Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/wiOlOlo_oW2MLH_xcSyI_nunIIo.roa
File:                     wiOlOlo_oW2MLH_xcSyI_nunIIo.roa (raw, json)
Hash identifier:          DJVVwPVup7V9Zpy+O2+1DASVQzeS8ybst0/pthOyb4k=
Subject key identifier:   C2:23:A5:3A:5A:3F:A1:6D:8C:2C:7F:F1:71:2C:88:FE:7B:A7:20:8A
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       018704F8CD91ABEDD01BBF77AB79EDAB2868
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/wiOlOlo_oW2MLH_xcSyI_nunIIo.roa
Signing time:             Tue 21 Mar 2023 16:20:27 +0000
ROA not before:           Tue 21 Mar 2023 16:20:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50214
IP address blocks:        193.232.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 Nov 2023 08:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:04:f8:cd:91:ab:ed:d0:1b:bf:77:ab:79:ed:ab:28:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Mar 21 16:20:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c223a53a5a3fa16d8c2c7ff1712c88fe7ba7208a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:cf:3c:31:7e:a4:a9:79:e7:a6:b5:5e:ad:
                    3e:90:18:ff:f3:ca:6e:e3:1d:c8:f1:ea:3d:41:1c:
                    aa:40:32:5b:8e:c8:6b:42:0d:b8:8a:fa:2e:01:a9:
                    33:59:bf:08:49:3c:6d:72:af:2a:04:2c:3b:85:22:
                    bc:03:7f:3e:28:65:8e:bc:2c:04:4d:15:80:57:14:
                    f1:da:c6:b6:f1:b1:7f:7c:66:c5:0d:a4:93:b2:c3:
                    a8:ea:54:10:a7:da:76:bb:b9:d3:51:05:46:1a:f2:
                    b7:6b:38:78:11:8a:a8:f8:b9:03:8e:21:df:9f:e0:
                    a5:28:2c:49:98:25:65:e4:3b:03:7e:b4:5a:29:eb:
                    e0:a7:70:66:35:2f:f3:53:14:0a:f5:70:ff:c2:6c:
                    72:be:d4:e7:7a:e1:fc:3d:04:14:fd:d3:b2:7f:8d:
                    30:b7:ec:30:21:1e:77:55:32:be:1e:1c:a2:d3:c8:
                    52:dc:61:50:b0:a5:a1:b5:15:7a:e7:f8:7c:2c:a9:
                    0b:18:0d:63:c3:01:10:2b:af:3e:a2:c3:42:0e:3e:
                    d5:c7:6a:d8:72:e6:91:eb:42:d7:4b:47:76:81:8d:
                    0a:0a:b1:37:36:cb:a5:37:c0:f3:88:1c:32:35:3c:
                    a5:68:ff:76:93:53:15:21:b9:af:54:79:ec:1f:e1:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:A5:3A:5A:3F:A1:6D:8C:2C:7F:F1:71:2C:88:FE:7B:A7:20:8A
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/wiOlOlo_oW2MLH_xcSyI_nunIIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.232.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:b0:ec:43:a2:58:09:17:81:f9:21:5c:4c:f9:97:1d:3d:
         a4:80:8c:a2:3e:03:ef:67:f6:40:10:08:21:30:78:e5:84:89:
         6c:b8:3b:06:9e:7b:1b:8f:68:98:40:ee:70:be:95:e8:f9:5c:
         d2:ed:a0:19:e6:72:8b:e6:d0:ca:ee:34:33:3b:75:de:e9:25:
         cf:7f:15:0f:ce:c9:44:ed:e3:5e:77:f8:9b:4c:ac:6a:c9:b4:
         5c:5c:75:09:b9:09:47:b5:8b:c1:a3:7f:6f:d3:f1:47:fb:fe:
         71:0d:87:74:ab:4b:29:f3:84:93:5c:fd:54:18:f5:d2:d3:47:
         65:3d:b3:18:4d:55:38:c5:19:7d:20:12:59:47:ce:86:20:21:
         e6:64:08:ad:35:33:76:81:8a:07:72:43:a9:df:d5:fc:ab:1f:
         ad:f7:86:a6:28:7a:d9:07:d2:53:68:8d:5c:00:a3:51:39:14:
         7f:81:8c:93:d8:f9:2c:e5:fc:32:49:cb:bb:d6:41:19:e8:c6:
         e6:fa:b9:1c:fe:ec:24:fc:4c:69:b4:6b:5f:51:c7:c2:45:b6:
         b6:00:f6:21:46:1b:dc:71:dc:f7:10:9b:6d:55:22:95:a3:9d:
         72:7f:c0:be:b3:a8:ff:62:66:59:6f:ac:ff:52:f1:ea:72:b9:
         ef:47:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org