Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa
File:                     WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa (raw, json)
Hash identifier:          RUlQmaFzaCnEb1gOlnKyTJx+wOZeQstK9KfMEJUc5u8=
Subject key identifier:   58:BB:84:5C:00:70:9A:23:4E:FF:54:DF:F6:22:0D:B7:66:19:D6:8C
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018B621B9506039782860BAE363EEA290256
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa
Signing time:             Tue 24 Oct 2023 14:34:16 +0000
ROA not before:           Tue 24 Oct 2023 14:34:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        163.5.95.0/24 maxlen: 24
                          163.5.219.0/24 maxlen: 24
                          163.5.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:62:1b:95:06:03:97:82:86:0b:ae:36:3e:ea:29:02:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 24 14:34:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58bb845c00709a234eff54dff6220db76619d68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:8a:9c:44:a3:46:af:2c:82:2d:bc:7b:97:
                    da:c9:9e:c5:0e:59:61:2d:8b:78:6e:38:d1:22:bd:
                    d0:b2:83:56:11:d2:06:66:fb:e6:3a:93:6d:58:0b:
                    03:df:b8:9a:5a:59:1e:49:4e:e6:c7:0a:fc:c3:03:
                    d8:9b:20:de:15:ad:2a:57:1f:03:0b:d6:99:80:94:
                    4c:b3:66:ea:64:50:71:c9:15:83:e8:4c:4f:43:d6:
                    27:9b:a8:31:ad:9b:0a:ce:dd:ba:35:85:a5:88:35:
                    90:33:76:05:2f:06:aa:d5:89:a8:26:1c:de:11:0c:
                    0e:fe:86:a2:0e:8e:88:b8:e6:a7:01:27:cd:5a:bd:
                    6c:ce:2a:35:ce:84:74:d1:30:7d:b1:e4:d4:3c:89:
                    12:db:79:91:e8:d3:50:15:54:7a:bb:2a:ea:ef:b5:
                    f1:92:ec:6d:00:aa:d4:e7:ea:ac:0a:da:76:a4:2c:
                    10:80:5a:f5:65:b9:da:1f:6a:59:77:9a:56:da:27:
                    8a:f7:a0:12:56:31:e4:76:b5:ed:c2:f8:3a:a5:73:
                    3c:2a:74:70:92:7e:78:07:4d:ea:81:7c:6c:ee:1c:
                    a8:4e:05:e5:4f:90:c8:79:e6:a6:ae:ea:ce:00:fc:
                    32:2d:d5:6d:d4:6a:57:56:5a:0a:10:d3:0b:45:f9:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BB:84:5C:00:70:9A:23:4E:FF:54:DF:F6:22:0D:B7:66:19:D6:8C
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.36.0/24
                  163.5.95.0/24
                  163.5.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d5:61:52:60:11:f1:f7:eb:be:68:de:20:6e:be:93:99:56:
         d1:3f:1c:d3:4a:d8:63:a5:69:89:1c:cc:df:fc:af:dc:23:d3:
         ba:98:bc:b2:94:4b:63:f9:3b:c9:18:c2:79:70:b6:60:88:2c:
         85:72:c8:fe:70:d1:a9:71:34:42:6b:bb:d1:3b:1b:fd:d5:a0:
         5a:5c:df:a4:27:53:1b:36:9f:a6:63:9e:87:ca:04:2f:0a:14:
         f3:79:f6:63:dd:51:8e:a3:8e:71:62:41:c9:55:e3:89:6e:f2:
         fd:d8:70:75:af:1d:5e:55:5e:86:1e:60:62:b9:59:c3:af:b7:
         79:0d:80:ce:02:b9:23:03:d2:6b:9f:b2:b3:2c:49:5c:5b:a4:
         03:7e:f1:c2:52:3e:94:df:6e:39:19:7b:29:c8:78:fb:2e:f9:
         b8:ad:5b:e4:56:51:8d:ec:cc:1a:37:1c:ae:44:a5:70:a7:35:
         35:10:f8:45:d3:0a:0b:0f:a4:55:5a:ac:85:28:09:f1:3c:68:
         7f:08:4a:41:ce:17:72:93:1d:ca:63:c9:2d:b5:49:66:df:c2:
         6c:34:95:7d:0a:98:fd:ea:b2:70:8b:d9:b6:39:ae:b6:6c:d2:
         48:ae:57:73:a2:43:e4:20:1d:26:f9:96:42:97:95:71:4e:76:
         c4:7c:a6:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYtiG5UGA5eChguuNj7qKQJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMxMDI0MTQzNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJiODQ1YzAwNzA5YTIzNGVmZjU0ZGZmNjIyMGRiNzY2MTlkNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkOKnESjRq8sgi28e5fayZ7FDllh
LYt4bjjRIr3QsoNWEdIGZvvmOpNtWAsD37iaWlkeSU7mxwr8wwPYmyDeFa0qVx8D
C9aZgJRMs2bqZFBxyRWD6ExPQ9Ynm6gxrZsKzt26NYWliDWQM3YFLwaq1YmoJhze
EQwO/oaiDo6IuOanASfNWr1szio1zoR00TB9seTUPIkS23mR6NNQFVR6uyrq77Xx
kuxtAKrU5+qsCtp2pCwQgFr1ZbnaH2pZd5pW2ieK96ASVjHkdrXtwvg6pXM8KnRw
kn54B03qgXxs7hyoTgXlT5DIeeamrurOAPwyLdVt1GpXVloKENMLRfl1FQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFi7hFwAcJojTv9U3/YiDbdmGdaMMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvV0x1RVhBQndtaU5PXzFUZjlpSU50MllaMW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUkAwQA
owVfAwQAowXbMA0GCSqGSIb3DQEBCwUAA4IBAQAk1WFSYBHx9+u+aN4gbr6TmVbR
PxzTSthjpWmJHMzf/K/cI9O6mLyylEtj+TvJGMJ5cLZgiCyFcsj+cNGpcTRCa7vR
Oxv91aBaXN+kJ1MbNp+mY56HygQvChTzefZj3VGOo45xYkHJVeOJbvL92HB1rx1e
VV6GHmBiuVnDr7d5DYDOArkjA9Jrn7KzLElcW6QDfvHCUj6U3245GXspyHj7Lvm4
rVvkVlGN7MwaNxyuRKVwpzU1EPhF0woLD6RVWqyFKAnxPGh/CEpBzhdykx3KY8kt
tUlm38JsNJV9Cpj96rJwi9m2Oa62bNJIrldzokPkIB0m+ZZCl5VxTnbEfKbc
-----END CERTIFICATE-----
Generated at Sat Dec 2 22:13:57 2023 by rpki-client on console-fra.rpki-client.org