Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/WR0T5kVVHen7bhTRY9jRvM7t_6c.roa
File:                     WR0T5kVVHen7bhTRY9jRvM7t_6c.roa (raw, json)
Hash identifier:          xtsf1ELtRqGtXoNmRUISuSYpvKL+bu8ZAy4X/BNCB3Y=
Subject key identifier:   59:1D:13:E6:45:55:1D:E9:FB:6E:14:D1:63:D8:D1:BC:CE:ED:FF:A7
Certificate issuer:       /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial:       01857102F7C199241973F5E4C6C636D8126B
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/WR0T5kVVHen7bhTRY9jRvM7t_6c.roa
Signing time:             Mon 02 Jan 2023 05:44:57 +0000
ROA not before:           Mon 02 Jan 2023 05:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        194.33.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:f7:c1:99:24:19:73:f5:e4:c6:c6:36:d8:12:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
        Validity
            Not Before: Jan  2 05:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=591d13e645551de9fb6e14d163d8d1bcceedffa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:8f:b6:38:b6:27:25:90:9d:02:e4:91:a4:
                    87:26:b0:87:38:0b:c0:28:53:8b:b6:72:f7:76:06:
                    47:71:22:c7:50:c0:4b:42:eb:bd:34:3b:50:04:f9:
                    a0:70:2b:5e:36:0f:f0:c1:a4:3a:2d:e9:f1:29:d3:
                    6e:fc:00:90:8c:ff:50:cf:cc:bc:6d:da:11:5d:e2:
                    f3:1b:27:89:2a:cf:18:f8:35:0c:1f:f9:b4:ea:2d:
                    be:9a:c3:55:4e:9c:31:7a:cc:ae:2f:ad:5c:2b:e0:
                    2e:4d:13:85:5d:23:80:b5:2c:28:4e:d6:46:20:57:
                    fc:b5:d6:d9:1b:0a:ee:0f:5f:44:21:aa:84:69:9c:
                    24:3f:33:35:ca:26:96:2b:53:b4:26:a4:2e:4a:11:
                    e6:60:bc:b4:2b:ef:2a:10:5b:21:aa:ba:0e:87:98:
                    ea:15:99:0b:f7:1b:a3:89:62:b9:a0:a4:4b:b4:c5:
                    b7:46:92:de:68:b2:ba:4e:57:1d:20:24:29:2f:ba:
                    94:7f:e4:e8:8a:c0:84:9e:c8:ee:fb:19:13:b4:7a:
                    56:5e:52:e7:5a:ac:21:bc:79:ff:e0:61:d1:57:be:
                    70:96:b5:36:42:79:d0:45:78:c1:a4:de:08:20:01:
                    3f:ac:19:b0:ad:67:f5:62:ed:54:85:5e:ff:7f:9a:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:13:E6:45:55:1D:E9:FB:6E:14:D1:63:D8:D1:BC:CE:ED:FF:A7
            X509v3 Authority Key Identifier:
                keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/WR0T5kVVHen7bhTRY9jRvM7t_6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5f:dc:47:81:e7:c4:af:2f:7f:c0:0a:d2:8e:e1:95:83:49:
         b0:93:1f:c1:88:38:b2:f2:c7:67:fa:55:2a:78:11:cc:9c:14:
         0d:e4:f4:5d:e7:98:2a:c6:38:c7:bc:10:9c:67:00:68:8e:fb:
         b2:c6:82:c8:ac:27:02:d6:f2:17:d5:0c:38:9f:df:ca:33:33:
         2f:54:23:0b:a0:90:f9:26:05:89:6c:32:a6:98:b8:3c:0a:14:
         e4:73:5a:2d:a2:b8:64:6e:fc:a7:34:32:db:cd:ef:18:67:e2:
         17:a1:99:6f:51:34:1e:d6:6d:10:f1:67:bc:c2:89:91:70:8a:
         c6:26:c6:4f:d2:24:90:f9:1e:74:8c:c9:eb:88:35:5a:f1:38:
         5d:f8:9e:e4:96:1e:2e:f2:9b:8e:30:40:94:95:2a:98:17:f6:
         e8:80:c6:a3:e2:ec:da:9b:56:00:b9:11:56:c2:a6:82:7c:56:
         d3:71:44:da:86:b5:f3:db:27:44:d7:9e:b0:4a:55:59:de:ba:
         25:f9:4c:a1:b3:2a:52:5a:4a:dc:7d:19:75:ec:23:59:27:f4:
         cc:39:ae:40:71:85:01:22:44:ba:02:ca:37:ae:f0:21:5e:58:
         6d:d7:0c:81:ad:ed:89:96:e9:0d:68:e1:88:8d:c6:2f:1a:f0:
         cb:75:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:42 2024 by rpki-client on console-ams.rpki-client.org