Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/W2PNWP8LK_VmNynrq8DCS3mSSAM.roa
File:                     W2PNWP8LK_VmNynrq8DCS3mSSAM.roa (raw, json)
Hash identifier:          jFFCusPPdM3kMw+QUHnaKCglawTRj0lN7kapwAdiY5I=
Subject key identifier:   5B:63:CD:58:FF:0B:2B:F5:66:37:29:EB:AB:C0:C2:4B:79:92:48:03
Certificate issuer:       /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial:       018B0539012D2330490521E2EA56DF974919
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/W2PNWP8LK_VmNynrq8DCS3mSSAM.roa
Signing time:             Fri 06 Oct 2023 13:41:43 +0000
ROA not before:           Fri 06 Oct 2023 13:41:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212368
IP address blocks:        193.135.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:05:39:01:2d:23:30:49:05:21:e2:ea:56:df:97:49:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
        Validity
            Not Before: Oct  6 13:41:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b63cd58ff0b2bf5663729ebabc0c24b79924803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:93:e6:62:13:1e:e1:57:6b:1f:fe:a1:96:
                    01:f7:24:71:f7:f9:a1:30:32:be:24:89:c4:3d:c7:
                    33:20:64:2c:e5:5e:23:a6:00:65:2f:5c:cc:ad:fd:
                    0c:74:e3:23:9b:9c:33:87:0e:ba:ff:72:d5:13:1d:
                    dd:d1:97:b3:4f:27:f4:94:a0:87:17:bc:01:dd:d6:
                    25:1e:48:92:93:01:fb:fb:fe:dc:72:73:d0:5c:15:
                    b2:71:36:c2:1b:7f:f9:38:75:fc:0c:84:0c:6f:1b:
                    0b:4d:24:be:87:aa:96:9a:a6:c1:7a:da:0e:90:3d:
                    13:ba:c4:84:66:00:ea:9a:b0:58:64:2c:53:b0:58:
                    b8:b8:4b:5c:5a:c7:39:a7:0e:b2:a6:b9:84:cd:96:
                    ae:26:67:85:c5:cf:92:a4:e5:97:6a:24:05:0e:de:
                    a8:a9:c2:c6:37:a1:fd:29:f7:b5:ee:f3:48:20:26:
                    88:3a:1c:a1:8b:8d:a2:e3:19:cb:94:3e:c8:78:be:
                    72:ce:23:3b:ec:e9:72:f3:7b:fd:36:e9:50:b4:ba:
                    5e:f4:5c:c1:31:16:ee:3a:d6:60:0e:68:2d:bb:2c:
                    af:3b:8e:c5:f8:45:33:78:d8:00:6c:e8:ad:8d:96:
                    15:a6:ae:7d:dd:59:0e:5c:c7:e2:1d:92:00:39:52:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:CD:58:FF:0B:2B:F5:66:37:29:EB:AB:C0:C2:4B:79:92:48:03
            X509v3 Authority Key Identifier:
                keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/W2PNWP8LK_VmNynrq8DCS3mSSAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d3:2d:08:1b:e6:9e:e3:86:d0:27:15:c6:72:40:83:ea:c3:
         b2:4b:22:5e:c8:fb:c4:2f:dd:ae:1a:e8:68:87:ad:9d:58:68:
         14:3e:61:8d:a3:64:66:62:7b:be:94:6b:6b:88:cc:d5:d5:77:
         06:d3:6b:59:be:fc:0b:98:8a:99:a2:53:a8:b9:a0:a3:63:0b:
         d0:5c:e5:a1:91:b1:5a:74:36:84:75:51:a3:e5:53:45:2f:66:
         62:8d:e4:c9:c8:0e:27:60:39:13:89:4a:c5:9b:16:ac:f5:71:
         22:b2:af:00:3a:b4:a5:e5:47:e9:cc:da:51:e7:3f:25:3d:98:
         5e:7e:7a:61:47:79:08:45:f1:5d:c1:90:44:b4:e0:c5:ba:dc:
         0b:c9:b3:ba:bc:2a:31:dc:2f:fc:d9:4c:1a:8b:23:04:8f:2e:
         a1:eb:c1:f5:f3:98:5e:a5:d4:f9:2e:f2:dd:e5:f3:09:92:7b:
         a0:00:82:0c:53:5c:4e:5d:68:27:5d:ce:0a:12:49:46:db:92:
         b3:06:6a:a9:c2:93:cc:79:69:0a:d7:61:bb:54:4f:41:98:85:
         61:ef:23:62:7b:04:c3:f4:f5:8c:0b:d2:b1:7f:2f:ae:f5:04:
         40:22:45:5f:8b:6c:1e:b3:0a:42:2e:74:f2:3d:94:f4:ec:04:
         75:46:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:26 2024 by rpki-client on console-fra.rpki-client.org