Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wcE_23eLv3y8x1kgz0fMTGB2Zwc.roa
File:                     wcE_23eLv3y8x1kgz0fMTGB2Zwc.roa (raw, json)
Hash identifier:          xx8VsJSGxUgLJe8MpVHIHNFZ1YctP+qURcrJX5IUpoI=
Subject key identifier:   C1:C1:3F:DB:77:8B:BF:7C:BC:C7:59:20:CF:47:CC:4C:60:76:67:07
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       01879D8698ED4863355277A049ED77B34380
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wcE_23eLv3y8x1kgz0fMTGB2Zwc.roa
Signing time:             Thu 20 Apr 2023 07:17:36 +0000
ROA not before:           Thu 20 Apr 2023 07:17:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49598
IP address blocks:        45.136.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jul 2023 11:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9d:86:98:ed:48:63:35:52:77:a0:49:ed:77:b3:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Apr 20 07:17:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1c13fdb778bbf7cbcc75920cf47cc4c60766707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:e0:ff:11:00:b9:f2:7b:9c:7b:1e:49:e5:
                    48:ec:d4:59:d3:99:8c:78:1c:c7:74:3c:69:20:84:
                    16:f3:7b:2c:9c:bd:be:7f:e1:59:3e:e9:5f:61:92:
                    05:40:f8:c9:87:2a:65:91:ba:92:a8:26:f6:d2:fb:
                    14:fa:4d:75:3f:2d:dc:7d:fb:75:d3:ff:d3:68:b0:
                    3e:be:36:d4:4c:a5:32:9c:dd:0b:a6:75:f5:e3:8b:
                    26:5d:99:48:f4:06:7e:04:de:67:b7:01:f7:05:ee:
                    31:f2:e6:5f:51:22:0b:3e:de:9d:7c:62:a4:19:ae:
                    55:64:dc:ab:85:7b:4f:a8:95:07:03:7c:3f:84:de:
                    45:11:66:71:73:dc:91:42:db:ce:a4:6e:fd:5c:3b:
                    fe:b3:47:72:58:20:9c:5e:c6:f0:81:1d:df:10:41:
                    48:f5:76:3b:1b:59:7d:cf:44:4c:55:e1:85:e3:06:
                    05:a4:66:b8:32:aa:25:0d:a3:cf:f8:68:ae:29:f1:
                    c3:37:82:2f:33:41:cd:f4:d3:5a:0c:22:91:20:b1:
                    cd:f4:a1:4f:3b:7c:8f:73:e8:a8:31:6b:35:c1:46:
                    2a:48:46:d3:88:23:bc:d6:99:06:64:35:bb:3e:d2:
                    dc:22:8e:a5:73:61:ee:31:71:a1:1e:f3:c3:fe:03:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C1:3F:DB:77:8B:BF:7C:BC:C7:59:20:CF:47:CC:4C:60:76:67:07
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wcE_23eLv3y8x1kgz0fMTGB2Zwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:39:ba:23:f8:d1:5a:9b:04:0b:a2:5c:26:05:41:6f:77:62:
         f1:4f:f9:4d:72:f4:e6:eb:5d:be:6e:b0:32:f7:3a:20:88:44:
         24:97:e4:14:46:e9:5d:5b:23:9c:6a:1e:d1:c0:03:c8:0f:5e:
         51:d6:9c:7b:34:ad:ba:9e:fa:6d:97:4b:ab:21:de:0c:7d:3a:
         6c:6a:3c:f2:48:68:98:93:07:06:12:61:33:7d:7d:a1:92:a9:
         43:b7:13:0d:85:cd:6c:25:8c:a2:53:5f:86:3e:b7:b7:65:82:
         48:42:72:e6:57:0e:8b:d1:58:69:7b:ba:d1:7b:2f:5c:14:e2:
         2e:97:d1:3f:62:04:09:22:65:a2:ed:5d:d7:f4:bd:a8:d7:a2:
         37:b3:0a:3b:a1:c0:7d:5b:06:7c:bd:4c:8e:92:2b:3e:40:be:
         8a:74:64:9b:3a:13:a5:7b:3e:c5:05:02:24:06:bf:0b:50:4c:
         50:fa:48:c7:02:c4:b7:e4:9b:9b:96:04:36:7a:30:c7:a0:cd:
         44:a0:78:f6:f9:4a:28:76:e5:0b:c5:3f:ba:f0:05:31:31:3e:
         66:41:d3:2d:54:c3:c0:24:c3:a3:44:26:5f:00:36:b0:bf:27:
         09:cf:04:03:4a:cd:7c:43:24:ae:fa:7b:79:32:09:aa:cc:12:
         73:23:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org