Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/wTwduIinC0W60WOX0gNzjNJyr6w.roa
File:                     wTwduIinC0W60WOX0gNzjNJyr6w.roa (raw, json)
Hash identifier:          YC4saLMXp6rl9b1e8fEgvN6nAD1v2/9ULMj5G7neD64=
Subject key identifier:   C1:3C:1D:B8:88:A7:0B:45:BA:D1:63:97:D2:03:73:8C:D2:72:AF:AC
Certificate issuer:       /CN=26a3871322d9b5a6e89d71cc17d25c2f3310aa74
Certificate serial:       018C6C97F1E830EBF803264560B7725A86D5
Authority key identifier: 26:A3:87:13:22:D9:B5:A6:E8:9D:71:CC:17:D2:5C:2F:33:10:AA:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqOHEyLZtabonXHMF9JcLzMQqnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/wTwduIinC0W60WOX0gNzjNJyr6w.roa
Signing time:             Fri 15 Dec 2023 08:29:06 +0000
ROA not before:           Fri 15 Dec 2023 08:29:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16276
IP address blocks:        194.59.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6c:97:f1:e8:30:eb:f8:03:26:45:60:b7:72:5a:86:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a3871322d9b5a6e89d71cc17d25c2f3310aa74
        Validity
            Not Before: Dec 15 08:29:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c13c1db888a70b45bad16397d203738cd272afac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:b5:3e:15:00:5f:19:54:36:5e:53:e3:c2:
                    30:e7:ee:db:9b:fc:d7:7e:9d:c1:a2:4f:3d:4b:6d:
                    51:28:dc:93:25:a9:f9:2d:33:6d:e5:09:9d:5d:4d:
                    14:f0:a4:a2:17:7b:3e:72:97:0c:4d:33:77:15:ba:
                    3c:27:b0:b4:2d:d8:5f:2d:59:ef:2e:10:40:52:bb:
                    e3:d3:c1:80:f1:28:fd:89:be:83:d2:f0:65:28:df:
                    1e:35:da:3e:82:d0:a8:44:23:5f:7f:a9:47:6a:5c:
                    a7:f1:c1:19:9d:db:31:86:ec:40:42:d7:43:98:da:
                    00:dc:9c:90:be:99:2d:ed:eb:2f:36:cb:62:cb:1b:
                    6c:5e:d0:18:10:ef:4e:be:97:10:03:15:fb:e7:88:
                    ed:6e:20:8c:6f:d4:52:31:2d:e2:82:22:de:bb:f8:
                    39:d5:38:ec:7c:a5:20:96:16:52:8d:f9:8a:69:64:
                    09:43:82:58:85:83:45:da:bd:91:a3:74:24:6e:42:
                    ee:72:4b:04:e3:da:51:33:2b:e8:11:a0:82:75:9c:
                    41:7f:32:50:9d:21:a6:35:00:62:37:f5:19:ae:c8:
                    ca:8b:2d:ba:96:34:29:0f:09:7a:a8:fd:b9:4e:9e:
                    57:91:2d:ac:75:d4:06:e4:77:d3:9e:2a:b8:f3:5c:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:1D:B8:88:A7:0B:45:BA:D1:63:97:D2:03:73:8C:D2:72:AF:AC
            X509v3 Authority Key Identifier:
                keyid:26:A3:87:13:22:D9:B5:A6:E8:9D:71:CC:17:D2:5C:2F:33:10:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqOHEyLZtabonXHMF9JcLzMQqnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/wTwduIinC0W60WOX0gNzjNJyr6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7e34ae-025a-4c99-9841-5d82b6bebc82/1/JqOHEyLZtabonXHMF9JcLzMQqnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:05:0d:a4:d5:89:ae:60:cf:96:f3:34:0e:f1:88:7f:13:
         5c:dc:17:5a:ec:52:47:7a:35:a6:11:25:52:75:87:d1:5a:74:
         8a:94:01:85:c3:6e:d7:ff:20:de:ba:fc:64:45:02:08:c9:4d:
         41:75:f2:e5:7e:59:d0:57:af:19:f2:5d:a6:aa:22:11:89:da:
         de:7e:45:09:a1:69:43:ec:32:d0:20:3a:06:cf:cc:de:f4:36:
         a7:60:99:52:a3:26:9c:dd:5b:4d:fb:15:6b:ca:7c:99:08:38:
         e7:04:bc:4b:41:c4:67:cf:e9:fb:ba:d3:cd:b2:a7:c0:3a:a6:
         2e:b7:32:69:27:90:77:1e:7c:45:54:a0:04:21:14:81:48:05:
         f5:8c:69:08:cc:c8:e5:d1:18:a2:b9:b7:7b:3e:0a:a1:f6:ff:
         a9:6f:92:5c:ca:53:5c:bc:45:ea:5e:50:82:d7:9a:51:6b:64:
         93:cf:7b:db:ae:5f:ab:ec:f3:47:80:e5:bb:54:2f:11:14:9b:
         6a:56:4b:c7:e6:8b:7a:7e:52:38:b0:46:5d:e9:7b:9e:0d:b6:
         f8:7c:ca:00:b7:81:57:d2:fc:fb:3d:60:f6:13:ed:9c:4e:18:
         ce:c0:5d:b8:44:64:7a:b7:3c:d2:57:9b:5a:4a:b7:56:a1:e5:
         9d:d5:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:05 2024 by rpki-client on console-fra.rpki-client.org