Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WgP_8757zawbIMonol18M2doYf4.roa
File:                     WgP_8757zawbIMonol18M2doYf4.roa (raw, json)
Hash identifier:          p1ZJ8ipdH+WBrzusora6X1Y7j5DuOf7nikNFIAmDHgc=
Subject key identifier:   5A:03:FF:F3:BE:7B:CD:AC:1B:20:CA:27:A2:5D:7C:33:67:68:61:FE
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       018678D8756A237DAC7561EBAB41335C0113
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WgP_8757zawbIMonol18M2doYf4.roa
Signing time:             Wed 22 Feb 2023 11:18:17 +0000
ROA not before:           Wed 22 Feb 2023 11:18:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211421
IP address blocks:        5.57.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 25 Feb 2023 18:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:78:d8:75:6a:23:7d:ac:75:61:eb:ab:41:33:5c:01:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Feb 22 11:18:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a03fff3be7bcdac1b20ca27a25d7c33676861fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:9a:cc:90:89:08:94:76:a0:bd:21:b1:ed:
                    69:81:77:72:87:16:f2:e3:7e:2c:34:98:f8:cc:24:
                    32:a4:0f:42:9b:a0:11:89:91:ee:c0:4a:c3:40:6e:
                    d9:67:e2:3a:24:ff:a0:31:1d:76:5d:6a:1b:2f:2e:
                    c8:29:c9:3c:ef:13:cf:83:aa:d5:85:e0:e2:bf:1a:
                    91:95:4f:b6:8c:28:34:6b:09:f4:56:16:c2:b7:f1:
                    93:ad:50:e3:f1:b0:89:3b:88:84:0c:34:e9:85:55:
                    b4:93:77:70:0e:e1:26:da:9e:97:95:48:e3:1b:93:
                    37:07:0e:11:7a:af:6a:6a:e8:56:cc:c1:9b:22:7f:
                    fe:18:0f:07:b9:6f:a2:1f:bf:3a:3b:4b:98:c7:e9:
                    2a:10:d4:b4:7f:f9:b4:86:69:df:9e:2e:f4:55:36:
                    b6:fd:ff:3e:32:e5:84:a6:57:e1:9e:7f:52:ce:ca:
                    a0:47:63:54:08:1f:d5:ba:e5:e6:d8:56:0a:42:72:
                    74:a5:82:68:a8:5c:fa:5a:43:78:f3:4e:e6:55:60:
                    75:7b:13:f1:6b:71:d0:40:38:7c:e3:46:51:17:a3:
                    87:c1:ca:42:e9:05:91:4c:04:89:64:37:c8:f2:ff:
                    49:3f:21:c5:90:15:fc:b1:77:c1:34:13:c1:2c:11:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:03:FF:F3:BE:7B:CD:AC:1B:20:CA:27:A2:5D:7C:33:67:68:61:FE
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WgP_8757zawbIMonol18M2doYf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:35:e1:00:14:48:03:f3:6a:df:da:4c:10:d3:c1:4e:f5:2d:
         3c:42:5d:ac:5d:5a:ea:75:d4:3a:5a:0c:a3:2c:73:51:7a:80:
         a4:09:d8:0e:f5:38:ab:5a:85:9c:d5:3e:a6:da:8b:e2:c3:6a:
         d6:a8:8c:2c:23:f5:ff:bd:43:60:01:3f:67:75:cb:b6:ee:1a:
         02:40:f9:8c:91:3d:12:1f:06:0d:d4:01:bd:7c:e8:ea:f2:cb:
         34:c2:b5:2c:82:4f:b6:68:47:5f:35:c6:2f:3f:f3:0f:ec:3c:
         e7:01:88:49:29:9b:d4:e5:69:e7:36:db:89:84:01:a8:fe:ae:
         a4:12:d0:2b:c5:a6:a0:cc:79:97:95:31:74:36:26:be:d7:72:
         af:10:d5:d5:1b:39:c5:1c:4b:dc:78:e3:d5:45:73:8a:77:0d:
         06:8f:e7:ca:f8:81:6f:02:ad:44:dd:46:4c:0f:17:09:3b:1e:
         a6:82:48:51:e1:95:db:c7:76:a0:db:5d:ef:1d:cf:16:2c:92:
         87:29:76:da:fc:30:27:49:52:a5:fa:4f:03:17:b7:56:27:76:
         70:b4:9a:c8:0f:b1:d5:51:b6:4b:3a:f1:0b:ac:05:51:8d:f9:
         c1:dd:6d:81:74:26:94:36:41:7c:1f:92:93:f3:17:3b:b7:52:
         7b:3f:01:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ42HVqI32sdWHrq0EzXAETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMjIyMTExODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTAzZmZmM2JlN2JjZGFjMWIyMGNhMjdhMjVkN2MzMzY3Njg2MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLSazJCJCJR2oL0hse1pgXdyhxby
434sNJj4zCQypA9Cm6ARiZHuwErDQG7ZZ+I6JP+gMR12XWobLy7IKck87xPPg6rV
heDivxqRlU+2jCg0awn0VhbCt/GTrVDj8bCJO4iEDDTphVW0k3dwDuEm2p6XlUjj
G5M3Bw4Req9qauhWzMGbIn/+GA8HuW+iH786O0uYx+kqENS0f/m0hmnfni70VTa2
/f8+MuWEplfhnn9SzsqgR2NUCB/VuuXm2FYKQnJ0pYJoqFz6WkN4807mVWB1exPx
a3HQQDh840ZRF6OHwcpC6QWRTASJZDfI8v9JPyHFkBX8sXfBNBPBLBFPkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFoD//O+e82sGyDKJ6JdfDNnaGH+MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvV2dQXzg3NTd6YXdiSU1vbm9sMThNMmRvWWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTkmMA0G
CSqGSIb3DQEBCwUAA4IBAQDKNeEAFEgD82rf2kwQ08FO9S08Ql2sXVrqddQ6Wgyj
LHNReoCkCdgO9TirWoWc1T6m2oviw2rWqIwsI/X/vUNgAT9ndcu27hoCQPmMkT0S
HwYN1AG9fOjq8ss0wrUsgk+2aEdfNcYvP/MP7DznAYhJKZvU5WnnNtuJhAGo/q6k
EtArxaagzHmXlTF0Nia+13KvENXVGznFHEvceOPVRXOKdw0Gj+fK+IFvAq1E3UZM
DxcJOx6mgkhR4ZXbx3ag213vHc8WLJKHKXba/DAnSVKl+k8DF7dWJ3ZwtJrID7HV
UbZLOvELrAVRjfnB3W2BdCaUNkF8H5KT8xc7t1J7PwEV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:29 2024 by rpki-client on console-fra.rpki-client.org