Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wc_NeM3WpRMHirHaX3IlXP_v94g.roa
File:                     wc_NeM3WpRMHirHaX3IlXP_v94g.roa (raw, json)
Hash identifier:          9YS3S5EJnIbscmfbyuXG2xan7wSPGIE+o1rrICGc0WU=
Subject key identifier:   C1:CF:CD:78:CD:D6:A5:13:07:8A:B1:DA:5F:72:25:5C:FF:EF:F7:88
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       01856DC1C811B8B7EBB49158D68C456DA1B6
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wc_NeM3WpRMHirHaX3IlXP_v94g.roa
Signing time:             Sun 01 Jan 2023 14:34:54 +0000
ROA not before:           Sun 01 Jan 2023 14:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29182
IP address blocks:        212.22.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:c8:11:b8:b7:eb:b4:91:58:d6:8c:45:6d:a1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 14:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1cfcd78cdd6a513078ab1da5f72255cffeff788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:51:74:63:d2:75:37:0a:e6:00:f1:b2:62:
                    56:76:3a:50:23:0a:78:d0:19:c2:5f:9e:4e:20:4a:
                    8c:13:fb:bc:db:c0:83:aa:b0:2b:33:3d:0e:2c:6d:
                    9b:66:f7:82:90:5d:4a:90:0e:ee:e3:d0:3e:30:41:
                    13:15:27:9d:1a:ba:b0:17:8c:2d:7c:69:86:81:83:
                    4f:87:e7:44:60:cd:71:5d:59:f8:16:02:57:f0:85:
                    08:45:89:61:cc:f1:28:14:44:4a:7e:3f:39:1e:9c:
                    ea:c5:d5:2e:d5:5a:30:f9:17:ee:f9:29:d0:60:19:
                    0f:22:9b:10:67:39:e3:e7:45:ae:27:90:af:89:7d:
                    fd:36:54:56:1a:e1:6d:38:42:5e:1c:4d:4d:fa:51:
                    dd:2e:a4:0f:a5:59:a2:28:e9:ca:ea:cc:f5:df:e7:
                    6c:20:87:61:95:9a:5c:60:f8:5a:ec:4d:14:49:06:
                    f0:ec:a7:7b:6c:72:94:ce:f2:76:8a:ae:40:3a:11:
                    39:a4:32:cb:08:80:93:c5:44:60:e9:e1:00:04:a0:
                    29:cd:ae:d1:aa:52:9d:d9:39:e2:bd:82:db:cc:ff:
                    10:a8:e4:a8:4a:c9:86:da:92:28:e3:e0:5b:d4:44:
                    a0:92:d5:27:68:25:2c:0e:35:2f:98:be:da:16:e0:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CF:CD:78:CD:D6:A5:13:07:8A:B1:DA:5F:72:25:5C:FF:EF:F7:88
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wc_NeM3WpRMHirHaX3IlXP_v94g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.22.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:97:78:f6:d6:4a:11:aa:db:0e:ba:17:f0:82:20:32:d6:3c:
         ab:0c:68:26:9e:d7:59:7e:22:0c:a8:20:3a:1a:cc:cb:14:3d:
         47:c9:38:fd:42:58:02:75:0f:4a:62:20:58:01:f6:45:94:5d:
         db:96:cc:d4:47:32:4b:e7:b1:6a:01:2c:21:ad:18:58:c6:0f:
         56:f6:26:7c:62:6b:d5:23:00:68:09:70:6f:5e:21:50:87:da:
         88:78:dc:11:5a:43:6f:0a:19:7b:f1:4e:f0:2b:a2:e8:9f:9d:
         a7:8b:7e:41:b4:05:09:54:74:b8:52:9d:a4:8e:07:b4:3d:2e:
         9f:fa:33:be:71:1e:24:30:5e:64:6f:82:bd:2e:fb:ab:e9:b5:
         ab:1a:03:3e:fe:fa:aa:e5:04:14:0e:ad:75:04:5f:d9:2d:06:
         1b:72:13:54:d3:4b:50:fa:5a:96:ba:35:01:84:75:55:45:32:
         51:ee:03:ee:72:79:f1:c5:4f:ba:ef:97:b2:2e:9f:a6:de:8e:
         7a:d0:76:1a:2d:ac:8e:14:a4:36:c3:9b:40:f5:be:dd:80:1e:
         5f:b5:5d:63:bf:6a:d0:db:4a:e8:50:71:46:86:5f:68:97:bc:
         bb:56:aa:3a:e5:ec:51:5c:e7:05:40:be:14:ed:66:61:13:f0:
         d4:9d:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org