Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WYGCzih3qvh8E7MaYvIMeMjf7Wo.roa
File:                     WYGCzih3qvh8E7MaYvIMeMjf7Wo.roa (raw, json)
Hash identifier:          0hi5NQzM521QaKL4oj6RwN22gpxbjd0f29LulZguE6M=
Subject key identifier:   59:81:82:CE:28:77:AA:F8:7C:13:B3:1A:62:F2:0C:78:C8:DF:ED:6A
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018E42963AC502F33FE7704236A94E2B4F27
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WYGCzih3qvh8E7MaYvIMeMjf7Wo.roa
Signing time:             Fri 15 Mar 2024 14:48:45 +0000
ROA not before:           Fri 15 Mar 2024 14:48:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     147291
IP address blocks:        93.123.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 05:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:42:96:3a:c5:02:f3:3f:e7:70:42:36:a9:4e:2b:4f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar 15 14:48:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=598182ce2877aaf87c13b31a62f20c78c8dfed6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:37:30:75:50:cb:39:fd:f2:ad:8c:63:c6:
                    74:82:d0:10:8b:96:63:f8:8d:a1:9a:d5:eb:ae:d9:
                    25:0c:30:e5:01:bb:54:24:90:03:53:fe:02:c5:2f:
                    18:23:4e:b7:c7:b0:15:a9:8b:cf:90:7c:74:b3:76:
                    5e:ee:76:67:98:7c:d8:89:45:fb:6a:79:ff:23:36:
                    66:fa:08:76:23:d9:a3:f3:fc:da:5e:35:1d:63:09:
                    a7:e9:0d:b2:a7:07:b9:b4:82:bf:b4:8e:1a:81:7a:
                    df:68:a7:d8:b9:9c:ed:0f:62:32:ff:38:64:23:1d:
                    b8:96:c1:c3:52:9a:23:a0:79:2f:55:9d:bc:e0:0b:
                    45:bd:58:59:55:1e:37:b0:ae:1d:ee:21:8a:73:9c:
                    79:dd:ad:97:03:b6:28:e8:e7:d1:12:21:87:7f:e0:
                    3f:f8:ef:7f:80:c7:48:39:b1:c4:52:fd:26:6c:ac:
                    dc:50:85:fd:12:b7:5e:a5:92:ad:2c:75:19:86:87:
                    df:91:78:15:5b:99:59:3d:78:bd:01:48:a7:ff:2a:
                    c4:97:ed:c5:bd:e8:18:64:ad:36:46:2c:cb:b7:db:
                    48:f5:2a:59:e5:17:1d:84:8a:35:5d:f9:6a:60:ee:
                    16:23:7a:7e:78:3b:04:e7:3d:9a:8c:af:a8:13:d6:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:81:82:CE:28:77:AA:F8:7C:13:B3:1A:62:F2:0C:78:C8:DF:ED:6A
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WYGCzih3qvh8E7MaYvIMeMjf7Wo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:99:a0:4e:11:f3:2a:db:39:41:f6:e0:98:78:60:ee:48:
         9d:e6:64:86:b0:43:28:42:89:f2:75:52:ac:08:97:da:a7:bc:
         16:ce:98:e9:f1:19:63:c3:21:c2:c5:fa:d3:89:28:25:00:8d:
         b8:dc:18:9b:f2:f4:13:23:05:5f:b0:56:f7:af:04:8e:d6:08:
         4e:ea:4b:10:1b:06:26:6a:41:2d:a4:dc:6b:a7:65:6f:0e:d1:
         27:63:bd:14:9c:ca:98:ea:69:1d:2e:97:db:25:e5:36:51:48:
         46:83:e0:bc:66:ef:44:3d:fa:eb:2e:21:f8:78:e1:c0:79:00:
         6a:d5:24:c5:04:ec:59:09:41:53:f7:bc:42:54:5b:2b:3b:5d:
         37:67:63:06:62:8c:7a:e4:fe:f3:b7:88:7e:f6:ec:02:37:a5:
         c7:ee:f0:f7:49:b0:f3:51:b7:c9:b5:df:a3:d7:0a:2c:ed:fa:
         05:eb:59:1f:87:6f:4c:2b:88:1b:23:bb:78:2b:aa:47:b5:a0:
         94:54:67:1d:9a:2d:14:23:ce:a4:16:cd:5f:0b:27:b5:3f:3f:
         76:1e:c5:ac:ad:87:d7:b5:ec:38:cd:73:49:fa:d0:e6:ff:b2:
         9b:76:da:a0:8b:75:a3:ef:c5:5d:fc:72:34:bc:62:a1:58:d8:
         e5:1f:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 09:14:56 2024 by rpki-client on console-ams.rpki-client.org