Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/W4psQtMZ1F0-IVbAbwOBTjXTlIw.roa
File:                     W4psQtMZ1F0-IVbAbwOBTjXTlIw.roa (raw, json)
Hash identifier:          cEcmJzuyS46qKopyQjCGfH++NYz8MPxPI3vEjLUl3eo=
Subject key identifier:   5B:8A:6C:42:D3:19:D4:5D:3E:21:56:C0:6F:03:81:4E:35:D3:94:8C
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01856F1509544E0BD479FAD41A11AFF884A6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/W4psQtMZ1F0-IVbAbwOBTjXTlIw.roa
Signing time:             Sun 01 Jan 2023 20:45:27 +0000
ROA not before:           Sun 01 Jan 2023 20:45:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62350
IP address blocks:        80.96.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:15:09:54:4e:0b:d4:79:fa:d4:1a:11:af:f8:84:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:45:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b8a6c42d319d45d3e2156c06f03814e35d3948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:78:8c:a0:f8:30:e1:40:21:d7:4b:28:d1:
                    50:bc:3a:85:dd:64:f7:25:d8:d6:be:81:21:f8:30:
                    2d:d9:14:12:53:c1:66:4d:e7:db:92:0a:b7:ce:f0:
                    56:98:e4:c2:a5:31:03:6d:79:66:60:e5:fc:50:af:
                    33:a2:ca:74:75:ef:eb:a1:34:de:6f:bd:c6:13:1f:
                    72:ac:75:b3:68:d6:c8:7d:df:1b:8a:c0:dd:fc:c4:
                    69:10:8a:9b:ce:95:e6:f9:e1:03:39:dc:14:0a:f8:
                    6a:cb:69:b9:34:18:7a:7c:a2:4d:ea:70:91:62:87:
                    a2:45:e9:c3:a7:3d:4d:f2:30:f9:2d:67:8f:e5:c4:
                    57:b8:41:44:f7:f1:57:b9:3b:ea:0d:3c:bc:51:80:
                    24:c6:f9:69:7b:a0:c8:fc:b3:cc:30:1a:65:e3:f9:
                    a1:76:25:9c:0f:af:6e:ba:e9:1f:4b:5c:78:b2:0f:
                    cf:6c:ee:19:44:b6:b6:00:e7:9f:4b:24:bf:b1:df:
                    20:ed:ff:22:d8:d7:04:79:af:e1:12:95:ec:36:bd:
                    d4:7b:16:ce:d0:d1:75:8b:bd:25:6a:79:4c:07:0b:
                    28:06:06:63:c8:f7:04:05:e9:0c:d0:af:fa:83:cf:
                    28:20:a5:e3:13:a6:37:8b:32:a7:5a:ab:c1:65:a9:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:6C:42:D3:19:D4:5D:3E:21:56:C0:6F:03:81:4E:35:D3:94:8C
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/W4psQtMZ1F0-IVbAbwOBTjXTlIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:52:d2:5e:d7:e7:cb:16:6d:6d:11:82:c9:1d:67:ec:37:
         37:05:a7:2f:b7:9c:06:61:ee:74:06:01:de:93:bb:da:c4:44:
         40:fb:1f:a4:c9:84:e6:51:ec:63:51:76:bd:29:fc:3b:1d:46:
         39:df:30:7d:ce:7d:2a:13:bf:01:44:74:14:00:23:35:d1:f3:
         96:6e:45:00:13:7c:e7:2b:97:11:18:10:84:2f:d8:fa:93:f5:
         df:3b:b6:7c:be:1a:13:b8:ac:48:f3:64:6d:c7:14:58:df:6d:
         68:e8:e2:3a:e2:53:e7:64:21:1b:d4:d3:2d:8c:06:79:72:9b:
         4a:c8:aa:82:b6:40:b3:ce:84:d8:8b:35:d3:5a:70:0c:a4:3c:
         45:34:7c:f8:e5:f8:88:50:69:20:9c:1d:ad:cb:2a:54:65:07:
         8c:8d:1a:d4:e7:3b:44:85:51:f1:1a:57:46:47:5a:40:cd:99:
         65:a3:5b:fb:4d:f7:4b:02:39:67:c9:a3:a3:4a:6e:d7:53:2d:
         35:c7:95:ef:6f:be:4c:f3:ac:35:e8:18:f6:a3:63:c6:0b:86:
         cf:b7:47:2c:dd:04:11:60:5c:97:90:23:24:8b:b6:6c:1d:bd:
         b5:02:e3:b1:6d:5d:a8:3c:34:78:29:1a:8a:ad:02:18:e2:d4:
         80:80:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org