Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/leCAOXtJAruiqK19YA97FW_wnto.roa
File:                     leCAOXtJAruiqK19YA97FW_wnto.roa (raw, json)
Hash identifier:          KU1SSD6LFeXRMXqFxis3AdJWOI1f9qPba2C7YTQlcY4=
Subject key identifier:   95:E0:80:39:7B:49:02:BB:A2:A8:AD:7D:60:0F:7B:15:6F:F0:9E:DA
Certificate issuer:       /CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Certificate serial:       018CA60471E7A5B861902E97E4864AE0DD90
Authority key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/leCAOXtJAruiqK19YA97FW_wnto.roa
Signing time:             Tue 26 Dec 2023 12:05:58 +0000
ROA not before:           Tue 26 Dec 2023 12:05:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50475
IP address blocks:        193.105.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a6:04:71:e7:a5:b8:61:90:2e:97:e4:86:4a:e0:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
        Validity
            Not Before: Dec 26 12:05:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95e080397b4902bba2a8ad7d600f7b156ff09eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:01:50:4f:e1:d7:51:c9:fb:c0:2e:e2:b7:
                    9b:2d:ee:30:e7:e3:f1:12:8e:e5:22:19:d6:b0:fc:
                    44:54:4e:9f:23:0f:09:eb:6e:ba:18:38:63:35:6d:
                    32:b1:b5:9d:ce:b2:95:3b:42:27:93:0d:51:00:f4:
                    47:d3:fb:64:d6:86:ae:88:08:13:f7:57:b0:6b:68:
                    9c:3c:d7:f1:6d:39:94:08:5e:2a:f1:35:e3:91:25:
                    f4:91:94:32:df:a7:0d:18:37:d7:d2:9e:ff:1f:a4:
                    3c:93:92:d5:c3:99:aa:39:ec:0b:8f:b2:3d:5a:2e:
                    87:da:d2:5e:a3:ab:2e:34:88:2b:af:1b:43:35:ae:
                    7a:aa:a1:ef:cb:dd:bd:e0:15:37:4d:ef:27:54:9d:
                    62:01:81:8c:71:c0:e7:cd:72:57:f5:0f:5a:cd:69:
                    96:69:04:80:56:fe:b3:d3:90:f9:0f:73:93:57:16:
                    2c:27:07:ec:40:01:16:c3:61:e8:6c:23:16:f5:27:
                    48:10:64:88:1a:9c:57:66:70:a4:62:97:8a:9f:b0:
                    37:a9:91:aa:be:ae:2f:18:9a:20:dc:4b:62:57:53:
                    08:e1:ca:6d:e7:9e:64:0a:50:ab:2e:a0:b9:1d:8f:
                    88:ad:37:17:08:8c:a0:b6:a5:88:54:87:50:82:9a:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E0:80:39:7B:49:02:BB:A2:A8:AD:7D:60:0F:7B:15:6F:F0:9E:DA
            X509v3 Authority Key Identifier:
                keyid:8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/leCAOXtJAruiqK19YA97FW_wnto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:27:1d:43:b9:44:9e:af:67:db:89:7c:44:54:83:1f:93:
         73:b6:ee:45:9e:e3:90:05:08:dc:6b:d2:b2:83:6a:7b:0b:a7:
         22:0b:c1:b0:6e:e0:cf:69:80:37:dc:7c:1d:47:c3:26:9e:36:
         2b:41:91:4c:75:67:49:db:76:9c:d8:e2:07:45:94:fc:c5:0d:
         24:ea:56:ed:74:44:84:73:68:e1:13:2f:be:9b:5e:71:0f:33:
         54:f8:c7:41:04:f3:7f:06:bc:9d:9a:f1:11:45:df:6b:70:54:
         24:3e:d7:99:9e:52:a5:a4:6f:17:e0:11:cc:be:43:64:3f:40:
         98:2c:d2:5f:bf:4d:14:ab:c3:f8:ed:0e:55:b4:15:1a:a1:e5:
         f7:8e:1e:91:15:d9:ad:4b:69:ce:27:13:95:9b:ef:66:6b:03:
         61:5f:7b:9d:b5:64:28:63:7a:35:34:d5:cb:d4:47:38:5e:d7:
         1c:3a:22:c5:70:f8:88:50:0b:a0:f4:3a:52:00:3b:5c:41:24:
         52:d4:5b:e4:fa:ac:0a:3f:c2:22:fe:2f:64:cf:ed:c4:37:44:
         0c:9b:13:d1:02:ed:e6:a2:02:a9:98:e0:8b:34:11:fb:b9:c3:
         f3:b1:53:cc:87:a0:a6:ff:a8:5e:c7:af:c7:5a:99:37:7f:92:
         65:94:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:28 2024 by rpki-client on console-ams.rpki-client.org