Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/wozsUNSFi8ZiCjVf8kbyOSaVZ70.roa
File:                     wozsUNSFi8ZiCjVf8kbyOSaVZ70.roa (raw, json)
Hash identifier:          +jZH6lqWykqa/drScAQV1Tt4on+LW7WT6B9HMnkzKcM=
Subject key identifier:   C2:8C:EC:50:D4:85:8B:C6:62:0A:35:5F:F2:46:F2:39:26:95:67:BD
Certificate issuer:       /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial:       018571B0CFAA480A2B78A8162D3A279689B1
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/wozsUNSFi8ZiCjVf8kbyOSaVZ70.roa
Signing time:             Mon 02 Jan 2023 08:54:50 +0000
ROA not before:           Mon 02 Jan 2023 08:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        37.143.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b0:cf:aa:48:0a:2b:78:a8:16:2d:3a:27:96:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
        Validity
            Not Before: Jan  2 08:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c28cec50d4858bc6620a355ff246f239269567bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:d4:c1:05:e1:80:70:19:b0:40:44:3c:86:
                    f4:b4:6f:f9:48:3b:30:94:9b:82:16:64:dc:1a:e8:
                    8c:5b:4a:0c:e1:40:d0:a5:db:87:b9:eb:50:4e:65:
                    09:f7:6d:ec:72:9e:f9:01:d6:83:b2:52:0c:49:ad:
                    17:f8:09:ba:7e:97:c3:2b:8d:fc:c6:12:57:51:28:
                    a0:49:ba:78:cf:52:31:7e:97:fb:e7:34:31:eb:e2:
                    9b:0d:e4:2f:d1:d0:6d:9d:eb:3e:38:78:dd:37:1e:
                    51:0e:5f:e0:4c:e5:b2:4a:0d:1a:be:d7:a9:eb:b1:
                    ee:e1:ab:4b:1d:3d:69:42:50:92:a3:16:05:72:a3:
                    6a:a1:b9:e3:68:f0:35:de:ad:a1:5c:56:a9:3f:d0:
                    2a:ab:39:ac:02:f3:42:e6:b2:74:be:8c:76:d9:e0:
                    16:df:09:2a:e5:ea:db:0e:9d:31:2d:20:a7:8b:5f:
                    65:5b:d0:33:3b:9e:aa:4d:6f:bf:c8:2d:5e:87:b2:
                    dd:1c:c6:a9:a7:95:c4:ac:bc:19:20:84:97:0f:6e:
                    4f:53:60:28:8e:0e:b6:b3:9c:d1:bf:21:2b:50:d7:
                    5c:de:3b:5f:79:cb:3f:2f:75:b5:a6:94:39:9a:d1:
                    d7:6c:9a:7f:99:ab:af:a0:df:6e:91:52:39:d5:a1:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:EC:50:D4:85:8B:C6:62:0A:35:5F:F2:46:F2:39:26:95:67:BD
            X509v3 Authority Key Identifier:
                keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/wozsUNSFi8ZiCjVf8kbyOSaVZ70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.143.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:64:e7:dd:d1:51:2f:42:63:9a:aa:aa:7b:88:04:b8:8b:05:
         fd:c0:01:28:f0:08:d1:e5:b9:10:74:02:0a:6b:f7:4d:7b:90:
         c7:07:d5:d9:e9:c7:dc:58:1b:54:6e:fd:92:54:ae:33:72:fe:
         06:1f:11:82:b3:72:83:2f:d5:dc:ea:f3:4e:eb:c6:ed:e6:8b:
         7b:45:ea:1a:72:64:32:97:c4:e2:f5:d8:35:89:66:5f:f4:29:
         e2:f6:f4:60:9f:2e:89:c2:db:29:a7:0e:ff:3b:db:80:34:a8:
         a4:ef:d6:aa:f7:30:7f:0b:dd:8c:41:da:29:50:5e:da:2f:d4:
         62:e1:ff:cc:72:0f:7c:34:00:3a:4c:8e:31:73:76:e7:9f:82:
         20:14:0e:ea:be:74:a4:3d:6c:9b:e2:8d:80:fe:65:0c:10:70:
         8d:b2:01:32:a4:86:e8:44:f0:d2:98:16:8e:b6:65:09:13:f6:
         4b:47:05:f7:81:a1:8e:b4:09:fa:ba:fa:e8:50:af:a5:6a:7f:
         01:05:a6:13:70:cd:4f:1f:69:09:0c:0b:0e:d7:29:e1:97:05:
         c1:f1:03:3b:8b:6c:f2:4d:7d:86:d1:19:d8:84:9b:5e:92:d4:
         d4:8e:fa:2e:ba:f2:fa:d5:cc:16:18:dd:38:42:09:15:de:f5:
         f8:06:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:28 2024 by rpki-client on console-ams.rpki-client.org