Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WRL6QqzfTY2X9_qXDQAHKJ2wxbU.roa
File:                     WRL6QqzfTY2X9_qXDQAHKJ2wxbU.roa (raw, json)
Hash identifier:          aD5nFJZbWVuyE/l8qpS1oyJBzKuXKsF1zaNjWA0V5oo=
Subject key identifier:   59:12:FA:42:AC:DF:4D:8D:97:F7:FA:97:0D:00:07:28:9D:B0:C5:B5
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       018AF579A2433D423F0310E61A080FFE9C90
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WRL6QqzfTY2X9_qXDQAHKJ2wxbU.roa
Signing time:             Tue 03 Oct 2023 12:18:23 +0000
ROA not before:           Tue 03 Oct 2023 12:18:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212742
IP address blocks:        78.135.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Dec 2023 10:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f5:79:a2:43:3d:42:3f:03:10:e6:1a:08:0f:fe:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Oct  3 12:18:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5912fa42acdf4d8d97f7fa970d0007289db0c5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:cc:46:2e:45:de:60:51:40:e1:10:f6:0d:
                    9f:f8:a1:a2:e4:ab:5e:0f:14:18:12:c7:58:2a:1e:
                    43:f4:27:aa:61:b4:71:94:82:16:bc:a4:05:d9:8d:
                    8a:21:0d:b1:a6:21:09:c1:61:45:b1:20:41:4d:84:
                    2d:0c:1f:fb:5c:22:62:4e:ef:df:db:08:b7:09:f7:
                    6c:f8:64:bb:20:0e:09:96:e5:ca:72:a6:ad:0b:50:
                    62:a0:8d:d1:10:65:3b:da:1c:db:09:b2:30:9f:3e:
                    fe:1f:cb:0c:b5:d4:13:27:1d:f5:d1:dc:ef:27:24:
                    00:25:d5:a4:04:e5:97:0c:12:22:82:45:9b:e2:41:
                    24:5b:ec:e9:46:ac:ce:0b:72:2d:c8:fd:6c:68:bc:
                    10:b0:62:69:05:78:63:02:cc:73:bb:61:db:48:99:
                    74:3d:0f:ec:87:93:84:59:f6:5c:dc:94:13:e8:b9:
                    75:8e:68:3e:ad:03:06:d8:db:2f:75:2b:3b:ab:d4:
                    26:e9:8a:e7:9f:18:16:5f:d3:9e:13:41:7c:02:4f:
                    28:6d:8c:80:9e:a1:9d:29:1e:e4:8b:03:93:34:d2:
                    d7:fc:c9:f0:af:ad:83:5b:19:cd:ae:fc:2b:18:f3:
                    1b:d9:b0:94:59:37:f1:9c:81:0f:9e:d7:b7:c6:8e:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:FA:42:AC:DF:4D:8D:97:F7:FA:97:0D:00:07:28:9D:B0:C5:B5
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WRL6QqzfTY2X9_qXDQAHKJ2wxbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.135.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:90:62:86:31:fc:2b:22:bc:fd:2c:fb:20:70:bf:2d:92:
         52:64:f3:86:6c:26:8f:09:3a:b9:e5:0b:9f:8a:bd:dc:a3:46:
         a5:47:e3:ab:c9:4d:fe:77:25:1b:77:73:f6:24:75:0a:6f:98:
         44:11:62:a0:f1:a8:b5:8c:fe:10:0c:ba:24:95:ad:aa:dd:dd:
         27:b5:2d:a9:bb:01:b7:15:9f:d7:38:9b:01:30:59:05:a1:0f:
         80:e4:fc:70:d8:bf:f0:c7:80:ee:b7:31:f3:09:46:cb:2e:c5:
         97:00:1f:e4:f2:09:1d:17:77:9b:85:61:41:dc:7e:d1:57:3f:
         c1:31:08:dd:c6:cc:39:a3:85:2b:46:9b:3d:1a:66:b2:43:e4:
         da:39:df:f2:65:90:78:65:48:0c:0c:a0:0b:f5:8f:a7:ea:56:
         e6:3a:6e:fb:8b:61:fb:3b:f4:ac:7a:c9:20:0d:2a:26:c8:99:
         c6:d8:a4:90:76:f2:39:f9:3d:d7:9b:66:0f:69:02:02:3a:c2:
         e8:db:76:53:b2:83:17:01:79:c6:54:4b:57:dd:25:b1:6c:fe:
         b9:b6:1e:85:5f:f9:2f:35:4c:86:2f:32:c8:23:90:3b:b1:5d:
         ce:7c:19:73:34:3a:e3:39:40:13:16:91:f2:57:1c:0d:f0:a6:
         4c:c2:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org