Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/W9N-0rF8bEHGxoD42AUKuzGQUhk.roa
File:                     W9N-0rF8bEHGxoD42AUKuzGQUhk.roa (raw, json)
Hash identifier:          bqRKOF8bYedA7Fbm4nllGLgQrUUTJ/SZUQLlgecWS/Y=
Subject key identifier:   5B:D3:7E:D2:B1:7C:6C:41:C6:C6:80:F8:D8:05:0A:BB:31:90:52:19
Certificate issuer:       /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial:       01869B0732EFEA2FE68563195AAA7DA670BD
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/W9N-0rF8bEHGxoD42AUKuzGQUhk.roa
Signing time:             Wed 01 Mar 2023 02:36:25 +0000
ROA not before:           Wed 01 Mar 2023 02:36:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        95.182.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Mar 2023 16:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9b:07:32:ef:ea:2f:e6:85:63:19:5a:aa:7d:a6:70:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
        Validity
            Not Before: Mar  1 02:36:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5bd37ed2b17c6c41c6c680f8d8050abb31905219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:f5:f0:4f:c8:7a:4d:74:b9:14:06:31:e6:
                    10:0f:d5:0b:eb:b8:09:c4:15:57:1f:0d:a4:f8:39:
                    f5:88:57:e3:2e:6e:20:e0:dc:26:38:3a:27:79:6e:
                    05:81:02:73:98:3a:1c:c7:78:b2:e9:ef:db:1e:a4:
                    3d:7e:90:0a:6c:2f:78:a1:cd:16:44:42:a0:ca:28:
                    00:e5:2f:79:43:89:a6:b9:0f:26:5e:f7:50:59:8f:
                    e4:2a:32:be:c9:aa:ad:1e:62:90:9e:06:2c:78:25:
                    14:1f:31:5c:bd:fe:76:f9:cc:ed:84:9d:ed:8d:ca:
                    0c:c8:0c:e9:98:2e:b4:e1:18:8c:b3:8c:74:16:47:
                    f4:9b:ae:38:5a:09:7f:ec:cd:e4:f6:53:75:33:3c:
                    17:f8:e8:31:89:9c:f3:99:0d:47:bf:7a:13:48:8d:
                    e4:22:83:06:f9:a8:fd:18:39:2e:bb:c0:d5:66:ac:
                    a5:6c:56:7d:50:e4:4a:69:16:d0:7b:72:c5:67:16:
                    39:fe:33:5d:20:59:cd:09:f6:90:69:0d:63:43:f9:
                    33:f7:d6:eb:4b:4d:99:a8:a7:58:20:6e:e2:c0:d8:
                    38:07:b5:9a:7d:43:c5:a0:7b:98:a3:db:ba:72:e7:
                    6d:01:c2:a4:ef:1a:16:89:d9:cd:65:3e:46:64:e8:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D3:7E:D2:B1:7C:6C:41:C6:C6:80:F8:D8:05:0A:BB:31:90:52:19
            X509v3 Authority Key Identifier:
                keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/W9N-0rF8bEHGxoD42AUKuzGQUhk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.182.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:48:ef:86:e8:e8:07:9c:5b:37:8c:19:8c:0e:e4:a3:8c:
         66:34:16:15:b6:01:f0:6a:e6:96:28:63:d3:5a:d5:0a:3a:92:
         58:5a:6f:fc:03:17:ba:6c:fe:b7:ba:6e:a3:9e:8b:22:d2:43:
         2c:c4:00:64:45:ad:f1:ff:2d:36:0c:17:11:33:c6:29:a7:06:
         d2:cd:3a:4b:9f:f6:b6:89:1e:5e:52:58:0a:c8:d1:9a:57:b9:
         0e:55:ae:4d:74:30:40:8a:c2:01:51:41:fa:74:62:23:17:99:
         29:59:6b:6f:4d:f7:3d:6b:d5:db:31:e7:24:57:7e:04:1a:91:
         7e:cb:d3:8d:33:14:e1:f2:fd:c7:70:b9:df:e6:ab:3a:39:ce:
         c6:a6:c9:b1:eb:55:8a:ef:ce:16:00:12:83:6d:25:e2:d7:0b:
         f7:38:b7:5b:73:dd:89:8b:7d:ba:88:8a:4b:79:a9:76:93:e2:
         03:58:38:6b:27:b0:e6:01:fc:cf:0c:11:2f:15:26:bb:83:67:
         c8:d7:db:5d:a5:88:21:07:a1:55:ea:78:cd:af:7a:95:5b:72:
         b3:2d:4f:e3:8a:e7:af:c7:83:c5:96:25:18:16:e5:ec:15:64:
         b3:ef:d3:87:cd:1a:c9:f6:7a:de:e0:74:8b:aa:a8:22:a1:bf:
         e1:cb:64:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYabBzLv6i/mhWMZWqp9pnC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjMwMzAxMDIzNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmQzN2VkMmIxN2M2YzQxYzZjNjgwZjhkODA1MGFiYjMxOTA1MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaD18E/Iek10uRQGMeYQD9UL67gJ
xBVXHw2k+Dn1iFfjLm4g4NwmODoneW4FgQJzmDocx3iy6e/bHqQ9fpAKbC94oc0W
REKgyigA5S95Q4mmuQ8mXvdQWY/kKjK+yaqtHmKQngYseCUUHzFcvf52+czthJ3t
jcoMyAzpmC604RiMs4x0Fkf0m644Wgl/7M3k9lN1MzwX+OgxiZzzmQ1Hv3oTSI3k
IoMG+aj9GDkuu8DVZqylbFZ9UORKaRbQe3LFZxY5/jNdIFnNCfaQaQ1jQ/kz99br
S02ZqKdYIG7iwNg4B7WafUPFoHuYo9u6cudtAcKk7xoWidnNZT5GZOj+eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFvTftKxfGxBxsaA+NgFCrsxkFIZMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvVzlOLTByRjhiRUhHeG9ENDJBVUt1ekdRVWhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7ZMMA0G
CSqGSIb3DQEBCwUAA4IBAQB6OkjvhujoB5xbN4wZjA7ko4xmNBYVtgHwauaWKGPT
WtUKOpJYWm/8Axe6bP63um6jnosi0kMsxABkRa3x/y02DBcRM8YppwbSzTpLn/a2
iR5eUlgKyNGaV7kOVa5NdDBAisIBUUH6dGIjF5kpWWtvTfc9a9XbMeckV34EGpF+
y9ONMxTh8v3HcLnf5qs6Oc7Gpsmx61WK784WABKDbSXi1wv3OLdbc92Ji326iIpL
eal2k+IDWDhrJ7DmAfzPDBEvFSa7g2fI19tdpYghB6FV6njNr3qVW3KzLU/jiuev
x4PFliUYFuXsFWSz79OHzRrJ9nre4HSLqqgiob/hy2Sx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org