Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/WtOed_AQmCjq_Ex8AMdePoDsB-E.roa
File:                     WtOed_AQmCjq_Ex8AMdePoDsB-E.roa (raw, json)
Hash identifier:          absclBuuavzx+l6WaxDLQvrQONjuHfPya/rhj1sDY94=
Subject key identifier:   5A:D3:9E:77:F0:10:98:28:EA:FC:4C:7C:00:C7:5E:3E:80:EC:07:E1
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       018CC2DAB3C1DDD9A3F4C8A8D5136FFB0D88
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/WtOed_AQmCjq_Ex8AMdePoDsB-E.roa
Signing time:             Mon 01 Jan 2024 02:29:21 +0000
ROA not before:           Mon 01 Jan 2024 02:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212477
IP address blocks:        188.215.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 11:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:b3:c1:dd:d9:a3:f4:c8:a8:d5:13:6f:fb:0d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Jan  1 02:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5ad39e77f0109828eafc4c7c00c75e3e80ec07e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:a6:5c:09:4e:ad:e6:09:25:05:68:db:3b:
                    87:b1:21:be:ae:64:6e:f0:5b:49:fd:b8:c6:3b:ff:
                    ee:59:8e:2e:a7:da:70:b7:9d:6f:ca:39:a2:c5:47:
                    a1:f8:c2:e8:86:32:15:9f:39:40:76:9f:69:21:56:
                    9f:a1:3a:a3:a1:3c:5b:d9:1a:96:d3:3a:96:da:fb:
                    74:79:49:b7:70:cb:6e:44:b6:ad:f1:ce:cf:ba:9c:
                    cb:4c:0e:7b:c6:e1:1e:b0:c2:57:52:43:31:18:73:
                    b4:40:d2:b4:b0:14:7e:4d:92:89:36:3b:68:57:f9:
                    4f:58:ad:5e:59:ea:fd:b3:e4:76:7b:30:14:f9:66:
                    c3:20:97:8d:9c:42:ba:9a:ee:0e:58:82:24:27:e8:
                    a1:91:2b:89:49:cd:ba:ed:25:d8:a9:bc:3f:a8:9b:
                    77:93:2e:8e:28:d3:97:37:75:fc:fe:4d:af:7a:51:
                    50:92:70:79:ad:da:61:ed:2e:dc:c8:4f:dc:1d:bd:
                    55:27:ad:95:c1:b7:a2:25:8b:13:9f:af:d2:89:fd:
                    f9:7a:d1:dd:96:b3:98:41:d2:72:61:f4:f7:57:5a:
                    cc:25:f3:8a:45:f7:fb:bb:73:d6:59:ce:4e:34:4e:
                    86:fa:ff:bf:21:71:e5:01:db:4e:9f:6d:7b:a7:34:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:9E:77:F0:10:98:28:EA:FC:4C:7C:00:C7:5E:3E:80:EC:07:E1
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/WtOed_AQmCjq_Ex8AMdePoDsB-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:16:98:f6:59:81:23:a3:10:ce:05:4c:f2:42:dc:1c:a1:
         33:13:ee:cb:a1:5d:a2:38:3b:77:89:70:62:d1:68:77:ef:06:
         51:2b:db:5c:a9:e0:21:80:82:fb:55:97:72:ba:d6:e3:19:4a:
         06:0e:bb:b4:ef:64:f6:27:60:75:d8:8c:23:1a:b5:32:d1:b6:
         b2:50:7b:7c:1f:99:02:d9:e9:87:89:1d:9f:fa:b0:27:a6:e7:
         4f:9b:22:20:34:de:94:e9:e6:96:cb:7e:e8:ca:4e:df:ea:80:
         c1:f0:00:6f:f5:2a:95:09:ec:78:f0:8d:b4:8f:58:ba:85:95:
         10:23:fc:df:1a:fc:4b:56:b2:82:31:68:c8:ec:22:bf:b6:a0:
         40:f3:71:47:7a:1c:b2:dc:27:e4:9c:bd:7a:a0:40:20:96:eb:
         58:ca:42:8f:5b:c7:30:15:b0:88:73:a0:ea:f9:10:4d:b9:75:
         95:21:f0:bd:48:4d:bf:6e:e2:fe:e1:d4:02:75:2c:6c:c3:ac:
         cb:58:57:34:8c:e2:7a:92:74:31:92:5d:26:71:0f:8c:fc:9b:
         48:01:f3:20:f2:44:9f:88:4f:72:34:e1:50:1a:d7:4c:08:9d:
         a1:ea:26:b4:68:ad:f3:80:4b:73:ad:cb:6d:39:66:ef:32:0d:
         57:77:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:27 2024 by rpki-client on console-ams.rpki-client.org