Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/WeEwgjpb-SVBnr5h_mE-sBSuHnI.roa
File:                     WeEwgjpb-SVBnr5h_mE-sBSuHnI.roa (raw, json)
Hash identifier:          0fY7oZTBYhwyac1zwlm/eELJGLvwMgCicJ0Z7Y0UOA8=
Subject key identifier:   59:E1:30:82:3A:5B:F9:25:41:9E:BE:61:FE:61:3E:B0:14:AE:1E:72
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       01856E26674590281489A7055355B6B9A559
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/WeEwgjpb-SVBnr5h_mE-sBSuHnI.roa
Signing time:             Sun 01 Jan 2023 16:24:48 +0000
ROA not before:           Sun 01 Jan 2023 16:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61965
IP address blocks:        31.133.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:67:45:90:28:14:89:a7:05:53:55:b6:b9:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Jan  1 16:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59e130823a5bf925419ebe61fe613eb014ae1e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:96:91:b1:2a:df:cd:20:4b:22:ea:f6:cb:
                    c6:2f:f3:81:99:d3:d4:a9:04:93:3f:ab:bf:e3:db:
                    65:1f:83:dc:86:3f:bc:78:c5:bb:53:86:15:cf:bf:
                    8b:ae:ae:c7:10:a6:53:55:6a:eb:b8:1b:1d:5e:fa:
                    e7:d2:5a:87:7e:fc:51:b4:ea:f5:3f:24:40:be:ac:
                    b6:3e:f2:de:e9:bf:ff:51:e1:c7:8b:d0:c0:bf:81:
                    26:e0:68:44:31:e3:ad:71:10:3d:14:1f:fd:86:59:
                    a2:47:53:76:de:8d:1d:aa:28:a2:0b:b8:02:d7:08:
                    61:66:ff:f3:9d:de:f1:43:bf:fe:ee:8d:bc:84:f9:
                    6a:9d:a4:64:bf:13:c3:c6:cb:a7:a9:16:c6:fb:29:
                    f8:1c:75:c4:ee:c2:cf:af:88:00:73:cc:d5:76:cc:
                    8c:c4:78:6b:ce:50:fd:ce:35:db:0e:11:d2:2c:2c:
                    48:49:db:4a:e3:97:62:98:d6:b9:85:14:ed:cd:64:
                    f7:86:98:c8:ab:e0:ae:10:e1:5b:e4:2e:4e:0f:bf:
                    35:e8:a6:cf:2f:fa:c2:e1:11:57:46:b9:84:d5:11:
                    a1:24:28:aa:cd:ac:09:e1:aa:74:4f:ef:72:1d:84:
                    22:f1:6e:3b:3a:2a:9f:cd:e9:5f:31:fa:08:a6:8a:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:30:82:3A:5B:F9:25:41:9E:BE:61:FE:61:3E:B0:14:AE:1E:72
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/WeEwgjpb-SVBnr5h_mE-sBSuHnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.133.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:52:91:2e:a4:95:20:8f:23:91:b0:1a:62:26:84:ff:63:80:
         df:52:bf:4b:68:18:4b:44:39:c4:fc:b4:ea:7b:cc:4b:be:05:
         94:b0:68:c6:31:75:8b:75:75:21:bd:98:0e:b3:e9:a9:17:86:
         1b:ba:e9:67:e3:0f:5a:51:5d:16:ee:3d:17:75:29:0e:e7:d8:
         a4:c6:64:f9:82:b2:a4:93:f5:26:58:48:cb:9e:7e:dd:be:22:
         68:ec:c8:94:77:b2:8f:d0:09:af:59:38:18:11:fb:f3:84:f6:
         5c:fb:ef:7f:33:93:e3:10:9c:ab:84:e1:42:1c:6a:be:e0:e3:
         4b:26:3a:ba:ef:57:3d:73:fe:6e:5c:c1:c9:a1:ae:eb:2b:45:
         c5:08:55:03:cc:a2:19:11:f8:ee:a9:d6:bb:64:91:ad:db:d7:
         0b:b1:91:87:75:40:a4:87:ce:5d:0b:d1:78:5c:48:9b:e0:5e:
         9e:2b:89:8b:ff:95:09:46:02:b9:7e:34:8d:9a:f8:c2:10:f7:
         84:ef:df:f7:13:be:af:09:60:91:64:c8:17:ce:ab:3e:86:71:
         39:25:b4:2c:cf:c2:0c:81:a9:aa:20:08:be:ba:a9:73:e1:79:
         51:fa:01:f5:9c:aa:94:0f:f1:76:00:70:a2:b9:84:e7:d8:fd:
         8a:67:0e:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuJmdFkCgUiacFU1W2uaVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjMwMTAxMTYyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWUxMzA4MjNhNWJmOTI1NDE5ZWJlNjFmZTYxM2ViMDE0YWUxZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO+WkbEq380gSyLq9svGL/OBmdPU
qQSTP6u/49tlH4Pchj+8eMW7U4YVz7+Lrq7HEKZTVWrruBsdXvrn0lqHfvxRtOr1
PyRAvqy2PvLe6b//UeHHi9DAv4Em4GhEMeOtcRA9FB/9hlmiR1N23o0dqiiiC7gC
1whhZv/znd7xQ7/+7o28hPlqnaRkvxPDxsunqRbG+yn4HHXE7sLPr4gAc8zVdsyM
xHhrzlD9zjXbDhHSLCxISdtK45dimNa5hRTtzWT3hpjIq+CuEOFb5C5OD7816KbP
L/rC4RFXRrmE1RGhJCiqzawJ4ap0T+9yHYQi8W47OiqfzelfMfoIporfUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnhMII6W/klQZ6+Yf5hPrAUrh5yMB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvV2VFd2dqcGItU1ZCbnI1aF9tRS1zQlN1SG5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4UrMA0G
CSqGSIb3DQEBCwUAA4IBAQBgUpEupJUgjyORsBpiJoT/Y4DfUr9LaBhLRDnE/LTq
e8xLvgWUsGjGMXWLdXUhvZgOs+mpF4Ybuuln4w9aUV0W7j0XdSkO59ikxmT5grKk
k/UmWEjLnn7dviJo7MiUd7KP0AmvWTgYEfvzhPZc++9/M5PjEJyrhOFCHGq+4ONL
Jjq671c9c/5uXMHJoa7rK0XFCFUDzKIZEfjuqda7ZJGt29cLsZGHdUCkh85dC9F4
XEib4F6eK4mL/5UJRgK5fjSNmvjCEPeE79/3E76vCWCRZMgXzqs+hnE5JbQsz8IM
gamqIAi+uqlz4XlR+gH1nKqUD/F2AHCiuYTn2P2KZw6P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org