Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/WIEEXdu5n_BRiH0KjddAovodXXc.roa
File:                     WIEEXdu5n_BRiH0KjddAovodXXc.roa (raw, json)
Hash identifier:          7UONlERXyzei8O1Te41y0k0emWUl5B2Q0qGaEVnesl0=
Subject key identifier:   58:81:04:5D:DB:B9:9F:F0:51:88:7D:0A:8D:D7:40:A2:FA:1D:5D:77
Certificate issuer:       /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial:       01856D5CF72503E1A177A6BF1CDC6C03E0B7
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/WIEEXdu5n_BRiH0KjddAovodXXc.roa
Signing time:             Sun 01 Jan 2023 12:44:46 +0000
ROA not before:           Sun 01 Jan 2023 12:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57356
IP address blocks:        194.140.215.0/24 maxlen: 24
                          194.140.216.0/22 maxlen: 22
                          194.140.214.0/24 maxlen: 24
                          194.140.222.0/23 maxlen: 23
                          194.140.222.0/24 maxlen: 24
                          194.140.223.0/24 maxlen: 24
                          194.140.220.0/23 maxlen: 23
                          87.117.84.0/23 maxlen: 23
                          87.117.80.0/22 maxlen: 22
                          87.117.80.0/20 maxlen: 20
                          87.117.88.0/22 maxlen: 22
                          87.117.86.0/23 maxlen: 23
                          87.117.92.0/22 maxlen: 22
                          194.140.212.0/22 maxlen: 22
                          194.140.212.0/24 maxlen: 24
                          194.140.210.0/23 maxlen: 23
                          194.140.208.0/22 maxlen: 22
                          194.140.208.0/23 maxlen: 23
                          194.140.208.0/20 maxlen: 20
                          194.140.213.0/24 maxlen: 24
                          91.185.176.0/22 maxlen: 22
                          31.216.0.0/20 maxlen: 20
                          91.185.176.0/21 maxlen: 21
                          185.20.164.0/23 maxlen: 23
                          185.20.164.0/22 maxlen: 22
                          31.216.0.0/21 maxlen: 21
                          91.185.180.0/22 maxlen: 22
                          185.20.166.0/23 maxlen: 23
                          31.216.8.0/21 maxlen: 21
                          86.111.160.0/21 maxlen: 21
                          86.111.160.0/20 maxlen: 20
                          86.111.172.0/23 maxlen: 23
                          86.111.168.0/22 maxlen: 22
                          86.111.174.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:5c:f7:25:03:e1:a1:77:a6:bf:1c:dc:6c:03:e0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
        Validity
            Not Before: Jan  1 12:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5881045ddbb99ff051887d0a8dd740a2fa1d5d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:d7:f6:3e:cd:91:d4:b0:c3:12:55:b3:8e:
                    c4:7d:0e:bc:34:c4:e1:59:8e:64:21:31:8b:9a:c0:
                    11:33:77:f9:ee:18:ca:d8:46:8c:ce:db:7d:bb:5f:
                    72:cf:36:e7:56:91:a0:69:7a:f3:d7:ea:14:87:ae:
                    e8:09:70:68:f1:d5:d5:04:a2:77:c7:2c:a7:38:77:
                    36:0c:ab:9f:91:46:e1:64:01:0d:28:6f:27:8e:66:
                    a0:e2:e3:5e:80:69:96:70:50:1a:9d:94:35:ac:e9:
                    80:b8:f5:d3:cf:9a:1e:03:ac:f2:76:dd:53:9f:05:
                    61:86:d4:dc:97:ac:b4:53:22:1e:9a:2a:ed:dd:00:
                    0d:5a:ff:0c:35:d3:68:39:53:31:df:01:2f:b9:dd:
                    05:83:60:e2:59:5a:f7:22:82:ad:13:00:e0:48:15:
                    18:a2:ea:cf:b5:26:c5:f1:ad:c0:ea:a8:41:cc:a6:
                    09:63:a0:a7:f9:82:de:f3:72:db:bb:d7:d8:cf:7d:
                    5f:aa:1e:bb:bf:90:49:1c:c9:97:6b:a4:b1:78:79:
                    ad:7d:17:8c:a6:85:5d:dd:22:0d:90:12:47:a9:33:
                    e0:0b:03:3e:58:a5:d5:2c:1f:0a:79:b5:51:96:1e:
                    6e:c6:f1:fd:71:7a:28:48:c9:51:0c:62:20:9d:a7:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:81:04:5D:DB:B9:9F:F0:51:88:7D:0A:8D:D7:40:A2:FA:1D:5D:77
            X509v3 Authority Key Identifier:
                keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/WIEEXdu5n_BRiH0KjddAovodXXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.216.0.0/20
                  86.111.160.0/20
                  87.117.80.0/20
                  91.185.176.0/21
                  185.20.164.0/22
                  194.140.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:76:8c:92:9b:4c:95:69:93:85:50:53:54:19:c0:54:fb:9e:
         f7:95:43:e5:ee:9a:d8:71:30:36:61:91:a2:6f:72:e1:ce:b2:
         d9:05:1a:08:f9:94:04:de:59:bc:24:de:bb:1e:80:f6:99:14:
         7d:73:60:1d:6c:32:d3:ac:5f:a3:44:b1:75:7e:4c:e3:9c:64:
         a5:ca:c3:ca:84:65:8a:1a:98:4e:cf:8d:20:20:5e:db:c3:da:
         40:51:93:7c:1c:05:9f:83:c2:08:e3:88:ae:40:23:8f:4f:2e:
         92:9a:70:25:03:2a:e3:17:a3:ec:d7:76:04:a7:a4:aa:b9:d1:
         4e:90:a8:52:a5:81:6f:7c:dd:31:a6:61:7c:c7:d7:76:a4:db:
         4f:50:08:04:1c:79:c2:13:1e:c7:56:69:80:dd:ad:e1:1d:68:
         c3:df:5c:ee:34:b0:27:47:ff:9c:f9:a1:1f:59:00:6a:44:24:
         d5:31:5a:11:0e:ce:cf:22:c2:07:b6:f1:0e:a1:6f:32:60:6e:
         89:f0:3e:7c:18:d3:e6:f1:00:1e:38:a1:35:54:51:5e:b4:79:
         e4:52:21:70:fb:89:b9:73:30:f0:ad:b7:84:42:62:04:ad:fc:
         4d:7b:9b:4a:04:b7:e8:66:51:7c:dd:40:46:97:10:6e:a2:0b:
         3a:b8:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:05 2024 by rpki-client on console-fra.rpki-client.org