Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wIK_E7CIbt8JtQp4WRA57bm8quY.roa
File:                     wIK_E7CIbt8JtQp4WRA57bm8quY.roa (raw, json)
Hash identifier:          QGWjBqSYBKVX2cjgelTc3nUhAiWTjdWfSYkEvu96OMs=
Subject key identifier:   C0:82:BF:13:B0:88:6E:DF:09:B5:0A:78:59:10:39:ED:B9:BC:AA:E6
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       018964895A7A3555AFE2D09DFA34B147A4EE
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wIK_E7CIbt8JtQp4WRA57bm8quY.roa
Signing time:             Mon 17 Jul 2023 15:47:50 +0000
ROA not before:           Mon 17 Jul 2023 15:47:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        194.156.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 16:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:89:5a:7a:35:55:af:e2:d0:9d:fa:34:b1:47:a4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jul 17 15:47:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c082bf13b0886edf09b50a78591039edb9bcaae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:e6:19:41:d3:21:63:9b:d9:45:b0:3a:ee:
                    62:f1:50:fa:0d:31:71:d6:ad:53:06:da:9f:4d:a7:
                    8d:fe:6e:b7:8e:ab:21:6a:d6:dd:e4:51:2f:f3:f3:
                    44:7e:e8:77:97:44:18:44:7b:08:b2:90:e1:15:f6:
                    d1:bf:2c:a2:65:78:d6:79:e6:4a:13:54:15:f4:43:
                    5f:43:3e:14:65:38:26:72:d6:3a:5b:52:18:be:00:
                    ed:23:df:e6:d1:b5:dd:fa:05:6a:6d:64:85:7e:2c:
                    95:d2:93:fe:11:6f:09:87:c1:67:a2:2d:ce:92:72:
                    c0:0b:ec:4d:5f:62:f4:0c:04:76:a7:a5:57:53:70:
                    a5:9f:d3:fd:90:24:e2:ff:3a:57:2c:ca:4e:18:41:
                    64:69:9d:6a:6a:56:3b:af:5e:fe:d0:44:5c:66:90:
                    af:ec:c9:17:c7:3f:e9:ec:bd:7e:97:23:8e:7e:a1:
                    34:6d:13:fb:c0:81:55:cb:c7:ed:86:84:b2:1d:a2:
                    8b:f4:c2:11:41:89:a8:b1:21:5a:3d:cc:55:d0:6d:
                    48:7f:37:39:aa:ec:ec:fa:ff:7c:70:55:5c:5c:ce:
                    30:14:22:6d:db:44:99:d6:74:28:84:ca:65:6a:2a:
                    d0:d4:c0:ed:f2:9e:29:ff:b6:c9:b3:10:94:34:f6:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:BF:13:B0:88:6E:DF:09:B5:0A:78:59:10:39:ED:B9:BC:AA:E6
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wIK_E7CIbt8JtQp4WRA57bm8quY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:2f:e1:10:9c:61:d2:a7:c3:d9:1d:67:0b:25:3f:87:11:
         7c:d7:a0:4a:a3:11:5b:e0:bd:5c:f2:78:3a:57:c7:84:83:b4:
         75:08:c1:af:5b:1c:ea:4f:58:00:f1:4c:95:97:9a:32:de:e1:
         85:01:b0:b4:ee:73:d1:c5:21:e6:2c:1e:95:81:40:ab:df:a9:
         01:26:ee:bb:c1:48:66:82:d1:d8:64:1a:ac:d9:61:11:42:44:
         2a:70:26:0e:c9:35:37:7c:53:21:94:7e:3b:3c:bf:6f:33:04:
         ef:55:05:9f:82:4c:58:8c:1c:f6:24:b8:20:96:17:3a:0c:67:
         e0:5a:04:c2:83:e5:be:50:2f:a1:00:a1:80:56:44:8f:a7:51:
         38:e1:09:16:7d:7d:37:7b:03:6c:4e:00:3d:28:ce:d9:71:3b:
         78:92:6b:1b:6b:d6:1a:e1:b4:4f:5f:dc:88:d9:11:70:2b:73:
         f4:f5:45:03:20:25:ed:b0:6f:4c:87:35:11:50:e8:b1:b7:fd:
         ed:d1:fe:8a:de:08:13:16:29:a4:d7:5b:ed:b9:1f:44:d8:27:
         6e:75:74:07:ae:89:30:ba:c4:fc:22:aa:5d:6d:ac:06:34:27:
         b4:a9:e5:5c:38:60:26:d0:da:0e:cd:cb:96:9e:9d:04:11:6e:
         97:b4:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org