Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/whmKwZOagD043uH8DHvdKz2m1Rc.roa
File:                     whmKwZOagD043uH8DHvdKz2m1Rc.roa (raw, json)
Hash identifier:          6LTijj1I5b6/TYtTomHWxIB8o/tCrCDvFZ6bWr+J4bI=
Subject key identifier:   C2:19:8A:C1:93:9A:80:3D:38:DE:E1:FC:0C:7B:DD:2B:3D:A6:D5:17
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       0188E18B83C5C57A4620F7F784D6493503B1
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/whmKwZOagD043uH8DHvdKz2m1Rc.roa
Signing time:             Thu 22 Jun 2023 05:19:56 +0000
ROA not before:           Thu 22 Jun 2023 05:19:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35409
IP address blocks:        194.246.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Jun 2023 08:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e1:8b:83:c5:c5:7a:46:20:f7:f7:84:d6:49:35:03:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Jun 22 05:19:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2198ac1939a803d38dee1fc0c7bdd2b3da6d517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:3b:cc:2c:79:98:80:a8:6d:74:d2:e2:fd:
                    b3:e4:19:5e:a8:d1:3c:40:17:ed:3e:9d:9d:3a:0a:
                    be:3a:d2:69:99:9d:86:2a:b8:be:5c:25:f6:d3:08:
                    2b:3a:17:b9:f1:54:cb:79:41:76:75:92:7d:44:a7:
                    69:2b:08:bd:92:65:e5:7b:2f:98:3f:aa:5e:dc:5a:
                    27:ff:85:8b:82:85:8c:17:b7:e3:84:aa:40:4f:ca:
                    7b:36:26:89:03:c6:0f:bc:1d:cb:b7:cd:12:18:d6:
                    92:bf:2d:bb:68:99:22:1e:33:59:a9:b5:09:f8:fd:
                    27:7c:8f:3c:cd:ce:26:34:8a:db:ff:b8:42:58:72:
                    d6:73:cc:ea:86:c1:df:9a:57:0f:d5:ec:c0:b7:66:
                    24:26:72:6e:a2:c1:e3:50:3d:2a:bc:7e:42:d5:10:
                    19:ac:7a:9c:76:d6:4d:0a:87:5c:47:ca:98:92:29:
                    50:b2:fb:3d:53:3d:50:67:81:0b:59:8a:1b:f9:78:
                    e2:58:cd:41:f7:eb:e9:8b:83:2f:6c:90:07:2c:94:
                    3e:16:4a:e3:83:ff:c5:5a:ba:46:e5:fc:3f:64:d6:
                    19:b2:46:17:a2:9c:b3:19:33:f4:fe:ba:bb:cf:2e:
                    74:ce:2f:f9:ed:a8:5a:5d:26:65:df:88:e5:7b:9f:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:19:8A:C1:93:9A:80:3D:38:DE:E1:FC:0C:7B:DD:2B:3D:A6:D5:17
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/whmKwZOagD043uH8DHvdKz2m1Rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.246.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:a6:38:4f:0c:bc:84:51:d6:ad:2a:d9:2b:7b:92:ee:20:
         0b:15:ac:a1:c8:bc:3f:4f:37:f8:4d:5d:77:8d:14:c1:40:61:
         20:05:14:0f:6a:27:a6:79:16:9b:51:1d:12:63:ad:b3:5e:e5:
         28:70:c8:78:f8:81:ea:fb:d7:2c:91:7c:9e:2f:e7:5f:65:89:
         23:c9:7f:37:c2:e0:32:b5:8b:97:a0:29:d3:53:df:46:fa:fa:
         a4:f0:f2:e5:17:76:7d:b2:b5:27:1b:d2:c1:4e:68:e1:b7:49:
         45:ff:1f:a2:b1:ee:d3:7f:c8:13:80:8c:02:0e:ee:61:81:5b:
         8d:54:76:20:49:20:ba:d8:84:5c:a1:19:83:8b:fb:92:bf:01:
         07:3d:1d:53:53:6a:7c:ea:d4:b1:94:5f:ca:eb:b4:2b:0c:bc:
         8a:b4:2e:7b:48:e8:b6:3c:eb:f2:7d:30:16:a7:40:81:57:38:
         7f:15:7a:d9:75:61:36:ec:7f:7d:f8:e3:e3:2b:cb:f9:1b:3b:
         b0:06:84:f1:89:12:2c:b3:10:54:17:5e:81:3d:b0:7e:1c:c1:
         62:c1:33:b5:93:19:46:32:64:24:a4:4d:09:41:0d:03:c8:df:
         31:75:fd:7c:53:6a:f6:6d:84:52:ff:cd:51:55:65:41:c9:a1:
         63:20:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org