Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wGHLmUJH7McXf4Zo_0yXJj2CtLo.roa
File:                     wGHLmUJH7McXf4Zo_0yXJj2CtLo.roa (raw, json)
Hash identifier:          ze+7/wYJyd/AboxuJceJPuwZf2bJJsPFo9gm6LxccXc=
Subject key identifier:   C0:61:CB:99:42:47:EC:C7:17:7F:86:68:FF:4C:97:26:3D:82:B4:BA
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       018C6E3EEB6E1EE2325747BDE6E252930AC1
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wGHLmUJH7McXf4Zo_0yXJj2CtLo.roa
Signing time:             Fri 15 Dec 2023 16:11:06 +0000
ROA not before:           Fri 15 Dec 2023 16:11:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        145.224.192.0/19 maxlen: 24
                          145.224.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6e:3e:eb:6e:1e:e2:32:57:47:bd:e6:e2:52:93:0a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: Dec 15 16:11:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c061cb994247ecc7177f8668ff4c97263d82b4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:6e:5c:7c:04:f1:37:00:8c:7d:0b:b7:9a:
                    fb:44:f7:9d:3a:21:13:94:ba:cc:df:c1:f8:05:fb:
                    81:6d:67:e5:fd:10:39:11:3d:82:cb:6a:c0:51:18:
                    de:83:70:15:e5:69:84:cb:f6:8a:2b:2f:61:6b:d2:
                    9b:81:51:ab:e6:ed:cb:9e:10:c4:a7:b7:07:39:80:
                    7b:4d:49:bb:42:33:d2:01:2f:af:02:3b:77:38:e1:
                    34:e1:8b:c6:0f:a8:a6:1b:90:e8:a9:87:e8:11:07:
                    79:05:39:1a:76:51:f2:6a:3c:e0:1b:e7:7e:48:ce:
                    71:bd:ea:12:10:2d:85:db:8d:ce:c3:41:df:29:c4:
                    cf:97:c4:a1:58:b6:eb:22:94:0b:08:9c:e1:90:5a:
                    0b:db:c9:9f:9d:f4:df:86:c8:9c:51:ac:b0:15:fa:
                    02:3e:38:2d:bd:94:41:60:38:03:7e:75:c5:ef:ec:
                    1c:6a:77:0d:2f:05:78:e3:0b:69:dc:48:d3:f2:9b:
                    93:9f:74:85:92:76:84:97:4f:92:ec:ba:56:07:e8:
                    d5:ec:99:9c:ce:0e:19:46:83:b0:ad:63:60:88:03:
                    b9:43:2c:68:af:98:38:de:a3:e6:82:5d:22:85:de:
                    bd:e9:df:f8:ae:d3:5c:da:a9:0b:3a:cd:f7:37:7f:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:61:CB:99:42:47:EC:C7:17:7F:86:68:FF:4C:97:26:3D:82:B4:BA
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/wGHLmUJH7McXf4Zo_0yXJj2CtLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.224.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:00:8a:3d:c4:ad:2a:34:3d:2e:82:6a:2b:7e:15:f9:f9:87:
         d2:54:c3:e5:ad:0b:11:fc:c8:43:c3:8f:c3:9d:32:2b:96:e3:
         7f:f3:ed:d4:04:8f:d5:d9:da:a2:13:6b:93:31:4e:7c:0a:89:
         74:7e:b2:97:36:27:be:0d:e6:f9:75:e3:00:7e:be:df:86:73:
         a0:58:a8:f5:0e:0b:ff:f5:a0:cf:11:01:ff:ee:e9:23:85:9e:
         af:98:d9:7c:9f:57:5d:4b:a8:61:c7:26:db:4c:02:66:d3:58:
         61:04:31:8d:eb:a2:1b:38:37:67:ab:43:ac:5d:8d:98:0d:a8:
         cf:b5:9b:c8:9b:d8:ca:38:3e:11:b8:4d:86:33:fa:2d:04:2e:
         eb:4e:86:b2:4b:0a:2f:38:10:6b:31:fc:ff:58:14:35:33:a7:
         30:48:1d:7d:a6:0c:02:d1:2f:19:19:9c:4c:ae:41:dd:88:65:
         98:f2:a9:65:bc:e6:12:86:dd:3c:c3:f3:06:f6:e9:45:43:e8:
         7b:37:fc:92:07:6e:12:51:12:f5:5d:87:8b:a1:4e:a1:38:e1:
         fe:9e:2a:43:f6:1c:c9:c3:db:69:65:e7:47:0c:d7:8c:b9:11:
         c1:39:a8:65:08:31:24:d2:79:17:57:6b:57:81:2f:66:80:89:
         58:db:08:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxuPutuHuIyV0e95uJSkwrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh
NjY1OTkwHhcNMjMxMjE1MTYxMTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDYxY2I5OTQyNDdlY2M3MTc3Zjg2NjhmZjRjOTcyNjNkODJiNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWFuXHwE8TcAjH0Lt5r7RPedOiET
lLrM38H4BfuBbWfl/RA5ET2Cy2rAURjeg3AV5WmEy/aKKy9ha9KbgVGr5u3LnhDE
p7cHOYB7TUm7QjPSAS+vAjt3OOE04YvGD6imG5DoqYfoEQd5BTkadlHyajzgG+d+
SM5xveoSEC2F243Ow0HfKcTPl8ShWLbrIpQLCJzhkFoL28mfnfTfhsicUaywFfoC
PjgtvZRBYDgDfnXF7+wcancNLwV44wtp3EjT8puTn3SFknaEl0+S7LpWB+jV7Jmc
zg4ZRoOwrWNgiAO5Qyxor5g43qPmgl0ihd696d/4rtNc2qkLOs33N39QSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBhy5lCR+zHF3+GaP9MlyY9grS6MB8GA1UdIwQY
MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt
OTI5ZjEwNjYzMGYxLzEvd0dITG1VSkg3TWNYZjRab18weVhKajJDdExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx
LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkeDAMA0G
CSqGSIb3DQEBCwUAA4IBAQAiAIo9xK0qND0ugmorfhX5+YfSVMPlrQsR/MhDw4/D
nTIrluN/8+3UBI/V2dqiE2uTMU58Col0frKXNie+Deb5deMAfr7fhnOgWKj1Dgv/
9aDPEQH/7ukjhZ6vmNl8n1ddS6hhxybbTAJm01hhBDGN66IbODdnq0OsXY2YDajP
tZvIm9jKOD4RuE2GM/otBC7rToaySwovOBBrMfz/WBQ1M6cwSB19pgwC0S8ZGZxM
rkHdiGWY8qllvOYSht08w/MG9ulFQ+h7N/ySB24SURL1XYeLoU6hOOH+nipD9hzJ
w9tpZedHDNeMuRHBOahlCDEk0nkXV2tXgS9mgIlY2wgn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:45 2024 by rpki-client on console-ams.rpki-client.org