Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wooXGMh4ob92i0bsAmCNouxAJR4.roa
File:                     wooXGMh4ob92i0bsAmCNouxAJR4.roa (raw, json)
Hash identifier:          2i+Td2MQXQic2VX4pKsglRWgUXZCT+LJaekRSiir98I=
Subject key identifier:   C2:8A:17:18:C8:78:A1:BF:76:8B:46:EC:02:60:8D:A2:EC:40:25:1E
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018B585659E90D429508D57E12A932097A10
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wooXGMh4ob92i0bsAmCNouxAJR4.roa
Signing time:             Sun 22 Oct 2023 17:02:15 +0000
ROA not before:           Sun 22 Oct 2023 17:02:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205733
IP address blocks:        185.179.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 10:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:58:56:59:e9:0d:42:95:08:d5:7e:12:a9:32:09:7a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Oct 22 17:02:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c28a1718c878a1bf768b46ec02608da2ec40251e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:cc:f8:06:7c:7d:a1:cc:66:e2:e8:76:da:
                    1d:fc:68:5d:0c:07:45:f5:bb:d4:c1:fc:e8:1c:be:
                    b2:41:93:3e:e3:6c:1d:aa:42:07:7a:8b:af:83:40:
                    57:2b:9f:b3:42:70:70:0d:18:96:c6:7c:4a:9c:8a:
                    5c:82:2d:5c:72:5f:a8:29:ea:9f:70:ed:f0:da:5e:
                    6d:ec:1c:45:e8:79:2c:a5:a9:a6:91:5d:59:f0:c0:
                    28:92:e0:ba:f0:ec:64:e8:45:a9:ec:79:49:51:24:
                    ea:e6:72:95:c7:4a:33:23:d6:89:a5:ab:93:ac:ff:
                    19:87:ca:b7:50:75:90:02:76:38:98:7f:11:85:91:
                    dd:77:b1:9c:ea:9e:e2:ff:f7:c1:f6:dc:c2:2d:23:
                    57:05:c6:dc:a0:e0:b2:0a:62:2c:c1:4e:c0:c1:a3:
                    b5:83:0c:3e:0b:11:53:f3:91:41:38:d2:23:8f:c2:
                    51:6a:6d:5d:4d:9c:c2:02:66:b3:90:9c:6d:2e:31:
                    48:3c:7e:c2:71:02:5e:42:2b:84:db:e5:82:b1:e6:
                    19:d6:96:77:f0:de:35:28:73:12:57:fa:d7:dc:d1:
                    c2:5a:bf:93:48:d1:30:4f:56:05:d6:9b:da:e7:a8:
                    c6:bd:63:d6:2c:ab:c6:30:74:9b:1b:97:59:48:28:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8A:17:18:C8:78:A1:BF:76:8B:46:EC:02:60:8D:A2:EC:40:25:1E
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wooXGMh4ob92i0bsAmCNouxAJR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:43:3c:50:75:49:ad:4f:34:a7:ff:15:da:7c:d2:87:1c:
         2b:52:99:1a:97:88:54:80:df:be:52:d6:45:8b:ad:0c:0e:42:
         30:26:77:4f:e5:2c:52:d1:a0:4d:ae:4c:0f:ce:96:5c:77:b6:
         e0:d0:b6:8e:b6:40:4d:ff:a7:38:c0:21:5d:41:2b:41:73:df:
         5d:43:57:2c:8b:4b:ae:43:23:40:8d:47:a7:43:f4:70:05:9a:
         db:41:da:9d:20:3c:02:6b:5c:f5:44:58:24:89:b8:cc:10:46:
         1e:65:f1:c4:3a:3e:1f:ad:df:1b:84:10:33:f8:6a:47:ba:d9:
         db:82:58:78:ef:d3:19:9b:ce:9e:97:55:88:54:71:b0:18:36:
         16:8e:61:10:26:5c:c5:77:1c:89:46:6f:33:89:dd:14:a8:57:
         26:13:48:32:7d:48:04:7e:90:9c:a8:d0:da:c4:6e:8c:4d:37:
         d9:bf:19:ba:65:ef:f0:bd:57:90:dd:f4:b7:4f:34:3e:33:df:
         45:f4:9a:13:58:cf:9f:fa:77:75:69:96:9d:3f:da:03:50:e7:
         bf:a2:fa:f3:bf:41:91:44:dd:fc:3e:23:57:6b:28:9a:d6:da:
         15:c8:15:c3:d4:9f:8e:1f:2e:ef:c0:0d:6b:22:92:1c:de:cd:
         4f:e8:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org