Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WDuuno-C_eXJKpKb6XUOMXcZR_Y.roa
File:                     WDuuno-C_eXJKpKb6XUOMXcZR_Y.roa (raw, json)
Hash identifier:          ePUIqAz1dNetqP2ZbghF4W+pmQMjUXA4Ut3/o+zhWSg=
Subject key identifier:   58:3B:AE:9E:8F:82:FD:E5:C9:2A:92:9B:E9:75:0E:31:77:19:47:F6
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01875802AAE0B0F44355CCE396A9D2B4FB18
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WDuuno-C_eXJKpKb6XUOMXcZR_Y.roa
Signing time:             Thu 06 Apr 2023 19:19:42 +0000
ROA not before:           Thu 06 Apr 2023 19:19:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2856
IP address blocks:        212.192.212.0/22 maxlen: 22
                          212.192.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 06 Apr 2023 22:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:58:02:aa:e0:b0:f4:43:55:cc:e3:96:a9:d2:b4:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr  6 19:19:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=583bae9e8f82fde5c92a929be9750e31771947f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:c8:ed:6c:0c:64:df:b2:93:0e:15:99:2b:
                    eb:df:4f:57:17:77:29:b0:39:cc:54:b3:76:39:d5:
                    71:57:aa:78:bb:24:e6:c1:ca:c2:17:f5:13:00:d0:
                    f5:83:03:ec:cf:d7:db:f6:7f:6f:57:89:e3:72:0f:
                    79:a3:4b:20:25:2c:4c:8d:79:2b:44:6e:2c:b3:d2:
                    2e:67:af:07:8a:af:13:73:d3:e6:e7:14:46:f7:99:
                    7b:c1:82:d1:84:cf:db:26:95:88:d7:1b:66:a4:cb:
                    20:d6:8a:5c:88:c2:5b:53:5d:61:f6:9a:e8:5b:6a:
                    c9:d1:ce:65:ec:46:da:8c:98:53:58:5c:8a:20:71:
                    c6:ff:b8:f1:54:0a:f8:28:9f:8b:80:3f:69:59:6d:
                    c2:93:5d:33:e8:8a:e6:8b:48:b9:03:f5:79:a4:ee:
                    03:77:6a:04:b8:c4:ba:e3:c3:68:d2:15:36:f2:54:
                    7e:69:68:28:6c:ed:d5:b3:bb:4c:7f:07:e1:2f:41:
                    3b:be:c1:6b:a9:72:fc:60:ae:19:ed:fc:4f:e4:83:
                    68:7d:a9:2d:51:96:d6:9a:4f:39:dc:ba:6e:39:61:
                    1e:23:a2:7f:0f:10:57:7e:d1:4e:e0:a6:8a:18:6b:
                    50:26:f9:77:c4:2a:48:21:15:33:11:01:6f:fe:29:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:AE:9E:8F:82:FD:E5:C9:2A:92:9B:E9:75:0E:31:77:19:47:F6
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WDuuno-C_eXJKpKb6XUOMXcZR_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.192.212.0/22
                  212.192.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:7d:a9:c2:55:ce:72:1c:5b:8d:09:29:09:54:a8:c0:53:
         e2:b9:92:a2:b2:4e:9d:fe:07:91:4e:98:1e:75:cb:ab:74:e0:
         b4:42:1c:96:02:65:8c:92:8c:73:9a:a1:ae:ef:88:8f:e9:2a:
         dc:7c:1a:ef:3e:05:01:51:4e:56:3d:08:fc:40:3f:14:ea:63:
         09:32:2f:ff:be:b6:dd:d0:aa:55:de:2b:f4:72:31:e2:4a:12:
         e0:93:de:f9:f6:3b:ca:2f:2d:a8:d8:76:c2:e5:47:97:d5:77:
         a1:2c:6e:e3:c4:a6:3f:79:aa:8e:26:6a:0c:fb:bf:c7:be:86:
         eb:06:b7:50:4e:b8:04:0c:19:05:a5:89:e9:1d:9d:f7:17:73:
         16:bc:36:b9:32:aa:f5:9a:de:98:91:f8:59:3e:72:5c:83:a5:
         b8:7e:36:bf:ca:4b:d0:11:27:33:8a:ba:df:77:4c:df:7d:34:
         6b:30:38:a3:14:05:c6:8c:7d:95:61:43:2f:16:ca:03:99:d2:
         18:78:f0:46:28:52:2d:db:81:10:99:e8:bb:47:4e:93:2c:da:
         8d:00:c5:8c:e3:33:35:3d:4a:25:a2:c9:01:63:3c:70:9e:46:
         88:9e:9f:7b:df:c5:1d:9d:e2:ae:fa:59:ce:de:b8:9b:7e:4c:
         8d:8b:7f:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdYAqrgsPRDVczjlqnStPsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA2MTkxOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODNiYWU5ZThmODJmZGU1YzkyYTkyOWJlOTc1MGUzMTc3MTk0N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTfI7WwMZN+ykw4VmSvr309XF3cp
sDnMVLN2OdVxV6p4uyTmwcrCF/UTAND1gwPsz9fb9n9vV4njcg95o0sgJSxMjXkr
RG4ss9IuZ68Hiq8Tc9Pm5xRG95l7wYLRhM/bJpWI1xtmpMsg1opciMJbU11h9pro
W2rJ0c5l7EbajJhTWFyKIHHG/7jxVAr4KJ+LgD9pWW3Ck10z6Irmi0i5A/V5pO4D
d2oEuMS648No0hU28lR+aWgobO3Vs7tMfwfhL0E7vsFrqXL8YK4Z7fxP5INofakt
UZbWmk853LpuOWEeI6J/DxBXftFO4KaKGGtQJvl3xCpIIRUzEQFv/inNRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFg7rp6Pgv3lySqSm+l1DjF3GUf2MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvV0R1dW5vLUNfZVhKS3BLYjZYVU9NWGNaUl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1MDUAwQC
1MD8MA0GCSqGSIb3DQEBCwUAA4IBAQAuGH2pwlXOchxbjQkpCVSowFPiuZKisk6d
/geRTpgedcurdOC0QhyWAmWMkoxzmqGu74iP6SrcfBrvPgUBUU5WPQj8QD8U6mMJ
Mi//vrbd0KpV3iv0cjHiShLgk9759jvKLy2o2HbC5UeX1XehLG7jxKY/eaqOJmoM
+7/HvobrBrdQTrgEDBkFpYnpHZ33F3MWvDa5Mqr1mt6YkfhZPnJcg6W4fja/ykvQ
ESczirrfd0zffTRrMDijFAXGjH2VYUMvFsoDmdIYePBGKFIt24EQmei7R06TLNqN
AMWM4zM1PUoloskBYzxwnkaInp9738UdneKu+lnO3ribfkyNi3+Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org