Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/As_WT1jlu0GkkVga5uo1cXraRbw.roa
File:                     As_WT1jlu0GkkVga5uo1cXraRbw.roa (raw, json)
Hash identifier:          O34L8zCCO5NXCP6f6TySZHrA84MasF6LMo8hx+chSuY=
Subject key identifier:   02:CF:D6:4F:58:E5:BB:41:A4:91:58:1A:E6:EA:35:71:7A:DA:45:BC
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       0189E62B851757FF783F8767557681B6CFF1
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/As_WT1jlu0GkkVga5uo1cXraRbw.roa
Signing time:             Fri 11 Aug 2023 19:55:58 +0000
ROA not before:           Fri 11 Aug 2023 19:55:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212165
IP address blocks:        217.196.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Sep 2023 07:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:e6:2b:85:17:57:ff:78:3f:87:67:55:76:81:b6:cf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Aug 11 19:55:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02cfd64f58e5bb41a491581ae6ea35717ada45bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:03:63:25:f5:cb:40:74:49:de:5f:0d:7b:
                    bc:6e:ec:25:de:7f:0a:09:1c:f2:28:82:d4:32:38:
                    a4:05:fe:79:8c:c9:17:21:22:19:be:53:19:71:e4:
                    99:89:6c:80:8a:6b:24:ab:ce:14:9f:fe:ef:3c:c2:
                    2c:58:a9:4c:46:92:cd:f2:ab:1b:93:d0:9a:1f:50:
                    d3:3f:d2:f0:31:b2:b6:7e:49:b2:1a:73:ef:22:e6:
                    63:39:d4:40:f1:c9:95:75:b8:b0:79:80:d1:9a:d5:
                    e7:c7:f4:f5:04:51:2f:57:e7:21:cf:68:93:e5:c2:
                    86:81:ba:97:73:bd:63:c6:06:44:70:04:aa:70:20:
                    d2:29:78:6e:4c:f3:3b:7f:36:19:2b:55:f7:c6:a5:
                    3a:45:ac:7d:42:e9:19:0f:5f:2c:75:80:3c:bf:84:
                    8c:6c:52:cb:6c:58:cb:ab:30:7b:d1:3b:38:b1:97:
                    9c:91:a2:17:30:b0:cb:2b:fc:b2:ed:af:bc:e0:a1:
                    da:68:f5:a7:ff:c4:ac:50:94:58:51:87:a7:5a:60:
                    76:a2:f1:f4:d1:5f:b2:17:52:c4:bf:26:a8:74:73:
                    ab:11:d0:74:1b:e0:64:61:18:c6:8a:78:d1:7b:f7:
                    5d:74:87:bc:5d:fe:8e:02:61:01:46:37:15:85:d8:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CF:D6:4F:58:E5:BB:41:A4:91:58:1A:E6:EA:35:71:7A:DA:45:BC
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/As_WT1jlu0GkkVga5uo1cXraRbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.196.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f6:26:f3:da:31:18:42:0f:15:07:cd:10:83:bf:94:53:33:
         f1:9d:64:1b:4b:54:e1:af:60:0f:32:12:7b:70:38:f1:89:54:
         dd:dd:f4:2b:fd:6d:3a:8c:8f:2e:fd:0c:a3:d5:08:94:fa:e6:
         15:87:ea:35:25:8c:a2:9a:2d:ff:5f:29:53:f5:a5:66:41:3f:
         8d:2d:3b:18:0f:ba:ff:88:5d:eb:97:ed:7f:c5:9e:7e:94:bc:
         84:7f:f3:33:13:45:c8:df:9c:0b:23:ce:a6:f6:19:c4:04:5b:
         c7:c4:9d:80:d8:49:f6:bd:20:ef:9e:0d:5c:3b:3b:e8:78:f1:
         9e:18:e0:59:31:e4:6b:24:b4:e1:5d:ea:ff:7a:59:e1:de:44:
         f8:07:45:f7:6e:dd:ff:1e:c4:c0:8f:4a:3a:65:cb:9a:84:4e:
         45:0f:91:61:12:53:6b:9c:5d:23:2b:0b:6f:ee:2d:ac:9a:71:
         f0:39:4a:a2:df:3a:78:eb:1e:c1:8f:74:68:f2:44:28:a2:bf:
         1d:8a:28:07:c4:c3:3f:eb:93:4b:09:75:d7:05:28:e4:58:8c:
         08:d8:34:40:7b:86:28:0f:c0:b5:b1:cb:50:66:ce:6c:ec:9f:
         b3:8e:2f:22:b3:0f:e8:be:13:d4:57:c5:9f:76:a1:f1:18:12:
         89:0f:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org