Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/WfhloW7_VnYFOf4x8ZOtTicTPnY.roa
File:                     WfhloW7_VnYFOf4x8ZOtTicTPnY.roa (raw, json)
Hash identifier:          mDniEvEwTQhJFQJtesUXdFyD0vRP8O72i/qCgycl8iI=
Subject key identifier:   59:F8:65:A1:6E:FF:56:76:05:39:FE:31:F1:93:AD:4E:27:13:3E:76
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       0186B68DA2264A70007EE2C41A655C0D166A
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/WfhloW7_VnYFOf4x8ZOtTicTPnY.roa
Signing time:             Mon 06 Mar 2023 10:53:00 +0000
ROA not before:           Mon 06 Mar 2023 10:53:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200017
IP address blocks:        45.151.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:8d:a2:26:4a:70:00:7e:e2:c4:1a:65:5c:0d:16:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Mar  6 10:53:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59f865a16eff56760539fe31f193ad4e27133e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:ec:66:ec:39:45:73:46:6d:a1:f7:a5:94:
                    8e:0e:cb:80:b7:32:21:ea:8f:72:24:51:93:5c:84:
                    31:c7:b5:27:a2:fa:c9:04:93:95:0b:d2:5e:ab:3a:
                    8b:f2:ee:cd:b7:79:6a:2b:79:fd:f4:c3:53:e8:98:
                    b3:55:d0:76:71:a5:a4:7d:40:7d:23:ed:54:ac:80:
                    4c:96:33:70:e2:cb:09:9b:8b:93:36:15:9f:89:40:
                    cb:fc:ed:66:bb:e3:58:c7:32:82:23:82:8a:0d:9d:
                    f1:2b:84:c5:e5:ee:28:94:fe:7a:06:87:ae:e9:5a:
                    c0:b5:22:65:37:7d:57:38:49:cb:07:5b:39:47:0c:
                    6b:8f:06:3d:19:00:92:3b:50:f9:d7:b2:91:60:14:
                    be:0a:f7:d0:e3:04:33:f6:79:84:1c:dd:1e:5b:fd:
                    5c:aa:5c:af:18:68:de:d3:db:c8:ec:7a:0c:e0:fa:
                    d2:64:5b:b6:19:db:de:2d:41:1e:49:be:4a:f6:10:
                    36:32:b7:9e:2d:96:21:26:2a:96:1f:7a:5a:ab:7d:
                    e4:f5:e2:71:2d:9f:52:7a:14:50:33:d6:9a:df:83:
                    52:97:8e:56:aa:f1:87:c4:67:1d:70:85:0c:47:af:
                    2e:67:5c:c7:86:54:f0:e4:9e:56:33:65:32:d2:e4:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:65:A1:6E:FF:56:76:05:39:FE:31:F1:93:AD:4E:27:13:3E:76
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/WfhloW7_VnYFOf4x8ZOtTicTPnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:de:c8:30:02:fa:e6:96:df:fd:70:ac:e6:a8:eb:e3:88:
         06:11:60:cf:93:ff:f2:00:da:01:8a:1d:bc:61:ef:6a:ab:25:
         f2:18:b4:c1:8a:30:99:82:ec:1f:cc:d0:43:dc:fd:05:79:f1:
         86:26:d2:71:73:cb:24:60:da:a6:08:0b:da:05:7e:f5:52:89:
         d3:e4:91:7d:9f:e2:c8:31:c6:28:c2:ac:6c:95:34:91:61:06:
         99:08:a1:c9:5d:54:17:53:78:5f:c7:d1:92:51:38:cc:be:04:
         c3:5c:e4:63:2b:0c:e5:f3:e3:ad:36:fe:8e:47:34:d3:27:4e:
         0a:fb:0c:5b:9a:bc:de:c1:ba:31:23:f6:5f:f2:ca:36:84:5d:
         6e:e1:6d:f5:cf:a9:d9:ce:79:72:d0:03:2e:6b:60:0a:de:cd:
         ef:13:ed:d4:9c:bd:74:52:3b:ba:33:7a:21:5c:1c:d2:45:8c:
         91:f8:f2:27:6b:37:1b:c6:29:ba:83:32:4c:43:76:44:74:a4:
         d3:be:9e:93:31:89:f0:cb:2b:8b:51:d6:92:96:a3:2c:a4:f1:
         43:32:46:8b:ea:6b:51:87:0c:01:e0:aa:0f:bd:a6:d2:24:bf:
         48:f9:0a:b0:eb:f2:f2:26:c1:62:8b:aa:9b:e3:28:65:33:12:
         5c:50:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org