Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/WYmptgdr8x_0I5kH4F7uLVab_Vc.roa
File:                     WYmptgdr8x_0I5kH4F7uLVab_Vc.roa (raw, json)
Hash identifier:          Vab3/kVuOnE6tbbqBE3jJyyhbZ27QR1NTCaW5Q02hW0=
Subject key identifier:   59:89:A9:B6:07:6B:F3:1F:F4:23:99:07:E0:5E:EE:2D:56:9B:FD:57
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       018571BA198F7055909EF9EC2FC2B661860C
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/WYmptgdr8x_0I5kH4F7uLVab_Vc.roa
Signing time:             Mon 02 Jan 2023 09:04:59 +0000
ROA not before:           Mon 02 Jan 2023 09:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60079
IP address blocks:        94.45.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:ba:19:8f:70:55:90:9e:f9:ec:2f:c2:b6:61:86:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan  2 09:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5989a9b6076bf31ff4239907e05eee2d569bfd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:02:cb:54:80:fa:31:62:b4:96:eb:28:d6:
                    b6:86:15:e2:97:fd:ab:73:37:5e:f9:22:6d:fb:91:
                    6d:44:a3:cc:55:5c:02:58:f9:d5:ac:0a:45:65:fd:
                    0e:bf:d9:d9:9d:35:51:61:eb:03:6b:6b:ec:44:4b:
                    fe:07:02:06:3b:69:06:22:13:6a:fc:ca:3b:d7:8e:
                    15:9e:7a:90:e5:7e:fa:ec:68:68:c3:70:80:81:62:
                    ce:45:bd:b3:e4:33:47:33:55:1e:f0:f4:86:d8:a7:
                    11:00:d2:9a:10:29:5f:dd:ea:2c:2b:c4:ba:78:54:
                    1e:ce:45:d3:b4:df:b0:51:41:4e:53:09:2c:77:1e:
                    ab:d2:0b:bd:67:0d:a6:73:1a:d5:4f:39:07:4c:99:
                    eb:b3:4b:3d:ca:90:da:a4:ca:00:f8:bc:57:d2:1f:
                    58:02:39:9d:e4:59:57:8a:6f:35:f6:9a:16:cd:25:
                    1d:07:79:c6:42:24:3f:dc:eb:99:d6:cb:e0:02:6d:
                    0d:89:f7:17:5d:4e:7f:0d:c3:29:70:ef:36:40:ec:
                    59:d4:fb:3e:91:28:3b:51:22:b0:c6:9b:bd:91:49:
                    95:a7:ff:9a:10:34:3b:c1:55:f0:2f:cd:f6:2c:00:
                    dc:8a:20:cc:56:54:12:cf:13:46:59:2c:fe:9f:18:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:89:A9:B6:07:6B:F3:1F:F4:23:99:07:E0:5E:EE:2D:56:9B:FD:57
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/WYmptgdr8x_0I5kH4F7uLVab_Vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:76:58:97:50:b5:19:99:c6:3c:8b:2a:91:28:61:74:5b:cc:
         41:58:bf:51:6e:2c:43:a4:35:ac:d4:0b:32:f6:f6:d2:4f:a6:
         9b:66:06:1c:40:92:24:44:5d:f0:ad:d2:21:29:f2:94:d1:7f:
         54:52:40:a6:db:10:94:c0:63:1c:e2:db:29:12:c1:a3:77:d9:
         08:f8:09:71:d1:69:5e:c5:33:73:e2:81:3e:fa:22:44:3a:a6:
         c0:07:bc:c8:c3:c5:62:3f:fa:14:b1:f0:e4:69:2f:53:3e:cc:
         d3:d4:32:e1:59:62:ed:08:df:bf:69:b1:33:27:17:a9:51:a4:
         4a:b4:3a:0c:6c:fe:4e:55:d6:9f:a2:e5:b3:9c:62:68:a9:4e:
         fe:31:6e:b3:b1:d7:a2:7e:28:74:89:3a:e0:fb:c6:73:59:e9:
         48:d4:38:36:1e:c2:90:82:59:f8:b4:57:0e:b6:18:a1:e1:0d:
         07:40:5d:a2:ad:f2:96:4f:ea:14:ec:b5:f9:a1:f7:b1:48:4c:
         07:85:67:f8:1f:89:1d:3e:79:20:df:b8:49:6a:d1:34:8d:b2:
         7e:a3:2f:3f:73:a0:68:92:98:ed:10:31:f1:93:1d:07:6f:1d:
         05:05:d6:c6:eb:a9:23:3f:e9:cb:1f:fa:81:16:a2:8c:88:e0:
         7f:53:dd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:01 2024 by rpki-client on console-fra.rpki-client.org