Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/5Wyci_wxJN9naDFFJNHKlN1qm0Y.roa
File:                     5Wyci_wxJN9naDFFJNHKlN1qm0Y.roa (raw, json)
Hash identifier:          wMuG1EcgvXysxA/ekf+5Er1L+8r6+qCFc12ZhLGU1wo=
Subject key identifier:   E5:6C:9C:8B:FC:31:24:DF:67:68:31:45:24:D1:CA:94:DD:6A:9B:46
Certificate issuer:       /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial:       019262278014D7E32E2628642DD80F650B43
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/5Wyci_wxJN9naDFFJNHKlN1qm0Y.roa
Signing time:             Sun 06 Oct 2024 14:06:48 +0000
ROA not before:           Sun 06 Oct 2024 14:06:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     398465
IP address blocks:        86.110.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 13:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:62:27:80:14:d7:e3:2e:26:28:64:2d:d8:0f:65:0b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
        Validity
            Not Before: Oct  6 14:06:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e56c9c8bfc3124df6768314524d1ca94dd6a9b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:ff:bc:ac:03:09:4e:c6:73:c3:38:bb:a9:
                    72:4d:7f:48:ea:1e:fe:5e:fd:c8:75:8e:71:91:f6:
                    08:76:2f:a3:ad:b7:b8:4f:9c:8d:48:27:8b:76:2b:
                    ae:81:d9:53:71:00:f1:0f:c0:ac:ce:6d:b8:ee:f2:
                    b2:cf:97:38:1d:99:b2:da:08:27:b4:66:8b:7a:8d:
                    63:0c:ed:20:ff:43:60:93:3f:8a:8d:b3:7e:76:33:
                    a2:c2:0d:c9:c5:8e:3d:42:d4:05:c1:ae:5c:93:1e:
                    38:33:a8:1b:fe:e6:19:0f:56:6f:71:3e:ed:7b:79:
                    3d:0e:c8:a0:52:13:8a:c3:3d:2d:6f:b3:80:8c:f4:
                    d8:59:ec:36:78:f2:f3:7c:1c:f6:cd:6b:c7:d6:fc:
                    a5:10:ca:90:a3:c2:ba:71:40:12:45:4d:3f:dd:cd:
                    17:aa:f2:96:e1:95:22:72:7f:75:65:4a:21:ae:69:
                    f3:20:49:b8:dc:13:25:84:d0:64:0f:02:a4:ee:eb:
                    52:d2:a7:fa:64:8c:49:d8:34:58:4e:10:29:4b:ce:
                    85:80:d7:55:c0:07:71:80:28:2e:02:57:3d:cf:fa:
                    89:34:93:1c:fe:b8:c8:b7:1b:80:3f:a9:9a:1c:fc:
                    69:b3:2b:4a:09:ae:5f:f8:de:31:a1:45:08:3a:08:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:9C:8B:FC:31:24:DF:67:68:31:45:24:D1:CA:94:DD:6A:9B:46
            X509v3 Authority Key Identifier:
                keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/5Wyci_wxJN9naDFFJNHKlN1qm0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.110.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b1:3d:a2:17:07:3d:71:18:dd:80:c1:5e:f2:ba:50:5a:8a:
         b1:26:fb:0d:1d:94:15:9d:a3:32:7c:5b:ae:43:11:0b:59:d4:
         9a:05:da:64:de:eb:0b:62:99:5f:c6:80:dd:ae:9a:41:84:90:
         9c:4a:1d:f4:f8:da:bb:77:84:dd:d4:e2:ac:08:f3:a2:72:80:
         48:4f:fe:05:5f:63:62:c7:f4:7a:f7:f8:90:6c:8c:a5:26:89:
         3b:b4:3e:c1:34:9d:5d:f2:88:9f:29:85:bd:69:c3:49:56:b4:
         fa:59:f5:30:6b:38:86:87:68:ed:49:79:c5:9a:e2:2c:d1:77:
         8e:d7:c5:e0:ef:2a:cd:bd:a9:9f:dd:51:fc:43:39:10:7b:e8:
         e0:bf:a8:f3:d1:f6:1f:b3:ce:88:f0:9d:e2:ea:bf:dc:02:0f:
         6b:9f:da:e9:38:09:7b:c0:2f:fd:24:05:5c:39:d8:d9:5f:26:
         01:03:20:ed:fd:44:b5:51:8c:02:15:ac:61:f6:12:b2:34:47:
         46:e0:59:05:c0:b4:62:9a:cd:76:d4:61:1d:16:25:6e:0c:c7:
         ff:de:b1:59:43:aa:34:dd:44:60:1e:73:68:be:bc:92:05:82:
         9b:26:f2:96:8c:9b:74:55:a4:33:82:5e:81:d9:37:f3:1a:8c:
         34:08:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:09:35 2024 by rpki-client on console-fra.rpki-client.org