Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/wURT5bv_QNO-WibTDHEZkqv1aKM.roa
File:                     wURT5bv_QNO-WibTDHEZkqv1aKM.roa (raw, json)
Hash identifier:          pKWS+O/FZIoaBAbku8Z/fvSujZKhrV9bWCC13UONd2o=
Subject key identifier:   C1:44:53:E5:BB:FF:40:D3:BE:5A:26:D3:0C:71:19:92:AB:F5:68:A3
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018F3DEAEB29553C5447B30E553A05967C76
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/wURT5bv_QNO-WibTDHEZkqv1aKM.roa
Signing time:             Fri 03 May 2024 10:05:56 +0000
ROA not before:           Fri 03 May 2024 10:05:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44317
IP address blocks:        195.178.140.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 May 2024 11:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:ea:eb:29:55:3c:54:47:b3:0e:55:3a:05:96:7c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: May  3 10:05:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c14453e5bbff40d3be5a26d30c711992abf568a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:f7:97:64:aa:f7:f4:0b:96:b5:18:b7:99:
                    1a:af:25:36:b6:1a:e2:75:14:a5:99:97:6a:86:36:
                    71:ca:5c:e2:20:f6:de:66:6d:d3:b8:da:4f:7b:6e:
                    8b:52:8b:c5:82:28:a9:7f:fa:ba:64:61:bb:02:7a:
                    7d:6d:f1:d0:31:1c:d5:07:9a:b4:ab:66:f5:16:3e:
                    f3:8d:e0:b3:5c:c5:87:11:e4:51:e1:6e:11:ca:fc:
                    23:b9:ec:8b:5e:ba:aa:ef:b9:0b:15:83:22:73:06:
                    91:52:09:ae:25:17:2c:47:6d:00:13:4b:79:37:cb:
                    3e:bd:cd:8b:e7:92:95:66:38:e5:82:06:db:2a:17:
                    72:01:b2:48:86:a4:c4:9d:83:e6:8e:18:f4:15:ce:
                    e4:11:7e:ba:88:e9:75:02:9d:75:cb:6d:f9:a9:e5:
                    9f:d2:53:0d:56:d5:f0:91:25:c2:5f:6d:92:24:80:
                    6e:56:3f:83:31:7d:8c:81:9a:a2:1d:45:c8:89:7e:
                    80:be:cd:da:67:51:1a:74:ff:88:f2:d3:20:ee:10:
                    6f:bb:16:33:dd:07:dd:e6:4e:8e:d3:55:e4:12:96:
                    9a:d8:af:dc:45:2a:8e:36:e8:34:62:d0:b3:7a:4c:
                    11:79:ee:9b:5d:58:49:e7:78:e4:cb:e0:98:65:12:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:44:53:E5:BB:FF:40:D3:BE:5A:26:D3:0C:71:19:92:AB:F5:68:A3
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/wURT5bv_QNO-WibTDHEZkqv1aKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:5e:07:dd:77:e7:13:c2:ea:1e:7c:b2:47:1a:00:e7:c7:
         10:a7:26:c5:5e:01:47:90:91:34:19:d8:ee:72:d9:3b:0e:d8:
         ca:36:52:2b:6c:53:04:74:81:7e:6d:67:7a:82:4d:6b:33:cd:
         17:2f:3b:c2:30:b4:64:11:4b:6e:f2:55:ff:8a:7c:e3:0a:50:
         b8:df:fb:76:9c:9c:08:db:2f:09:c5:8b:a4:aa:da:ae:11:84:
         a6:6e:05:bf:94:44:db:6e:5e:41:84:33:a1:76:14:74:7d:36:
         59:e5:1a:07:7f:68:43:fc:92:92:46:8e:ce:74:7b:fa:cc:3c:
         28:8f:2d:a5:22:20:8e:48:ff:b1:0a:39:3a:63:1c:a7:8e:90:
         69:d4:ac:ac:d2:ee:75:af:56:f6:43:2b:bb:cd:92:df:12:b8:
         d3:6d:a1:06:6f:4a:c0:cc:76:e9:8c:c3:63:f7:7a:9d:3d:15:
         b7:45:50:50:cc:9a:28:15:dd:d2:6f:17:4f:26:43:eb:c8:a7:
         15:60:06:48:c0:ba:39:c5:0c:bf:48:c9:c8:d8:d0:49:3e:e2:
         bf:ac:85:08:c3:ca:44:d0:42:f3:5c:7c:4b:63:73:e5:17:8b:
         34:29:61:2f:a8:37:5a:04:d6:18:e4:78:23:8a:a0:e6:5c:58:
         cb:e5:97:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY896uspVTxUR7MOVToFlnx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQwNTAzMTAwNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQ0NTNlNWJiZmY0MGQzYmU1YTI2ZDMwYzcxMTk5MmFiZjU2OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEj3l2Sq9/QLlrUYt5karyU2thri
dRSlmZdqhjZxylziIPbeZm3TuNpPe26LUovFgiipf/q6ZGG7Anp9bfHQMRzVB5q0
q2b1Fj7zjeCzXMWHEeRR4W4RyvwjueyLXrqq77kLFYMicwaRUgmuJRcsR20AE0t5
N8s+vc2L55KVZjjlggbbKhdyAbJIhqTEnYPmjhj0Fc7kEX66iOl1Ap11y235qeWf
0lMNVtXwkSXCX22SJIBuVj+DMX2MgZqiHUXIiX6Avs3aZ1EadP+I8tMg7hBvuxYz
3Qfd5k6O01XkEpaa2K/cRSqONug0YtCzekwRee6bXVhJ53jky+CYZRJ/XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFEU+W7/0DTvlom0wxxGZKr9WijMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvd1VSVDVidl9RTk8tV2liVERIRVprcXYxYUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7KMMA0G
CSqGSIb3DQEBCwUAA4IBAQBb+l4H3XfnE8LqHnyyRxoA58cQpybFXgFHkJE0Gdju
ctk7DtjKNlIrbFMEdIF+bWd6gk1rM80XLzvCMLRkEUtu8lX/inzjClC43/t2nJwI
2y8JxYukqtquEYSmbgW/lETbbl5BhDOhdhR0fTZZ5RoHf2hD/JKSRo7OdHv6zDwo
jy2lIiCOSP+xCjk6YxynjpBp1Kys0u51r1b2Qyu7zZLfErjTbaEGb0rAzHbpjMNj
93qdPRW3RVBQzJooFd3SbxdPJkPryKcVYAZIwLo5xQy/SMnI2NBJPuK/rIUIw8pE
0ELzXHxLY3PlF4s0KWEvqDdaBNYY5HgjiqDmXFjL5ZfL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org