Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WMbZXMaYgMmKSWvSJGM-csRaHcc.roa
File:                     WMbZXMaYgMmKSWvSJGM-csRaHcc.roa (raw, json)
Hash identifier:          Ul9YGuwadeTS/sNVhf5Jaa8OVOAqPXYgnQs1CHwc1dE=
Subject key identifier:   58:C6:D9:5C:C6:98:80:C9:8A:49:6B:D2:24:63:3E:72:C4:5A:1D:C7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018CC6B7ADD4F46BDDF267ACE458908CEF67
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WMbZXMaYgMmKSWvSJGM-csRaHcc.roa
Signing time:             Mon 01 Jan 2024 20:29:35 +0000
ROA not before:           Mon 01 Jan 2024 20:29:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212886
IP address blocks:        176.57.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 05:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:ad:d4:f4:6b:dd:f2:67:ac:e4:58:90:8c:ef:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 20:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=58c6d95cc69880c98a496bd224633e72c45a1dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:5d:1c:8b:a3:aa:08:69:1e:cf:0b:a2:04:
                    3f:6f:9b:39:54:21:90:35:cf:f4:68:da:8d:7d:89:
                    96:df:45:bd:7c:91:ce:eb:2b:99:35:f4:4a:36:18:
                    8d:b3:64:da:f1:a3:0c:ea:f0:b7:20:34:f3:67:a7:
                    aa:b5:70:c4:06:44:e8:e0:d4:9d:0f:31:08:e6:30:
                    1c:fe:f3:a0:34:ae:be:5c:7a:65:c0:35:0d:76:e3:
                    5a:d7:04:c0:d5:37:ef:b6:5f:17:9b:14:b4:53:18:
                    ba:b0:27:16:bb:1a:5d:e3:0b:57:62:05:ec:55:00:
                    a0:5e:5f:f8:a6:f8:31:6c:ef:ca:4c:16:4b:2c:d0:
                    6b:90:c2:d1:75:0e:0c:5e:10:d6:3f:60:62:fd:67:
                    94:4b:01:33:cc:e9:56:93:9e:a3:47:33:71:aa:7d:
                    53:61:8a:b0:45:5d:3e:d5:6a:e3:1e:ee:07:bd:fc:
                    b7:2f:6f:a4:3f:66:4a:97:53:bb:ba:90:4b:a0:e4:
                    67:6a:32:65:72:4c:1e:45:28:24:c8:2e:e6:66:6b:
                    37:cf:1c:39:7a:39:b0:c6:6d:fd:2b:94:f0:c7:ca:
                    6d:c1:78:cd:ff:69:56:19:95:45:a4:23:f5:d5:e6:
                    54:e2:96:44:d5:c1:ed:53:ef:3a:06:29:93:4a:98:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:D9:5C:C6:98:80:C9:8A:49:6B:D2:24:63:3E:72:C4:5A:1D:C7
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/WMbZXMaYgMmKSWvSJGM-csRaHcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:63:14:42:07:52:ba:ee:25:0b:d0:4a:0b:e9:78:bb:d1:0d:
         d7:68:ee:ad:62:7e:be:55:2d:28:06:2d:ab:c9:67:50:89:46:
         14:83:d8:0b:6f:51:56:0e:da:1a:1e:78:12:61:d4:4a:86:7a:
         02:f0:ec:34:3e:18:e3:24:b9:0a:d5:b4:a5:e8:29:2f:52:05:
         3d:77:85:8d:c9:01:32:24:ac:a4:c9:cf:5a:5b:b8:29:0b:41:
         1d:c5:c8:e8:35:cb:4a:6b:09:c8:1a:ce:11:a4:5d:f8:e1:c1:
         a8:76:31:4a:2e:c1:0e:33:65:87:8e:0a:62:1d:73:9f:09:7f:
         55:ca:40:27:a5:42:03:3e:77:ab:db:98:05:88:11:b3:90:39:
         a1:5e:2d:ab:af:31:5e:10:a3:e6:1e:7f:17:cc:f6:50:99:9f:
         ca:07:08:68:e8:10:e9:53:e9:c3:0f:25:5d:06:c1:77:7d:4e:
         09:01:fc:eb:45:5d:35:b5:7c:77:c8:e7:32:4e:94:c0:49:8e:
         9e:8b:e5:c0:80:3c:ad:8f:e8:cc:28:52:d4:70:74:6b:26:eb:
         9a:6b:b1:7e:61:ec:8a:d0:28:99:5b:aa:a7:36:48:15:4e:7d:
         56:05:0e:3f:72:61:0f:d8:ad:13:0e:09:8f:3c:a3:36:c4:5d:
         ac:3d:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org