Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/Wwoy099VXXyI7UGXI9TMmuhCCOE.roa
File:                     Wwoy099VXXyI7UGXI9TMmuhCCOE.roa (raw, json)
Hash identifier:          anvWOxA9YFVEeiOdZ1KTKykfOX3ZltWpc36D7NMmA8I=
Subject key identifier:   5B:0A:32:D3:DF:55:5D:7C:88:ED:41:97:23:D4:CC:9A:E8:42:08:E1
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       01856F021F65A1ED162106C70AF7E8ABB6BD
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/Wwoy099VXXyI7UGXI9TMmuhCCOE.roa
Signing time:             Sun 01 Jan 2023 20:24:48 +0000
ROA not before:           Sun 01 Jan 2023 20:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210703
IP address blocks:        91.199.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 Feb 2023 10:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:1f:65:a1:ed:16:21:06:c7:0a:f7:e8:ab:b6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Jan  1 20:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b0a32d3df555d7c88ed419723d4cc9ae84208e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:41:ea:75:5e:f8:49:a2:3c:a7:31:cb:60:
                    bb:2d:69:6d:63:ae:3b:d6:a0:ca:2b:84:5d:3c:66:
                    a5:48:0b:22:78:4f:f7:7d:3b:8c:8e:2b:ae:fb:92:
                    c6:75:9d:e4:76:ca:d9:a4:07:d5:f6:f9:f8:a3:a9:
                    2e:95:d0:18:29:bb:3a:7f:9f:40:bc:2e:ab:a9:af:
                    f7:f6:b6:fb:aa:3b:01:cb:53:ed:8c:e9:8c:1c:18:
                    86:2e:7f:fb:8f:62:3b:42:fd:61:cc:67:43:c6:b1:
                    ad:26:8a:85:c9:2d:f5:5e:67:b1:3a:cd:de:e6:1b:
                    88:6d:2b:9f:0f:13:3b:e8:8c:77:66:3d:01:24:cd:
                    2d:26:b5:d8:bb:58:25:49:92:b1:4c:22:37:40:8f:
                    77:f7:9a:fe:d1:89:12:b3:2a:81:cd:94:db:dc:f6:
                    86:93:75:59:45:5b:e9:e9:be:f4:f1:41:62:9f:db:
                    55:0c:b4:08:26:40:f0:30:d2:04:a5:b7:24:12:74:
                    62:11:29:4a:f6:b9:a7:cb:0a:7c:46:3d:12:c1:ed:
                    17:58:7a:c3:9c:de:f5:80:0a:e6:92:ff:16:ad:bd:
                    35:46:bb:a8:56:75:f9:40:c0:45:b7:df:65:f1:55:
                    f1:5e:67:a2:d8:2e:0d:90:90:88:50:63:19:f6:a5:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:32:D3:DF:55:5D:7C:88:ED:41:97:23:D4:CC:9A:E8:42:08:E1
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/Wwoy099VXXyI7UGXI9TMmuhCCOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9b:78:3a:7e:5c:06:a0:3a:c2:86:99:9c:15:92:dc:09:14:
         a4:8a:a2:1f:f7:61:c2:a3:20:c5:3c:b5:20:dd:7d:40:52:2e:
         e6:93:df:4a:d7:e3:50:94:93:01:3b:a6:f0:34:28:52:d1:d0:
         02:4f:be:52:5d:43:90:1e:65:e3:13:df:e6:50:1c:83:13:86:
         b2:fc:4a:77:c8:e7:8b:1c:60:b0:2f:50:3c:e4:83:a4:1a:fd:
         97:3e:55:3d:0c:b7:14:41:2d:86:40:2b:d3:f5:64:28:02:aa:
         a2:42:a4:e2:ec:5b:f8:95:aa:19:b8:b8:07:0e:00:a7:df:2b:
         cf:41:da:28:50:c4:54:a1:67:72:82:37:e9:d0:a1:b7:3f:27:
         89:2d:39:65:21:d6:84:55:8c:14:ee:b4:70:2e:39:ed:bc:64:
         99:14:13:ba:45:55:b1:67:b0:46:81:0f:ad:f5:ca:88:11:56:
         b5:2c:ad:44:2d:f6:08:32:61:7d:00:47:34:a5:f4:1a:ca:0a:
         0a:cf:8d:52:4f:89:81:a6:13:3f:db:fa:36:2f:ce:f8:ea:c0:
         e4:84:ff:80:4b:8c:5a:bb:9e:b2:3c:1d:b1:e2:bd:0e:2d:0d:
         8e:67:ce:43:28:26:80:d0:e2:d9:86:e6:a0:36:41:f6:da:ab:
         18:b0:db:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAh9loe0WIQbHCvfoq7a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjMwMTAxMjAyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjBhMzJkM2RmNTU1ZDdjODhlZDQxOTcyM2Q0Y2M5YWU4NDIwOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1idB6nVe+EmiPKcxy2C7LWltY647
1qDKK4RdPGalSAsieE/3fTuMjiuu+5LGdZ3kdsrZpAfV9vn4o6kuldAYKbs6f59A
vC6rqa/39rb7qjsBy1PtjOmMHBiGLn/7j2I7Qv1hzGdDxrGtJoqFyS31XmexOs3e
5huIbSufDxM76Ix3Zj0BJM0tJrXYu1glSZKxTCI3QI9395r+0YkSsyqBzZTb3PaG
k3VZRVvp6b708UFin9tVDLQIJkDwMNIEpbckEnRiESlK9rmnywp8Rj0Swe0XWHrD
nN71gArmkv8Wrb01RruoVnX5QMBFt99l8VXxXmei2C4NkJCIUGMZ9qXq+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFsKMtPfVV18iO1BlyPUzJroQgjhMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvV3dveTA5OVZYWHlJN1VHWEk5VE1tdWhDQ09FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8csMA0G
CSqGSIb3DQEBCwUAA4IBAQChm3g6flwGoDrChpmcFZLcCRSkiqIf92HCoyDFPLUg
3X1AUi7mk99K1+NQlJMBO6bwNChS0dACT75SXUOQHmXjE9/mUByDE4ay/Ep3yOeL
HGCwL1A85IOkGv2XPlU9DLcUQS2GQCvT9WQoAqqiQqTi7Fv4laoZuLgHDgCn3yvP
QdooUMRUoWdygjfp0KG3PyeJLTllIdaEVYwU7rRwLjntvGSZFBO6RVWxZ7BGgQ+t
9cqIEVa1LK1ELfYIMmF9AEc0pfQaygoKz41ST4mBphM/2/o2L8746sDkhP+AS4xa
u56yPB2x4r0OLQ2OZ85DKCaA0OLZhuagNkH22qsYsNvQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org