Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa
File:                     WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa (raw, json)
Hash identifier:          g8MVYqqsBQMkk71Uag9Ngo1CMGiDd38IncMxboydX9E=
Subject key identifier:   5A:22:CB:20:61:34:3C:6C:3E:32:EE:0C:BF:02:A2:87:88:39:CD:6A
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0190540A3994CE857B168CD3AE9E70F3C4B1
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa
Signing time:             Wed 26 Jun 2024 10:14:34 +0000
ROA not before:           Wed 26 Jun 2024 10:14:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        45.141.168.0/23 maxlen: 24
                          185.81.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 14:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:54:0a:39:94:ce:85:7b:16:8c:d3:ae:9e:70:f3:c4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jun 26 10:14:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5a22cb2061343c6c3e32ee0cbf02a2878839cd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:9d:c1:54:ce:fc:bc:57:f1:3d:9f:25:17:
                    9b:5c:15:16:9f:57:c6:33:c4:df:aa:95:7f:b0:f2:
                    f6:62:96:1e:89:91:5b:37:84:69:66:2a:ca:92:b1:
                    79:eb:35:8d:ba:ed:89:aa:08:27:b6:4a:24:97:e1:
                    3c:57:51:ca:80:36:9d:5d:80:1d:72:1a:8b:c2:d3:
                    31:a0:51:20:86:a2:0f:fc:32:89:d0:e1:a0:97:45:
                    5b:24:45:e0:34:a3:76:de:1e:33:00:81:cf:ac:93:
                    65:de:2d:6a:47:7e:b6:fa:cb:3c:28:af:1c:d9:7a:
                    d4:44:51:c2:cc:fc:5f:a6:f8:5b:69:c5:ad:33:ed:
                    01:78:91:ac:25:92:78:8f:b1:64:a2:35:7b:f1:4b:
                    88:ef:c1:05:91:59:bf:fe:39:e4:1c:d3:bb:ad:8b:
                    03:dd:27:ae:5a:bc:36:b6:c9:eb:64:df:f5:11:db:
                    3f:d5:09:d4:1c:5a:96:54:67:60:64:36:96:21:af:
                    89:1e:c2:d1:6c:53:a3:5f:30:4e:91:85:6e:20:b0:
                    de:9e:96:c1:70:0e:7c:96:b1:82:74:f9:66:68:6a:
                    86:9e:d2:70:8c:54:5e:41:d4:0b:12:3a:69:b5:73:
                    6c:cc:6c:54:4f:72:75:b4:f2:cc:02:c0:1e:d5:33:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:CB:20:61:34:3C:6C:3E:32:EE:0C:BF:02:A2:87:88:39:CD:6A
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.168.0/23
                  185.81.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:d0:7e:97:68:ab:1c:99:fe:60:68:7d:2a:7f:2a:83:34:
         2e:76:39:70:23:b0:60:8e:be:f6:02:52:a9:1a:6a:1d:81:5f:
         ed:07:f9:81:56:e6:08:41:ea:bc:80:43:b2:1e:93:0f:2b:92:
         08:64:9f:0a:99:f9:81:7c:dd:66:3f:e0:c9:b3:20:0e:fc:ae:
         4b:77:f5:7f:c5:d4:48:90:97:93:93:4f:ff:fe:1b:5c:e3:57:
         51:3c:4e:fb:88:3d:dc:ef:50:73:76:99:92:29:50:2a:b7:c1:
         b9:cf:ba:46:2d:87:ef:5e:0e:9a:28:16:6e:3d:00:cb:33:8f:
         94:b6:89:3e:f0:76:a8:4e:d5:e7:39:e7:47:b5:1a:2d:52:f9:
         e5:94:0b:c4:c5:42:35:c6:42:91:e7:20:20:88:4d:b3:7a:89:
         c9:74:1a:0c:c3:94:30:17:f5:6a:e4:44:f7:dd:0a:90:4c:16:
         1c:10:d8:2d:65:20:22:ca:9d:15:53:b3:bf:6d:0c:ef:c2:a1:
         ea:47:8f:19:61:7b:55:a7:dd:94:ea:dd:bb:7f:03:ad:92:ff:
         f5:47:b3:5c:ad:9f:71:87:24:28:3e:b7:df:25:be:cc:f3:43:
         0d:4d:ca:e9:b8:14:29:3b:26:5c:65:f7:4d:49:e2:04:fd:af:
         29:d9:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:11:29 2024 by rpki-client on console-fra.rpki-client.org