Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wG-XLYRvUDAv67kNJIUCuA3LHys.roa
File:                     wG-XLYRvUDAv67kNJIUCuA3LHys.roa (raw, json)
Hash identifier:          o2N9Jz3jHlf3tk2N4N/grDAEHZgTgEIeO74R8vJkU+A=
Subject key identifier:   C0:6F:97:2D:84:6F:50:30:2F:EB:B9:0D:24:85:02:B8:0D:CB:1F:2B
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01918AB6D35A490E55C3E1E131A4FB1B3B4C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wG-XLYRvUDAv67kNJIUCuA3LHys.roa
Signing time:             Sun 25 Aug 2024 18:05:22 +0000
ROA not before:           Sun 25 Aug 2024 18:05:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214347
IP address blocks:        5.83.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8a:b6:d3:5a:49:0e:55:c3:e1:e1:31:a4:fb:1b:3b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Aug 25 18:05:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c06f972d846f50302febb90d248502b80dcb1f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:18:83:f5:6c:44:56:a5:de:f8:a8:f2:c0:
                    c9:65:3f:13:12:c1:04:f9:08:e8:c2:5f:09:1d:5a:
                    82:f7:81:24:8d:3b:d2:97:2b:9f:04:76:ce:94:f8:
                    44:54:73:f5:d6:c2:b5:08:d5:54:b8:91:ab:1e:84:
                    3b:63:72:11:36:fe:6d:e4:44:4d:18:79:3b:37:37:
                    8d:6f:9e:5b:0f:f8:fc:c8:6d:b3:91:33:3c:fe:e7:
                    b6:7b:7a:ff:06:8a:58:ce:54:b2:86:0a:04:a9:f3:
                    4a:63:ee:42:57:31:37:2a:b6:7d:14:9e:e1:54:e8:
                    04:f1:1b:b3:1f:4f:09:65:29:b7:4b:a5:05:69:40:
                    97:fb:de:5b:33:00:e9:66:5e:a9:25:01:f7:09:35:
                    ad:61:9b:0c:58:83:80:8e:95:57:04:ea:72:ae:33:
                    71:8e:ff:0a:0a:98:f5:17:8a:fd:8c:28:42:87:ff:
                    a3:72:f1:97:04:bc:07:fc:f3:7d:11:36:bd:52:9b:
                    e4:2e:c2:4d:04:bf:68:40:5f:bf:89:62:f3:af:53:
                    25:19:1b:81:6e:73:23:26:41:ad:ab:a5:88:2c:c5:
                    1b:2f:2a:b5:8c:82:46:71:13:fb:2d:2e:53:0d:8b:
                    67:ce:ff:64:a4:17:6e:e2:69:4d:c0:02:5d:eb:b5:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:97:2D:84:6F:50:30:2F:EB:B9:0D:24:85:02:B8:0D:CB:1F:2B
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wG-XLYRvUDAv67kNJIUCuA3LHys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:b4:c7:56:db:90:e9:e3:49:d8:1f:4b:93:b5:44:c1:1b:
         e5:18:eb:ef:f0:ae:e8:56:6a:64:92:b7:28:ca:5e:07:32:6c:
         0e:d0:11:77:60:7d:b6:91:e7:0e:9d:45:61:a8:1f:3b:7d:a8:
         71:c5:80:52:ea:57:4a:82:28:54:a0:aa:d6:6f:c2:44:4c:f8:
         da:cd:61:b9:09:d7:54:13:86:ce:9c:b3:02:40:90:1d:b5:8e:
         37:ca:eb:26:0a:f0:ea:b0:ec:71:70:bb:63:47:46:3d:06:d6:
         44:5e:bb:29:fa:71:a4:65:31:5c:db:f5:dc:70:5c:99:a4:97:
         9e:c9:02:26:5b:59:2d:28:18:0e:c9:d1:84:15:07:93:09:e1:
         54:c2:88:41:0e:45:83:21:6b:7f:15:ab:41:95:fa:78:ce:69:
         6e:3e:78:c7:1b:c5:60:a0:3f:90:dc:0b:97:b1:08:b6:91:3f:
         51:78:5e:71:90:72:43:b0:f8:14:2c:b5:6f:7f:8b:a4:fa:80:
         53:d7:46:16:08:59:dc:9a:16:f2:45:45:8f:e0:9a:33:77:3e:
         ed:81:99:f1:ab:f3:ae:73:9e:9b:57:dd:53:62:c1:48:54:2e:
         6a:21:b6:9b:42:5c:16:94:61:22:f1:4c:9b:e7:ae:ae:dc:c4:
         1a:39:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 10:35:14 2024 by rpki-client on console-fra.rpki-client.org