Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/wsVs_GldMXaKrbYZYSaQsEyUzFI.roa
File:                     wsVs_GldMXaKrbYZYSaQsEyUzFI.roa (raw, json)
Hash identifier:          EbZis8hXT2TBcrWZdsYQBgiDoF3hmgArh/whuyka86Q=
Subject key identifier:   C2:C5:6C:FC:69:5D:31:76:8A:AD:B6:19:61:26:90:B0:4C:94:CC:52
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       0187D6EEAFEE99536EAEAFFCC8FF0A6C3D5E
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/wsVs_GldMXaKrbYZYSaQsEyUzFI.roa
Signing time:             Mon 01 May 2023 10:49:39 +0000
ROA not before:           Mon 01 May 2023 10:49:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210194
IP address blocks:        194.39.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Dec 2023 16:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d6:ee:af:ee:99:53:6e:ae:af:fc:c8:ff:0a:6c:3d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: May  1 10:49:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2c56cfc695d31768aadb619612690b04c94cc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:5f:69:7a:ba:08:03:5a:4e:cf:ea:df:16:
                    0f:d3:93:46:ac:1b:2c:b0:26:75:2e:a1:1b:37:f0:
                    1e:ea:ce:cb:66:48:94:90:c1:fa:00:07:69:31:15:
                    ac:f5:cf:9f:8f:53:b7:f9:54:46:67:61:1b:4f:d5:
                    34:b9:25:e3:0f:96:de:2f:48:83:dd:b4:88:c3:d4:
                    ef:a0:02:7f:59:39:6b:05:d7:f2:38:eb:c1:e3:08:
                    89:24:6b:bd:ac:99:e0:b3:42:0f:52:ff:83:dc:d7:
                    af:ff:ff:5c:fa:dd:b7:4a:ea:a0:39:43:2d:a8:82:
                    4c:80:65:56:98:52:3b:94:36:15:58:0e:e9:29:8c:
                    0f:df:d8:3f:69:40:25:ad:6c:6a:69:f9:bf:7a:c2:
                    79:81:20:4a:22:bc:d4:df:d8:c7:04:1c:0e:6e:dc:
                    36:d0:03:29:a9:db:a8:88:69:ee:62:39:bf:7d:86:
                    e7:b6:fb:44:1b:2d:c0:c3:b7:ff:c2:b4:dd:35:7a:
                    f8:d4:bc:7e:3f:3e:de:56:68:e2:38:cd:d1:d8:0c:
                    b6:c5:8b:c6:7d:1a:81:bb:15:ac:4c:9c:2c:d6:96:
                    c3:a9:e8:fa:31:2b:ee:22:73:13:87:5f:79:d6:3c:
                    e6:ae:29:a3:11:40:ac:12:4a:1e:7d:c0:0d:9d:8b:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:6C:FC:69:5D:31:76:8A:AD:B6:19:61:26:90:B0:4C:94:CC:52
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/wsVs_GldMXaKrbYZYSaQsEyUzFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:39:e0:e5:fb:ed:03:0d:0d:ba:9a:0e:e7:59:94:7a:6c:a4:
         57:66:2a:d9:b5:98:51:7b:89:6a:56:81:6e:51:63:08:bc:96:
         98:54:e2:8a:b0:9b:5f:de:83:17:72:14:03:1f:76:2f:c5:a6:
         58:ec:b5:a4:5f:ee:be:33:64:35:7c:b1:38:71:6d:84:7b:ca:
         54:09:99:a7:d3:6e:e8:02:e3:b9:6c:46:74:df:cf:22:11:94:
         8f:8c:a0:84:40:b5:a0:95:0f:e0:ce:9a:46:cc:20:de:c5:57:
         3f:85:bf:57:10:ac:c5:0b:59:60:a1:b5:48:56:91:8b:56:25:
         c7:f4:e2:dc:65:29:a4:93:d7:52:2b:cf:d0:fd:5d:cf:bc:27:
         83:ff:05:70:e3:d9:63:b6:97:92:29:2a:19:2a:fc:40:3b:32:
         b4:21:f7:02:b8:85:8b:be:26:e3:23:1f:e4:5c:29:fb:bd:8a:
         c5:8d:75:7c:2e:87:3f:c9:aa:f0:4d:5e:00:3c:5c:af:f0:e7:
         18:78:25:77:e1:43:29:e7:10:08:d4:27:26:38:e5:35:25:de:
         7b:d4:35:fa:79:6b:b1:78:c9:00:1f:b8:45:0f:00:cd:00:8f:
         0b:18:59:81:be:ae:bf:a1:a0:5a:76:5c:65:4c:82:9a:02:91:
         7c:22:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org