Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa
File:                     WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa (raw, json)
Hash identifier:          WlwQ02EXs1L4IlFG9hsdNjT0bZcGGV+GMTTTOQ8Aem0=
Subject key identifier:   59:3D:8F:6B:C9:FF:B1:44:C7:FC:3C:8D:3E:44:19:CF:C8:27:6B:EB
Certificate issuer:       /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial:       01856F0B6B2B186A3DE20558726F427D60C6
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa
Signing time:             Sun 01 Jan 2023 20:34:57 +0000
ROA not before:           Sun 01 Jan 2023 20:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47232
IP address blocks:        185.214.192.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:6b:2b:18:6a:3d:e2:05:58:72:6f:42:7d:60:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
        Validity
            Not Before: Jan  1 20:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=593d8f6bc9ffb144c7fc3c8d3e4419cfc8276beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:f1:3e:39:30:33:2a:3c:c8:65:44:36:3d:
                    9d:10:f6:5a:e6:90:f4:44:74:ea:4e:01:dd:0b:c2:
                    14:e8:c5:8d:f1:39:c3:36:6b:7b:33:7b:f8:8c:2a:
                    4b:a7:38:67:fd:a2:0b:d6:a1:f2:2b:09:c8:ee:97:
                    24:b9:aa:20:c6:d3:60:1a:50:4c:2c:2f:c4:9b:bb:
                    ac:1e:e2:53:0e:c3:64:dc:f2:d1:c8:bd:9e:82:53:
                    fb:d1:b9:e3:59:59:1e:80:8b:87:b7:eb:64:97:32:
                    8d:14:fd:da:f3:8a:f5:28:b6:df:9d:e9:0c:ac:51:
                    b6:f3:65:d2:fe:a9:5b:55:90:68:0d:cc:93:f2:3b:
                    9f:c0:30:86:36:0f:5c:39:95:8f:c4:0d:1f:79:0a:
                    e1:66:98:0c:b2:d5:fc:87:0a:e7:63:c4:76:16:4e:
                    85:80:94:29:73:66:af:3e:19:8e:6d:65:95:44:b7:
                    a6:e9:87:9a:3d:06:8d:29:21:4e:85:e2:02:fa:58:
                    01:ed:e7:c9:af:2b:1c:25:e7:7c:7c:6a:25:58:8e:
                    4a:a6:5f:54:4a:c5:7f:17:da:93:2b:5c:03:b9:b4:
                    ba:d4:0c:cf:02:c8:f7:7c:af:a5:06:fe:56:46:3a:
                    00:eb:53:44:a9:d5:91:1c:83:64:a9:2a:6a:37:cd:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:8F:6B:C9:FF:B1:44:C7:FC:3C:8D:3E:44:19:CF:C8:27:6B:EB
            X509v3 Authority Key Identifier:
                keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/WT2Pa8n_sUTH_DyNPkQZz8gna-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:ca:5f:45:94:0a:e5:fd:56:f8:bd:6e:1e:b5:02:d8:04:cf:
         b9:66:38:60:05:b8:3c:d8:14:46:7d:5c:82:58:8b:8e:8c:1a:
         64:97:77:48:20:2c:e5:41:5e:ec:4d:76:bc:5a:07:7d:27:04:
         40:0c:68:f6:59:42:a6:e4:8e:45:d0:0e:87:e8:8c:df:53:84:
         23:39:67:44:24:01:5f:be:11:3e:1a:31:8c:a5:2f:0a:5c:26:
         d2:7d:80:c0:17:b9:b2:79:e6:3a:df:24:73:69:7d:ee:8c:27:
         96:68:c4:d4:85:3c:99:6b:39:fa:92:30:41:7d:f7:a8:6d:ef:
         83:3e:34:1e:dc:c6:b4:21:18:47:b8:45:31:cf:ee:4a:0b:12:
         36:14:c7:8d:4a:a4:6c:9e:78:92:82:07:96:eb:17:c5:ef:4f:
         aa:a2:69:fc:0d:1b:11:53:f3:68:db:85:01:1b:a0:8c:e2:12:
         3c:0b:e5:38:34:41:47:92:a4:88:39:4b:d1:c4:66:30:78:a6:
         0e:44:c5:53:5b:5e:8e:d1:b0:ba:90:a3:75:56:ec:72:9e:bc:
         c1:cb:6c:1a:69:95:d1:44:52:3a:d5:1f:8c:64:33:50:a9:d7:
         cb:ca:88:4b:ac:46:9d:b1:71:3c:0d:db:be:65:de:23:29:81:
         4f:0e:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org