Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbSmj-vo3zL222biuPvFFH3ZHjU.roa
File:                     wbSmj-vo3zL222biuPvFFH3ZHjU.roa (raw, json)
Hash identifier:          e4Zfl8nLYe8C26SBq3bxLdhVuVZ/A/JVFYN1x61stiw=
Subject key identifier:   C1:B4:A6:8F:EB:E8:DF:32:F6:DB:66:E2:B8:FB:C5:14:7D:D9:1E:35
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0188C54E9E7BA58FB736F4B6496C78258398
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbSmj-vo3zL222biuPvFFH3ZHjU.roa
Signing time:             Fri 16 Jun 2023 17:44:03 +0000
ROA not before:           Fri 16 Jun 2023 17:44:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        86.107.51.0/24 maxlen: 24
                          89.36.140.0/24 maxlen: 24
                          89.35.130.0/23 maxlen: 23
                          89.35.131.0/24 maxlen: 24
                          46.102.237.0/24 maxlen: 24
                          188.241.137.0/24 maxlen: 24
                          94.198.171.0/24 maxlen: 24
                          92.114.32.0/24 maxlen: 24
                          77.81.88.0/24 maxlen: 24
                          89.45.35.0/24 maxlen: 24
                          188.214.107.0/24 maxlen: 24
                          176.223.188.0/24 maxlen: 24
                          86.105.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Jun 2023 20:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c5:4e:9e:7b:a5:8f:b7:36:f4:b6:49:6c:78:25:83:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 16 17:44:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1b4a68febe8df32f6db66e2b8fbc5147dd91e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:1e:8a:e6:ab:0f:f4:02:76:1d:91:1d:24:
                    e9:e3:e3:d0:75:54:09:82:a7:32:eb:56:9d:0d:1a:
                    d8:9e:f1:a3:8e:c1:83:aa:b9:ce:5e:e1:ae:4d:89:
                    28:bf:9c:da:18:9e:24:0d:12:fd:17:b5:f4:24:d5:
                    62:63:ee:cf:0a:31:8d:aa:61:8c:af:48:1c:65:10:
                    6d:27:aa:61:80:e8:11:a9:e0:79:41:10:4f:b6:8b:
                    26:b5:85:bf:c1:b5:cb:da:46:90:30:13:d7:06:9e:
                    e0:89:c9:96:e8:c3:5e:28:44:7c:95:68:4c:96:6c:
                    e8:e4:16:01:d6:d1:1c:78:7e:54:a7:ad:3f:8d:86:
                    53:44:27:90:f8:4e:ee:de:b0:4c:84:30:26:c2:11:
                    93:e9:1d:4c:63:af:4d:5c:d3:06:d7:99:ee:03:f5:
                    26:16:7a:88:1a:12:46:a3:52:b3:b3:7a:70:40:04:
                    cc:7e:b7:2e:63:0a:78:a3:0f:23:34:9e:22:7a:93:
                    7c:ee:48:fc:a5:2e:72:14:3c:42:bc:20:70:97:61:
                    02:9a:6b:0a:f4:a9:c3:ab:bc:49:d9:1a:5e:0a:75:
                    39:0f:db:1e:93:3b:8a:da:87:74:84:57:d5:0d:da:
                    d9:8c:6e:7e:2c:42:da:97:ee:68:6b:c8:25:1c:f4:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:A6:8F:EB:E8:DF:32:F6:DB:66:E2:B8:FB:C5:14:7D:D9:1E:35
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbSmj-vo3zL222biuPvFFH3ZHjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.237.0/24
                  77.81.88.0/24
                  86.105.4.0/24
                  86.107.51.0/24
                  89.35.130.0/23
                  89.36.140.0/24
                  89.45.35.0/24
                  92.114.32.0/24
                  94.198.171.0/24
                  176.223.188.0/24
                  188.214.107.0/24
                  188.241.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:84:aa:4e:e0:6d:b0:ca:08:79:ba:91:40:08:05:c5:2c:2c:
         9d:eb:7e:39:2e:3a:07:84:11:16:e6:62:9a:b6:b4:d2:90:09:
         6d:94:66:c4:09:5a:ce:6b:47:65:85:a2:3d:f5:3b:29:1f:ab:
         36:0b:ce:8e:04:36:1b:7d:bb:d6:99:d6:44:57:e7:03:0f:85:
         43:27:15:72:4b:af:fc:e5:dd:1c:a8:e7:21:af:fd:3c:72:0f:
         f9:cc:ab:f5:cb:11:b2:a0:4c:93:73:c2:af:c5:df:a4:76:d0:
         0d:92:87:19:83:2d:4b:80:14:1d:78:db:35:bd:08:32:ea:9c:
         e3:94:e1:b4:51:79:54:27:62:8b:44:98:36:9c:d5:2b:a2:e9:
         b0:d1:97:58:61:18:61:0f:56:48:e5:8d:40:db:a9:81:44:14:
         d3:d1:00:ed:69:2f:b6:70:0c:ee:51:92:f9:87:96:d8:91:8e:
         e0:36:3c:07:d7:2f:a9:42:f1:9f:0a:66:5c:24:cc:43:e2:81:
         5a:11:89:3c:fb:c2:b0:d0:e1:db:4d:b7:4c:a2:3f:72:6c:53:
         83:b7:1e:c3:32:2d:e1:c1:67:26:df:52:38:d8:00:2c:a4:0b:
         46:99:fc:53:06:e4:b9:dd:f2:5a:90:26:fe:a8:af:e5:ab:c7:
         11:7c:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org