Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wnhFu5I34dfWCSSRw3KkXxT03a8.roa
File:                     wnhFu5I34dfWCSSRw3KkXxT03a8.roa (raw, json)
Hash identifier:          Pd3w41F36SSc7NLZ+KfN3sRD9ENhM+8lk6Xz6G8osnU=
Subject key identifier:   C2:78:45:BB:92:37:E1:D7:D6:09:24:91:C3:72:A4:5F:14:F4:DD:AF
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01867F9294DA3ED9ED8FED53FB690349A87F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wnhFu5I34dfWCSSRw3KkXxT03a8.roa
Signing time:             Thu 23 Feb 2023 18:39:18 +0000
ROA not before:           Thu 23 Feb 2023 18:39:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34718
IP address blocks:        93.171.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Jun 2023 15:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7f:92:94:da:3e:d9:ed:8f:ed:53:fb:69:03:49:a8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Feb 23 18:39:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c27845bb9237e1d7d6092491c372a45f14f4ddaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:6a:68:88:8d:fd:c1:6e:33:2c:8a:40:a7:
                    9a:87:18:58:09:5e:e3:00:c0:da:98:45:52:92:3b:
                    c3:cf:94:91:b0:cd:dd:a3:2c:f4:29:5c:f8:47:8b:
                    59:0d:eb:c9:7a:a9:46:02:b9:19:14:29:1b:64:57:
                    6f:29:5a:7c:84:ab:ae:8a:c3:9d:7f:08:53:b4:88:
                    90:02:fe:bf:0a:ad:90:12:66:c0:2a:34:46:11:ae:
                    08:bd:69:c2:42:3a:f7:7f:37:dc:62:86:7f:f6:a9:
                    cb:a8:d9:63:50:bc:ac:04:a6:27:bf:55:3e:1d:78:
                    d5:8d:38:6e:5d:22:11:ae:38:43:4f:a3:7b:1f:3e:
                    a6:a8:7d:99:18:b1:28:b5:14:e9:9b:75:36:b7:19:
                    66:9d:86:2b:32:6f:0e:96:30:11:9e:84:ef:7a:f0:
                    7b:37:c1:33:4c:c8:c0:ea:e2:ca:34:4a:22:ba:39:
                    2a:4f:0a:9f:23:98:b7:aa:e3:3d:7a:b9:85:66:9f:
                    32:1e:2e:a3:24:07:d7:05:03:29:79:24:f7:d3:47:
                    62:b7:01:11:8b:44:14:55:54:2d:d1:68:f4:7e:29:
                    e0:99:1b:f4:fe:d0:5d:c2:0e:d4:f9:12:39:1a:b4:
                    40:84:03:ec:43:88:0a:93:6d:19:22:ab:a8:f8:4f:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:45:BB:92:37:E1:D7:D6:09:24:91:C3:72:A4:5F:14:F4:DD:AF
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wnhFu5I34dfWCSSRw3KkXxT03a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:79:b8:8f:f6:bf:b7:91:04:83:ff:6d:20:22:6b:79:97:f3:
         9e:cc:84:74:06:ec:07:54:37:8a:5a:10:be:1d:b6:dd:22:cb:
         e0:88:f1:24:8c:46:3e:3c:40:e1:59:ce:41:7f:4a:d8:5b:fd:
         82:a4:e7:d0:1d:1d:65:a8:f4:e8:fd:de:db:a9:8f:6d:b5:30:
         19:38:dd:4b:fe:87:44:df:5c:9d:f0:43:4f:f5:3b:05:3f:13:
         aa:f0:77:e2:b7:e7:f5:60:78:b5:b1:c9:f7:33:30:a2:22:65:
         81:46:5d:04:2a:cc:c4:13:0a:e7:4b:0e:c1:99:b8:55:0c:85:
         2b:ad:c7:01:85:b6:e2:74:80:dc:d2:46:7c:f8:67:73:3f:80:
         bc:58:4d:76:65:84:61:61:34:0e:a4:7c:af:a7:b0:3a:b0:80:
         b2:f2:d1:6b:1c:11:c0:8d:f0:6c:e8:16:87:0e:53:aa:1e:e2:
         67:cf:61:2e:36:20:99:25:4e:b4:22:5f:07:6a:c2:b9:a8:0b:
         eb:84:d3:3d:c3:cb:d6:cf:5f:32:95:ce:48:d1:ed:72:9c:c0:
         89:cc:61:bd:8d:1a:b6:d6:c1:90:53:d2:c0:dc:c7:de:2f:ef:
         30:24:b6:66:52:03:02:4b:77:d1:76:20:1e:66:0c:76:e6:7c:
         ec:94:71:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ/kpTaPtntj+1T+2kDSah/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMjIzMTgzOTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjc4NDViYjkyMzdlMWQ3ZDYwOTI0OTFjMzcyYTQ1ZjE0ZjRkZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknVqaIiN/cFuMyyKQKeahxhYCV7j
AMDamEVSkjvDz5SRsM3doyz0KVz4R4tZDevJeqlGArkZFCkbZFdvKVp8hKuuisOd
fwhTtIiQAv6/Cq2QEmbAKjRGEa4IvWnCQjr3fzfcYoZ/9qnLqNljULysBKYnv1U+
HXjVjThuXSIRrjhDT6N7Hz6mqH2ZGLEotRTpm3U2txlmnYYrMm8OljARnoTvevB7
N8EzTMjA6uLKNEoiujkqTwqfI5i3quM9ermFZp8yHi6jJAfXBQMpeST300ditwER
i0QUVVQt0Wj0fingmRv0/tBdwg7U+RI5GrRAhAPsQ4gKk20ZIquo+E/eFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJ4RbuSN+HX1gkkkcNypF8U9N2vMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvd25oRnU1STM0ZGZXQ1NTUnczS2tYeFQwM2E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXavoMA0G
CSqGSIb3DQEBCwUAA4IBAQBBebiP9r+3kQSD/20gImt5l/OezIR0BuwHVDeKWhC+
HbbdIsvgiPEkjEY+PEDhWc5Bf0rYW/2CpOfQHR1lqPTo/d7bqY9ttTAZON1L/odE
31yd8ENP9TsFPxOq8Hfit+f1YHi1scn3MzCiImWBRl0EKszEEwrnSw7BmbhVDIUr
rccBhbbidIDc0kZ8+GdzP4C8WE12ZYRhYTQOpHyvp7A6sICy8tFrHBHAjfBs6BaH
DlOqHuJnz2EuNiCZJU60Il8HasK5qAvrhNM9w8vWz18ylc5I0e1ynMCJzGG9jRq2
1sGQU9LA3MfeL+8wJLZmUgMCS3fRdiAeZgx25nzslHEV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:52 2024 by rpki-client on console-ams.rpki-client.org