Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa
File:                     wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa (raw, json)
Hash identifier:          5QmmnHhatmPOdL6JMJjJ1r5zzhNGCTZNHSPyBoPb6eA=
Subject key identifier:   C2:7D:63:BB:2D:F3:F1:87:A2:27:E1:05:2D:9F:72:52:BB:26:BF:C0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185FA5194C11062EC8C83826F86DC37A74A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa
Signing time:             Sat 28 Jan 2023 21:38:48 +0000
ROA not before:           Sat 28 Jan 2023 21:38:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58057
IP address blocks:        194.50.94.0/24 maxlen: 24
                          194.50.92.0/24 maxlen: 24
                          139.28.96.0/22 maxlen: 24
                          45.131.184.0/22 maxlen: 24
                          45.136.136.0/22 maxlen: 24
                          94.177.122.0/24 maxlen: 24
                          85.202.203.0/24 maxlen: 24
                          45.12.68.0/22 maxlen: 24
                          31.42.183.0/24 maxlen: 24
                          2a0e:97c0:260::/44 maxlen: 44
                          2001:7f8:119::/48 maxlen: 48
                          2a10:cc46:1000::/36 maxlen: 48
                          2a0e:97c0:170::/48 maxlen: 48
                          2a09:4c0::/29 maxlen: 64
                          2a0e:b107:1d05::/48 maxlen: 48
                          2a0e:b107:1165::/48 maxlen: 48
                          2a0c:3b80::/29 maxlen: 48
                          2a0e:97c1:200::/40 maxlen: 48
                          2a10:2f00:18f::/48 maxlen: 48
                          2a0e:b107:6f0::/44 maxlen: 44
                          2a0e:b107:9f2::/48 maxlen: 48
                          2a10:cc40:250::/44 maxlen: 48
                          2a0f:e404:102::/48 maxlen: 48
                          2a0e:b107:1786::/48 maxlen: 48
                          2a10:cc41:800::/37 maxlen: 48
                          2a0e:97c4:100::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:fa:51:94:c1:10:62:ec:8c:83:82:6f:86:dc:37:a7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 28 21:38:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c27d63bb2df3f187a227e1052d9f7252bb26bfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:51:8b:07:10:31:ac:70:8a:e9:16:77:15:
                    bf:c8:9d:0a:d5:b3:eb:2a:05:5a:cf:c6:85:d4:a5:
                    60:e0:6c:85:e5:1f:29:f0:48:2c:c5:78:f6:f4:1c:
                    e3:a2:53:34:33:b8:bd:13:26:8f:87:c5:25:b0:b9:
                    6b:0d:0e:c1:64:0b:a4:5e:89:5a:30:68:84:42:bb:
                    2c:d8:c7:b1:97:eb:8d:92:75:d3:c0:f2:0d:78:91:
                    57:cc:b5:ce:d3:24:f4:f6:8a:6c:2d:70:b1:d2:42:
                    e2:9f:94:63:36:2a:44:ce:4f:01:06:1a:75:4a:d1:
                    1b:22:05:d7:66:38:4e:0d:90:dd:94:1e:18:da:70:
                    ea:46:66:11:87:8d:0f:55:ce:c5:03:4e:7c:0a:a9:
                    e9:22:e7:23:55:7e:6e:d5:3b:66:25:00:72:47:7f:
                    ed:b7:f9:2d:02:a1:51:77:67:1a:05:4c:94:e7:70:
                    e0:91:81:04:72:87:b1:9b:de:5e:09:f6:6d:c9:b9:
                    27:0b:9e:13:af:0c:16:81:5a:d4:30:ae:a9:8d:88:
                    d7:c1:5f:07:eb:25:eb:4f:08:84:bc:54:86:42:51:
                    66:bb:77:6e:ab:9f:bb:51:d7:9c:b7:90:73:08:64:
                    1d:18:aa:94:59:ba:39:b3:30:b3:b1:1b:6b:16:f6:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:63:BB:2D:F3:F1:87:A2:27:E1:05:2D:9F:72:52:BB:26:BF:C0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.183.0/24
