Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WMwWAhj27kF_gWEAlAxWCvzZLk8.roa
File:                     WMwWAhj27kF_gWEAlAxWCvzZLk8.roa (raw, json)
Hash identifier:          8jVXeBuKdePlYA2O+JDq86KU1UCGkBJGeAhJaeeU8e0=
Subject key identifier:   58:CC:16:02:18:F6:EE:41:7F:81:61:00:94:0C:56:0A:FC:D9:2E:4F
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       018965139EDF505CA64F3716DF8AAD988EC8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WMwWAhj27kF_gWEAlAxWCvzZLk8.roa
Signing time:             Mon 17 Jul 2023 18:18:51 +0000
ROA not before:           Mon 17 Jul 2023 18:18:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200385
IP address blocks:        46.34.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 19:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:65:13:9e:df:50:5c:a6:4f:37:16:df:8a:ad:98:8e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jul 17 18:18:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58cc160218f6ee417f816100940c560afcd92e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:6a:58:f5:be:a2:54:87:80:5b:82:f4:0a:
                    54:e9:d7:b0:95:6e:80:cc:1d:1a:4f:bb:30:9d:9e:
                    11:c2:00:9b:15:47:02:6d:30:60:89:60:fe:91:6b:
                    36:ce:cb:65:bf:2e:2d:d4:0c:7b:60:3c:73:a9:99:
                    51:b8:45:d9:21:53:35:23:31:d6:11:68:b2:dd:05:
                    93:f5:fa:53:7b:dd:11:69:08:9e:1b:89:b8:06:7b:
                    92:af:b3:b8:7d:7a:34:fd:d6:33:61:79:24:d1:57:
                    2e:b8:44:c0:20:99:1e:ee:84:57:a6:25:f9:49:36:
                    66:93:9e:29:06:2b:66:87:40:22:0c:f4:03:e4:8b:
                    9f:b1:8d:df:52:5d:ea:ca:28:78:98:6f:e9:61:3c:
                    1e:92:21:61:b4:d0:5e:d7:15:9c:b9:f1:ad:59:35:
                    f4:d8:81:35:38:b1:69:ba:87:6f:d2:a7:83:43:f6:
                    c9:1e:44:4e:5c:1d:bd:5d:a8:5c:95:f1:6e:9b:2d:
                    1c:06:9c:fd:61:0b:1f:49:98:54:97:89:e0:88:eb:
                    ea:61:16:8e:a4:55:d5:c1:9f:28:35:ea:54:25:22:
                    3a:fc:fb:29:fb:a9:49:87:b9:4b:13:b3:19:e6:d3:
                    16:0f:e1:e4:c3:30:cb:f0:c0:7d:6c:3f:d8:b2:31:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CC:16:02:18:F6:EE:41:7F:81:61:00:94:0C:56:0A:FC:D9:2E:4F
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WMwWAhj27kF_gWEAlAxWCvzZLk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:9f:9d:36:37:59:df:38:7a:85:23:ab:90:6c:80:2c:2d:
         0d:71:e0:ab:ae:06:1c:da:77:30:7e:1b:aa:8a:11:a4:c4:7b:
         1d:2c:6e:92:91:f2:ea:f4:09:77:10:bf:65:14:90:f6:f6:80:
         db:63:6d:21:88:f3:07:eb:9b:47:b9:fe:8e:c8:7b:e6:84:bb:
         35:fe:a4:5f:2b:2c:43:c0:68:60:aa:2d:6b:48:5e:aa:94:ec:
         fb:a9:ad:ef:25:8a:49:18:81:d2:36:e8:b1:5a:a1:88:05:9d:
         fe:06:e1:5d:2f:29:50:47:b8:90:e5:71:6c:07:c8:cd:04:1c:
         f0:e3:8d:f4:8e:e7:d4:73:78:cb:99:ac:d9:32:47:a5:0e:21:
         0d:eb:60:3d:7a:e7:61:8b:63:0f:40:a8:c2:0b:a1:e0:d5:1a:
         88:70:15:0c:83:74:d7:74:2d:81:53:40:3b:a9:68:0a:44:b9:
         19:f3:f5:b0:b2:3f:a8:b6:b2:2b:3d:b4:5a:49:b2:18:38:f6:
         4d:44:bf:4c:35:b1:14:b1:07:0b:72:22:c7:1b:13:41:cd:ff:
         9a:af:f9:19:35:ab:54:ec:b6:49:8b:6a:d3:33:33:9f:93:7b:
         c3:9c:5b:01:cf:e0:58:30:c7:ff:02:e9:cf:61:91:38:0f:f9:
         66:1c:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org