Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/WpTpP0bHsJoTkVozB5RsItru6_c.roa
File:                     WpTpP0bHsJoTkVozB5RsItru6_c.roa (raw, json)
Hash identifier:          1lkejac++c/PT1aqIUVpex0Wlnfbq1+H+6kxAaQ9FkY=
Subject key identifier:   5A:94:E9:3F:46:C7:B0:9A:13:91:5A:33:07:94:6C:22:DA:EE:EB:F7
Certificate issuer:       /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial:       01899298120EBC17AC108611C33436C5F02F
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/WpTpP0bHsJoTkVozB5RsItru6_c.roa
Signing time:             Wed 26 Jul 2023 14:26:26 +0000
ROA not before:           Wed 26 Jul 2023 14:26:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15796
IP address blocks:        213.55.128.0/24 maxlen: 24
                          213.55.128.0/17 maxlen: 24
                          213.55.131.0/24 maxlen: 24
                          213.55.132.0/24 maxlen: 24
                          213.55.141.0/24 maxlen: 24
                          213.55.206.0/24 maxlen: 24
                          213.55.224.0/22 maxlen: 22
                          213.55.220.0/22 maxlen: 22
                          213.55.240.0/22 maxlen: 22
                          213.55.244.0/22 maxlen: 22
                          213.55.147.0/24 maxlen: 24
                          51.154.248.0/22 maxlen: 22
                          51.154.252.0/22 maxlen: 22
                          213.55.184.0/23 maxlen: 23
                          213.55.188.0/23 maxlen: 23
                          213.55.192.0/24 maxlen: 24
                          213.55.193.0/24 maxlen: 24
                          213.55.194.0/24 maxlen: 24
                          213.55.195.0/24 maxlen: 24
                          51.154.0.0/16 maxlen: 16
                          2a04:ee40::/29 maxlen: 29
                          2a04:ee42:1::/64 maxlen: 64
                          2a04:ee41::/41 maxlen: 41
                          2a04:ee41:80::/41 maxlen: 41
                          2a04:ee42:53::/64 maxlen: 64
                          2a04:ee42:2::/64 maxlen: 64
                          2a04:ee40:2000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:92:98:12:0e:bc:17:ac:10:86:11:c3:34:36:c5:f0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
        Validity
            Not Before: Jul 26 14:26:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a94e93f46c7b09a13915a3307946c22daeeebf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:71:b7:4a:67:66:73:ef:77:e0:03:7b:8f:
                    68:68:bc:9d:08:d8:02:12:18:a2:b2:c9:57:96:75:
                    78:66:f6:65:ce:df:6c:92:2c:bf:db:7e:c7:b5:37:
                    35:07:04:d5:e3:9c:56:fa:ad:b6:9d:77:1b:73:1c:
                    fa:e1:0e:5e:c3:33:ea:7a:f0:7e:4d:35:6a:7d:09:
                    ec:e7:55:6c:44:cc:ae:66:71:bb:3c:fa:05:16:3f:
                    bc:17:ce:3a:e9:ec:47:b4:6a:e1:cd:f6:55:f3:1d:
                    39:40:31:48:8e:86:b9:91:68:f8:8c:d2:c4:75:a4:
                    84:4a:60:fc:cb:40:37:d6:5d:33:bf:e6:02:52:da:
                    2c:a0:eb:13:27:55:94:9b:aa:ef:96:e5:59:d3:93:
                    6c:2a:d4:c3:44:26:80:c2:13:c6:ec:e8:f0:0c:d9:
                    e0:67:03:f9:08:06:5a:01:2d:87:37:55:32:bf:3b:
                    3b:bf:89:ca:33:47:84:3b:95:bd:53:eb:75:b8:c1:
                    bc:4a:d2:b2:89:05:93:8d:3a:2c:ea:4b:a0:66:f2:
                    ba:a1:66:b0:c9:55:f9:3a:3c:b5:ce:1c:90:14:51:
                    c0:94:3b:7d:ef:c8:7b:2b:09:d2:8d:6e:91:2e:35:
                    61:a9:9c:a4:0f:37:79:ba:70:7f:3b:4e:34:a1:a8:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:E9:3F:46:C7:B0:9A:13:91:5A:33:07:94:6C:22:DA:EE:EB:F7
            X509v3 Authority Key Identifier:
                keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/WpTpP0bHsJoTkVozB5RsItru6_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.154.0.0/16
                  213.55.128.0/17
                IPv6:
                  2a04:ee40::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:a1:90:8c:61:12:c5:96:84:f4:77:1d:58:67:53:d8:1b:6a:
         56:5b:86:ba:4f:2c:60:77:81:40:22:5f:f8:fc:ad:93:f4:74:
         68:a1:d0:07:e2:ea:f7:69:b9:a9:7b:77:32:90:c1:4a:8a:40:
         e7:71:14:7e:3e:82:0c:06:53:7b:c4:23:80:c4:67:fc:d6:5c:
         4c:6d:92:55:96:f2:ee:9c:cf:70:54:ce:0f:55:26:be:dd:0d:
         76:dc:a2:b3:29:d2:cb:a7:7c:10:99:87:f9:e4:fc:aa:50:c9:
         eb:1e:ba:ef:ab:f4:9d:48:39:90:57:83:ea:43:9f:2a:3d:eb:
         d5:9f:07:01:c0:a3:8b:a1:d0:0a:f3:3b:9a:98:80:71:35:73:
         a5:e0:e3:32:05:7d:13:df:8e:0f:30:9f:2d:bc:32:58:1b:bc:
         2c:3c:9c:14:6f:46:c7:61:fd:12:3c:ad:1f:52:ab:52:c4:02:
         8e:ed:01:e8:6f:82:3b:3b:ce:31:09:01:05:fd:50:6d:26:8b:
         17:5d:e8:5e:45:4c:52:db:ef:0a:db:ef:ba:03:a3:d4:62:b3:
         c8:ff:8f:9e:dd:a4:09:5d:2e:b9:a3:14:c7:8c:a1:fe:48:69:
         17:25:99:61:47:80:a5:7b:40:55:3b:69:ab:eb:44:ad:b4:77:
         44:5e:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:04 2024 by rpki-client on console-ams.rpki-client.org