Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/WXCj47ATE-SlNDn9FFLN4pi7wRc.roa
File:                     WXCj47ATE-SlNDn9FFLN4pi7wRc.roa (raw, json)
Hash identifier:          XmOJN7pD1CpqQQ+QZsHSCPv/GrtuZf6mxFZDSUkQLbY=
Subject key identifier:   59:70:A3:E3:B0:13:13:E4:A5:34:39:FD:14:52:CD:E2:98:BB:C1:17
Certificate issuer:       /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial:       01869EB0C15C3FA7D0BC7C55AEBFC5E41707
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/WXCj47ATE-SlNDn9FFLN4pi7wRc.roa
Signing time:             Wed 01 Mar 2023 19:40:29 +0000
ROA not before:           Wed 01 Mar 2023 19:40:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49256
IP address blocks:        91.214.13.0/24 maxlen: 24
                          91.214.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9e:b0:c1:5c:3f:a7:d0:bc:7c:55:ae:bf:c5:e4:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
        Validity
            Not Before: Mar  1 19:40:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5970a3e3b01313e4a53439fd1452cde298bbc117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:74:87:f1:3f:9b:18:0e:d7:fe:09:e3:4f:
                    4f:cb:97:18:9d:ac:90:55:2a:73:6e:74:61:a6:f1:
                    0a:1a:2d:73:19:61:72:5c:19:6a:3a:cf:a3:2d:3d:
                    4e:1e:3d:f6:15:0b:94:3e:6d:fe:4f:5d:80:7b:95:
                    c3:f1:87:b8:e7:2f:3e:9c:ae:32:9e:a9:c6:bb:38:
                    44:b4:87:fa:9a:53:ee:5c:d2:1b:8b:b5:22:50:51:
                    67:f3:6e:37:0d:78:14:61:5c:d4:ee:c3:68:42:16:
                    c1:94:6e:d4:27:da:6c:f8:4b:80:94:cb:18:15:d0:
                    20:33:6a:5d:63:ba:a8:8c:68:7f:d0:d4:77:01:e8:
                    85:78:ab:b7:d6:c3:53:91:df:4b:3a:ca:a0:94:91:
                    46:10:c0:5c:fa:dd:d7:fd:69:7e:a8:be:09:a0:06:
                    52:8f:39:61:64:6a:69:f5:d9:73:32:ec:2e:9c:2f:
                    8d:a3:3f:83:b2:fb:70:88:33:23:c1:33:39:99:3c:
                    e0:a1:ee:4d:23:7b:d3:df:e8:cf:21:35:a0:e0:d4:
                    ec:75:4c:84:d9:61:98:f1:32:01:5e:2e:59:d5:72:
                    8e:d5:52:55:9c:ac:de:74:7d:55:f4:56:37:96:ee:
                    b7:6a:c5:02:af:76:d2:39:96:66:04:6c:27:0f:f3:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:A3:E3:B0:13:13:E4:A5:34:39:FD:14:52:CD:E2:98:BB:C1:17
            X509v3 Authority Key Identifier:
                keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/WXCj47ATE-SlNDn9FFLN4pi7wRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.13.0-91.214.14.255

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:54:5d:17:1b:28:ea:f3:c1:4d:ec:3b:8e:70:92:35:7b:
         46:d4:f0:62:a7:e5:73:98:e3:73:b6:4a:8e:3d:7a:ec:01:67:
         01:37:13:0c:cd:f7:f0:dd:ce:b3:5d:01:52:ca:9e:7b:04:4e:
         4f:7b:9e:55:63:8f:f1:88:28:f2:56:44:63:ef:cd:ba:86:ad:
         06:eb:7f:b7:dc:14:31:50:bf:ad:1f:16:d3:18:d1:89:21:fb:
         f4:93:72:78:ce:22:0f:e1:f8:90:21:e5:0a:d9:fd:aa:60:2d:
         54:0d:20:8d:98:83:a3:77:84:81:89:75:5f:2e:f2:7c:5d:f1:
         97:03:89:42:da:be:87:61:8f:b6:46:79:af:e9:45:b8:c0:82:
         14:c1:2f:4c:5a:6e:d2:97:4b:7c:94:c8:68:75:4c:8d:19:7b:
         f5:72:f3:a9:68:2b:ae:cf:13:ca:42:7e:97:68:71:0f:eb:df:
         a0:77:53:ee:e5:bd:26:01:2a:c3:27:3d:16:17:10:0a:c2:85:
         30:08:da:1f:f6:16:03:38:7a:e2:3c:71:40:f8:e9:cd:73:c5:
         f7:c6:6d:58:55:29:55:bc:a7:0d:66:9c:5c:8f:8d:c5:99:3b:
         f9:a9:97:f4:20:6f:0a:3b:e3:f4:17:3a:48:48:84:ea:b3:be:
         42:0a:1c:4c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYaesMFcP6fQvHxVrr/F5BcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZWIzZTAwNDUwMTk4YzhhZDQ1ZWJmODNlMTMwMjE5Yjkz
NjQzYTUwHhcNMjMwMzAxMTk0MDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTcwYTNlM2IwMTMxM2U0YTUzNDM5ZmQxNDUyY2RlMjk4YmJjMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk990h/E/mxgO1/4J409Py5cYnayQ
VSpzbnRhpvEKGi1zGWFyXBlqOs+jLT1OHj32FQuUPm3+T12Ae5XD8Ye45y8+nK4y
nqnGuzhEtIf6mlPuXNIbi7UiUFFn8243DXgUYVzU7sNoQhbBlG7UJ9ps+EuAlMsY
FdAgM2pdY7qojGh/0NR3AeiFeKu31sNTkd9LOsqglJFGEMBc+t3X/Wl+qL4JoAZS
jzlhZGpp9dlzMuwunC+Noz+DsvtwiDMjwTM5mTzgoe5NI3vT3+jPITWg4NTsdUyE
2WGY8TIBXi5Z1XKO1VJVnKzedH1V9FY3lu63asUCr3bSOZZmBGwnD/Pl0wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFlwo+OwExPkpTQ5/RRSzeKYu8EXMB8GA1UdIwQY
MBaAFBfrPgBFAZjIrUXr+D4TAhm5NkOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMzY0MGMtMzA2NS00M2I4LWI5NTUt
MTg4ODg0NWNhODU5LzEvV1hDajQ3QVRFLVNsTkRuOUZGTE40cGk3d1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMzY0MGMtMzA2NS00M2I4LWI5NTUtMTg4ODg0NWNhODU5
LzEvRi1zLUFFVUJtTWl0UmV2NFBoTUNHYmsyUTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb1g0D
BABb1g4wDQYJKoZIhvcNAQELBQADggEBAFU7VF0XGyjq88FN7DuOcJI1e0bU8GKn
5XOY43O2So49euwBZwE3EwzN9/DdzrNdAVLKnnsETk97nlVjj/GIKPJWRGPvzbqG
rQbrf7fcFDFQv60fFtMY0Ykh+/STcnjOIg/h+JAh5QrZ/apgLVQNII2Yg6N3hIGJ
dV8u8nxd8ZcDiULavodhj7ZGea/pRbjAghTBL0xabtKXS3yUyGh1TI0Ze/Vy86lo
K67PE8pCfpdocQ/r36B3U+7lvSYBKsMnPRYXEArChTAI2h/2FgM4euI8cUD46c1z
xffGbVhVKVW8pw1mnFyPjcWZO/mpl/Qgbwo74/QXOkhIhOqzvkIKHEw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:18 2023 by rpki-client on console-fra.rpki-client.org