                  45.12.68.0/22
                  45.131.184.0/22
                  45.136.136.0/22
                  85.202.203.0/24
                  94.177.122.0/24
                  139.28.96.0/22
                  194.50.92.0/24
                  194.50.94.0/24
                IPv6:
                  2001:7f8:119::/48
                  2a09:4c0::/29
                  2a0c:3b80::/29
                  2a0e:97c0:170::/48
                  2a0e:97c0:260::/44
                  2a0e:97c1:200::/40
                  2a0e:97c4:100::/44
                  2a0e:b107:6f0::/44
                  2a0e:b107:9f2::/48
                  2a0e:b107:1165::/48
                  2a0e:b107:1786::/48
                  2a0e:b107:1d05::/48
                  2a0f:e404:102::/48
                  2a10:2f00:18f::/48
                  2a10:cc40:250::/44
                  2a10:cc41:800::/37
                  2a10:cc46:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cb:2e:0d:fa:b5:6f:91:f0:51:2e:9d:75:6a:3d:9f:76:d8:f8:
         a5:86:fa:19:1d:c2:9f:53:46:64:e0:e4:99:c3:b6:fa:ff:32:
         3c:74:7e:35:d1:61:62:3d:c4:88:c0:3e:38:28:9d:50:18:8a:
         d0:29:99:2c:d0:cd:04:c1:ba:eb:9a:7b:2e:06:ea:bb:3f:97:
         19:f2:74:26:ff:3b:ad:29:d8:67:1e:7c:b5:e8:47:60:ac:1c:
         aa:c3:4d:29:a0:58:79:07:72:41:e4:a1:e5:b0:3a:71:01:a5:
         85:3b:af:08:28:54:4f:21:bd:7f:5e:8a:57:d1:f5:10:d9:4c:
         e0:50:88:5c:60:44:d8:d3:1d:51:ff:38:db:29:13:dd:0e:47:
         ee:1f:35:99:91:33:0b:54:1e:5d:47:c4:ac:8a:51:d2:8c:90:
         24:81:ff:9b:85:98:8d:49:b4:dd:c3:8a:99:0e:e0:d6:65:a0:
         f9:d0:8d:4a:36:5f:3b:6d:b2:51:af:01:4d:ee:ee:05:6f:50:
         85:52:49:c6:dc:09:70:1a:3f:6a:5b:1d:c1:a5:47:cb:85:4a:
         19:5b:da:d0:74:bb:63:3f:65:7a:6d:94:56:5e:06:c7:20:3f:
         32:d7:2b:c4:f5:ad:14:5a:16:46:13:9d:24:cd:bb:54:aa:97:
         4b:ee:bd:53
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAYX6UZTBEGLsjIOCb4bcN6dKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI4MjEzODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjdkNjNiYjJkZjNmMTg3YTIyN2UxMDUyZDlmNzI1MmJiMjZiZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOZRiwcQMaxwiukWdxW/yJ0K1bPr
KgVaz8aF1KVg4GyF5R8p8EgsxXj29BzjolM0M7i9EyaPh8UlsLlrDQ7BZAukXola
MGiEQrss2Mexl+uNknXTwPINeJFXzLXO0yT09opsLXCx0kLin5RjNipEzk8BBhp1
StEbIgXXZjhODZDdlB4Y2nDqRmYRh40PVc7FA058CqnpIucjVX5u1TtmJQByR3/t
t/ktAqFRd2caBUyU53DgkYEEcoexm95eCfZtybknC54TrwwWgVrUMK6pjYjXwV8H
6yXrTwiEvFSGQlFmu3duq5+7Udect5BzCGQdGKqUWbo5szCzsRtrFvbrvQIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFMJ9Y7st8/GHoifhBS2fclK7Jr/AMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvd24xanV5M3o4WWVpSi1FRkxaOXlVcnNtdjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jA8BAIAATA2AwQAHyq3
AwQCLQxEAwQCLYO4AwQCLYiIAwQAVcrLAwQAXrF6AwQCixxgAwQAwjJcAwQAwjJe
MIGZBAIAAjCBkgMHACABB/gBGQMFAyoJBMADBQMqDDuAAwcAKg6XwAFwAwcEKg6X
wAJgAwYAKg6XwQIDBwQqDpfEAQADBwQqDrEHBvADBwAqDrEHCfIDBwAqDrEHEWUD
BwAqDrEHF4YDBwAqDrEHHQUDBwAqD+QEAQIDBwAqEC8AAY8DBwQqEMxAAlADBgMq
EMxBCAMGBCoQzEYQMA0GCSqGSIb3DQEBCwUAA4IBAQDLLg36tW+R8FEunXVqPZ92
2PilhvoZHcKfU0Zk4OSZw7b6/zI8dH410WFiPcSIwD44KJ1QGIrQKZks0M0Ewbrr
mnsuBuq7P5cZ8nQm/zutKdhnHny16EdgrByqw00poFh5B3JB5KHlsDpxAaWFO68I
KFRPIb1/XopX0fUQ2UzgUIhcYETY0x1R/zjbKRPdDkfuHzWZkTMLVB5dR8SsilHS
jJAkgf+bhZiNSbTdw4qZDuDWZaD50I1KNl87bbJRrwFN7u4Fb1CFUknG3AlwGj9q
Wx3BpUfLhUoZW9rQdLtjP2V6bZRWXgbHID8y1yvE9a0UWhZGE50kzbtUqpdL7r1T
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:04 2023 by rpki-client on console-ams.rpki-client.org