Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/Wg_qHrpTA9T-0nY_gQUINZ4eIhM.roa
File:                     Wg_qHrpTA9T-0nY_gQUINZ4eIhM.roa (raw, json)
Hash identifier:          sUOPrgJNZnrHhpHiR1wYd+EyL/4sfIzvamyYPUsWyZU=
Subject key identifier:   5A:0F:EA:1E:BA:53:03:D4:FE:D2:76:3F:81:05:08:35:9E:1E:22:13
Certificate issuer:       /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial:       0185A4FCB536D9B5C8FBA4F4FFFC33F08EB3
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/Wg_qHrpTA9T-0nY_gQUINZ4eIhM.roa
Signing time:             Thu 12 Jan 2023 07:58:22 +0000
ROA not before:           Thu 12 Jan 2023 07:58:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        193.36.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a4:fc:b5:36:d9:b5:c8:fb:a4:f4:ff:fc:33:f0:8e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
        Validity
            Not Before: Jan 12 07:58:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a0fea1eba5303d4fed2763f810508359e1e2213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:a5:36:2f:40:e0:0c:5c:88:69:6e:03:c0:
                    61:16:29:1b:38:ce:b2:77:3e:60:4d:9a:c8:62:a8:
                    f1:99:7b:ea:8e:59:d0:b5:9e:db:d6:62:81:5e:a3:
                    34:a2:44:2f:aa:ec:cf:b0:fb:11:22:b3:f5:d4:9a:
                    98:21:ec:99:b7:70:f0:b8:43:ba:04:67:41:c3:97:
                    84:65:7d:85:bb:71:3a:fc:55:cb:ec:d6:43:b5:1b:
                    a6:7f:eb:7c:c5:43:ae:f1:c0:21:86:09:1d:b0:fb:
                    44:39:3e:db:37:85:b8:2e:69:b9:a6:b6:5c:ea:16:
                    c6:a0:eb:90:35:51:54:6c:7b:1c:b3:91:d8:01:86:
                    17:54:8a:9d:68:73:42:6d:b8:be:4e:07:27:1a:a7:
                    ee:a3:2d:6a:e2:8d:a0:f7:c7:87:f5:8c:bc:c9:b3:
                    d2:d2:a6:e8:6f:85:41:b4:3f:f6:c9:2a:cd:40:6f:
                    a5:85:dd:73:ad:0d:a5:76:aa:d5:dc:d5:ca:de:99:
                    12:b3:e8:54:cf:2d:e2:cd:86:af:24:1a:ea:f3:0b:
                    24:74:40:03:7a:2e:c2:80:fc:9e:87:83:d3:27:d5:
                    53:a1:ad:e2:8b:b8:16:3e:d1:83:c2:5b:09:a1:72:
                    88:97:07:6d:ff:46:f2:df:e3:28:9e:43:9f:e1:c5:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:EA:1E:BA:53:03:D4:FE:D2:76:3F:81:05:08:35:9E:1E:22:13
            X509v3 Authority Key Identifier:
                keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/Wg_qHrpTA9T-0nY_gQUINZ4eIhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:b0:70:19:1f:67:a6:b4:c4:cd:57:c0:4a:3a:34:5d:60:
         f9:f2:44:1f:5e:bb:11:2d:10:b3:85:57:3a:01:80:f3:8f:de:
         73:ce:0d:04:60:c7:70:14:7e:79:c6:a4:97:27:51:d9:68:e7:
         55:59:8a:76:ee:d1:90:2d:6f:7e:ef:5c:db:a4:b7:5b:f6:b1:
         89:fa:4f:6b:ac:23:ba:41:76:f2:eb:c3:ab:65:dc:92:09:00:
         d3:2f:bc:9b:6a:d5:bb:d9:b8:bf:8a:75:38:e1:ee:17:01:6a:
         5a:60:7b:cd:c9:2f:fa:90:c3:a2:13:c8:e3:b6:9b:e0:0e:0d:
         73:83:ec:68:c7:43:c4:89:8c:06:6d:82:b9:9a:04:11:aa:c0:
         1b:eb:7e:38:dd:55:0c:2b:bb:b9:e7:4c:57:af:1c:67:d6:fa:
         71:ee:13:c6:24:23:37:c8:23:70:37:f7:bd:8c:b8:65:fd:5b:
         0e:30:a3:0e:d1:9a:9f:5d:3a:e6:36:37:f0:bb:3d:ec:d6:50:
         97:14:a4:df:69:19:e1:d3:1f:70:e3:e2:37:9b:c9:89:99:75:
         12:07:44:5b:0e:61:1f:ef:db:51:7e:29:1e:4c:d3:b2:79:eb:
         16:9a:09:77:22:00:83:c3:d6:52:3a:8c:73:06:df:60:82:60:
         63:a7:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:38 2024 by rpki-client on console-ams.rpki-client.org