Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/WyNfcCMjrSwKwk_STu_OypPm2tI.roa
File:                     WyNfcCMjrSwKwk_STu_OypPm2tI.roa (raw, json)
Hash identifier:          KpEVFFr5xLpifKSrxlavptEcbfszb/P6ugVHm+g8jHA=
Subject key identifier:   5B:23:5F:70:23:23:AD:2C:0A:C2:4F:D2:4E:EF:CE:CA:93:E6:DA:D2
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       018A38BC9D130A58F6BF67491D765FB2D534
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/WyNfcCMjrSwKwk_STu_OypPm2tI.roa
Signing time:             Sun 27 Aug 2023 20:43:19 +0000
ROA not before:           Sun 27 Aug 2023 20:43:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9123
IP address blocks:        185.84.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 19:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:38:bc:9d:13:0a:58:f6:bf:67:49:1d:76:5f:b2:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug 27 20:43:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b235f702323ad2c0ac24fd24eefceca93e6dad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:97:c8:98:62:09:f9:c1:79:7b:4a:c7:b2:
                    b6:9b:92:91:1a:a9:c9:bb:60:93:e5:30:df:8a:6c:
                    af:ea:e1:2b:2c:50:f7:c2:82:c5:1f:76:c8:0e:5a:
                    ef:81:53:82:d8:d0:a1:6e:11:c4:e6:c6:17:96:b6:
                    0c:f2:60:74:07:84:6b:44:a0:8b:75:d2:7e:7e:30:
                    88:ce:e2:78:f9:7d:73:69:53:2b:5e:9f:78:10:dc:
                    0a:7b:df:02:7e:71:0e:80:8d:0a:1e:fc:6b:fe:62:
                    63:b9:9a:85:13:d7:41:f8:3f:4e:a2:9f:8c:24:80:
                    12:13:00:f7:79:0f:21:42:ec:61:e8:9a:71:f9:24:
                    42:0e:33:b0:99:3b:22:65:ae:7a:d4:89:b7:8e:f4:
                    ed:68:9a:f1:af:51:a3:e7:3a:7e:61:ad:bb:8d:09:
                    1f:37:2b:7c:87:bb:c7:f1:4c:b6:ff:af:30:3b:28:
                    e1:4c:db:59:8f:d6:f0:3b:2e:65:b2:7c:1b:b7:c6:
                    9d:08:49:50:10:06:b8:77:3c:09:ac:82:41:a3:c9:
                    2b:7d:bf:4f:15:83:61:e3:d8:2b:46:1c:cb:39:c5:
                    df:7b:a9:95:20:ed:14:f0:b3:80:0a:55:3e:51:54:
                    7a:7b:d3:e9:a5:ba:43:3b:4d:b7:3c:59:89:f9:9c:
                    b5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:5F:70:23:23:AD:2C:0A:C2:4F:D2:4E:EF:CE:CA:93:E6:DA:D2
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/WyNfcCMjrSwKwk_STu_OypPm2tI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:a0:5f:cc:3a:71:b5:f0:f0:4a:f2:a0:8d:d7:b3:cf:85:63:
         48:73:9c:9d:88:01:ed:88:9f:29:42:b0:2a:55:4a:23:5e:bf:
         5d:39:65:a4:12:5c:c7:ea:40:e1:5f:55:a1:b2:27:ca:1d:ab:
         04:9a:80:ea:a3:69:58:9c:0e:25:bd:c3:ad:55:88:5c:ac:16:
         0e:91:6b:e9:21:e2:c3:fb:36:af:47:10:02:1e:57:cd:01:bf:
         56:8c:77:d0:51:ea:bb:6b:b2:9a:ad:6a:b0:de:ed:69:d8:bb:
         fc:b9:5d:3d:72:5b:09:c4:64:ae:30:62:4c:01:37:40:a0:63:
         b6:21:93:2a:2e:49:bd:c8:1f:26:2b:47:a8:68:6d:a2:0c:94:
         45:d9:72:29:52:10:35:18:06:4b:d7:b4:49:12:53:b9:ea:6b:
         cf:0f:64:8b:5f:42:e1:7c:41:2f:2e:80:fd:81:1c:d6:32:d5:
         24:55:10:18:12:97:5c:87:9d:60:06:43:cc:88:03:46:22:58:
         47:6e:13:6b:14:b1:41:6d:61:16:a6:18:09:08:b8:70:f5:16:
         03:7f:32:5e:0d:b6:51:8b:34:16:b0:f3:6e:6b:f6:7b:27:b4:
         9e:60:1d:9f:f2:f3:11:ba:51:c2:2a:dd:e9:28:66:82:0a:51:
         66:49:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org