Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/WG5eVRwKKkTgxJl-cxNmHv7KisI.roa
File:                     WG5eVRwKKkTgxJl-cxNmHv7KisI.roa (raw, json)
Hash identifier:          Krglwn+5NZTyZpX3tBsXvsWF+x7X+cMeQrKRRMrT2Co=
Subject key identifier:   58:6E:5E:55:1C:0A:2A:44:E0:C4:99:7E:73:13:66:1E:FE:CA:8A:C2
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01903FE24E3AE3A61CE1D860A94B64D5E573
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/WG5eVRwKKkTgxJl-cxNmHv7KisI.roa
Signing time:             Sat 22 Jun 2024 12:18:33 +0000
ROA not before:           Sat 22 Jun 2024 12:18:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204104
IP address blocks:        212.80.8.0/24 maxlen: 24
                          212.80.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 12:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3f:e2:4e:3a:e3:a6:1c:e1:d8:60:a9:4b:64:d5:e5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jun 22 12:18:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=586e5e551c0a2a44e0c4997e7313661efeca8ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:04:3d:50:c1:e8:a6:81:57:25:e2:35:3e:
                    62:b1:71:01:3d:5c:ac:a6:3b:92:58:08:c7:02:5d:
                    d9:40:22:70:f5:7f:e7:95:e3:7d:d6:f6:b0:ab:e0:
                    13:8d:e2:3f:60:9d:c2:ee:0f:23:bf:51:51:01:d9:
                    28:c3:a0:79:ac:2e:a3:b0:b3:3f:ff:bd:a5:69:80:
                    0b:5b:fa:f3:32:12:72:af:42:67:7f:53:d9:9b:97:
                    17:f1:70:45:55:1f:3d:7e:25:61:f9:15:93:74:82:
                    c5:19:0a:aa:48:2c:32:6d:b0:ae:2b:33:a9:03:66:
                    f5:2a:0a:cd:51:69:25:dc:93:89:5e:2a:e0:1c:0c:
                    23:27:1b:cf:a1:5a:72:85:b0:b0:5e:b0:76:e5:1e:
                    2a:ec:4b:82:86:5b:09:6e:bc:16:79:36:74:8e:1e:
                    6d:05:9f:b7:32:55:49:fc:c8:1a:69:12:d2:0b:e9:
                    e8:ad:74:69:56:0f:64:b6:31:4b:a9:9b:c3:0e:76:
                    98:3f:e1:a5:22:96:a9:e4:2a:7b:d0:cc:45:bd:a7:
                    d7:10:ee:61:ee:e5:64:a0:e1:76:cc:2d:3f:eb:2d:
                    72:8d:6a:9c:ea:3b:fa:c1:62:0b:71:a5:b2:23:68:
                    22:ad:d2:b2:53:80:1b:56:8e:09:ab:30:d5:d5:c1:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6E:5E:55:1C:0A:2A:44:E0:C4:99:7E:73:13:66:1E:FE:CA:8A:C2
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/WG5eVRwKKkTgxJl-cxNmHv7KisI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.80.8.0/24
                  212.80.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:18:0b:f2:9e:4e:8f:4e:13:b9:23:98:fe:db:3b:6c:11:
         c8:fe:53:c6:69:1e:2f:a7:9f:8a:7d:64:17:00:39:02:5e:c4:
         40:b3:cd:27:da:f8:a6:ed:2f:3c:f0:2d:6d:db:de:15:21:35:
         fc:38:35:eb:d1:94:91:5a:e5:e7:d5:9f:d6:0f:5f:bd:45:c9:
         63:a9:b0:79:1f:25:9f:77:dc:b4:23:4c:d4:95:ce:65:e9:77:
         53:db:ab:83:16:e1:1f:6a:78:10:eb:c5:97:c8:47:fa:2e:61:
         48:9f:a5:47:7b:da:d1:02:ff:af:41:e4:0e:f6:43:32:1a:e4:
         a5:55:2a:d9:ef:27:da:8c:0d:43:07:da:2b:41:be:74:f6:c4:
         02:1e:6c:f6:b5:d1:52:ce:51:6b:24:70:f9:69:fa:02:63:d0:
         db:0d:d4:5a:98:d7:67:cd:69:d6:8e:23:c4:c4:74:b6:b5:27:
         fe:e5:44:3c:02:72:6c:1c:4a:28:4b:c3:57:3c:e5:10:4c:1d:
         22:96:72:53:47:78:1a:ae:5c:c7:bb:81:65:2d:d6:59:cc:f9:
         0c:a1:78:e6:bf:d0:c3:09:b7:d3:f3:34:3d:71:1d:54:4a:55:
         b4:b7:2c:c7:0a:57:7d:12:6c:b5:47:d6:a2:2c:38:fb:ef:b5:
         d6:ad:c9:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZA/4k4646Yc4dhgqUtk1eVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwNjIyMTIxODMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODZlNWU1NTFjMGEyYTQ0ZTBjNDk5N2U3MzEzNjYxZWZlY2E4YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3QEPVDB6KaBVyXiNT5isXEBPVys
pjuSWAjHAl3ZQCJw9X/nleN91vawq+ATjeI/YJ3C7g8jv1FRAdkow6B5rC6jsLM/
/72laYALW/rzMhJyr0Jnf1PZm5cX8XBFVR89fiVh+RWTdILFGQqqSCwybbCuKzOp
A2b1KgrNUWkl3JOJXirgHAwjJxvPoVpyhbCwXrB25R4q7EuChlsJbrwWeTZ0jh5t
BZ+3MlVJ/MgaaRLSC+norXRpVg9ktjFLqZvDDnaYP+GlIpap5Cp70MxFvafXEO5h
7uVkoOF2zC0/6y1yjWqc6jv6wWILcaWyI2girdKyU4AbVo4JqzDV1cENYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFhuXlUcCipE4MSZfnMTZh7+yorCMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvV0c1ZVZSd0tLa1RneEpsLWN4Tm1IdjdLaXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1FAIAwQA
1FAKMA0GCSqGSIb3DQEBCwUAA4IBAQBdPBgL8p5Oj04TuSOY/ts7bBHI/lPGaR4v
p5+KfWQXADkCXsRAs80n2vim7S888C1t294VITX8ODXr0ZSRWuXn1Z/WD1+9Rclj
qbB5HyWfd9y0I0zUlc5l6XdT26uDFuEfangQ68WXyEf6LmFIn6VHe9rRAv+vQeQO
9kMyGuSlVSrZ7yfajA1DB9orQb509sQCHmz2tdFSzlFrJHD5afoCY9DbDdRamNdn
zWnWjiPExHS2tSf+5UQ8AnJsHEooS8NXPOUQTB0ilnJTR3garlzHu4FlLdZZzPkM
oXjmv9DDCbfT8zQ9cR1USlW0tyzHCld9Emy1R9aiLDj777XWrck3
-----END CERTIFICATE-----
Generated at Wed Aug 28 16:05:30 2024 by rpki-client on console-fra.rpki-client.org