f3:96:00:
         ea:5f:c1:81:ac:f5:e4:57:f1:5b:0a:49:6c:24:90:85:1a:86:
         4b:43:fb:f3:e3:73:69:d9:10:f3:9f:86:57:c2:0f:38:cd:4c:
         98:98:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:35 2024 by rpki-client on console-ams.rpki-client.org