Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WG748xR1YcvB9g6diTV6YOCu4kE.roa
File:                     WG748xR1YcvB9g6diTV6YOCu4kE.roa (raw, json)
Hash identifier:          KR6EiL96dSymeSFDDANZqrMY17z5APU8ILjdpNyqbLA=
Subject key identifier:   58:6E:F8:F3:14:75:61:CB:C1:F6:0E:9D:89:35:7A:60:E0:AE:E2:41
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       018DD15BC39D8FF590D2E11D33E2429D05D8
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WG748xR1YcvB9g6diTV6YOCu4kE.roa
Signing time:             Thu 22 Feb 2024 15:07:48 +0000
ROA not before:           Thu 22 Feb 2024 15:07:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        80.246.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 18:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d1:5b:c3:9d:8f:f5:90:d2:e1:1d:33:e2:42:9d:05:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Feb 22 15:07:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=586ef8f3147561cbc1f60e9d89357a60e0aee241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:4a:f6:a5:09:c1:85:87:a8:9a:71:f1:56:
                    86:9d:12:e7:da:c3:53:31:7a:f7:11:79:a9:cb:6e:
                    34:05:7f:04:7e:90:ce:ec:bc:b8:13:3a:9a:00:fc:
                    a1:4d:d3:69:79:f8:88:89:5c:22:2e:66:2d:05:e7:
                    e1:8f:23:38:69:08:e4:75:3f:2c:ff:cd:aa:10:e6:
                    47:25:ec:9a:45:70:47:2a:ad:67:0e:d0:79:7f:9b:
                    11:bf:3a:47:ce:b8:f3:46:77:72:f9:4b:67:5c:81:
                    07:30:52:37:21:4e:ea:98:07:38:f5:09:a5:f4:b4:
                    1e:e7:7e:af:5b:26:2b:99:10:3c:ad:30:5d:c7:5f:
                    72:35:76:3c:fc:e9:fa:f6:d1:40:95:8e:50:00:29:
                    6a:42:37:9f:12:a6:8b:fc:2a:0a:a5:13:48:3c:44:
                    c5:c5:52:f8:e8:5c:6c:8c:4f:d1:6b:d6:b2:2d:cd:
                    21:09:b4:45:0e:b0:0e:f9:38:75:17:9c:2a:e4:a1:
                    39:d2:3a:cb:98:27:4c:d3:ca:74:6a:17:54:04:6f:
                    e3:c1:8d:92:c7:fe:6c:e1:13:03:ce:39:c6:7c:b8:
                    ad:1f:36:b6:0c:e0:69:ca:85:b2:81:df:52:18:54:
                    e8:f4:7e:ac:52:a5:c4:af:2c:3a:cc:ed:29:e4:9e:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6E:F8:F3:14:75:61:CB:C1:F6:0E:9D:89:35:7A:60:E0:AE:E2:41
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WG748xR1YcvB9g6diTV6YOCu4kE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:6b:4a:f0:9a:23:db:ae:7c:3d:7f:4c:8a:ca:21:60:80:
         c7:10:10:bb:17:c1:a4:4f:60:b3:3d:ac:a3:15:20:a7:aa:c1:
         c5:d1:97:de:4c:2d:02:4d:cd:29:e5:45:55:ed:73:a8:a4:45:
         76:5b:82:60:f1:91:b8:0f:6a:a9:bf:a7:d5:30:4f:2e:28:7a:
         7b:7b:51:76:ef:ac:16:eb:72:c8:eb:ef:01:5d:9b:52:c7:9e:
         c8:fa:bc:01:c9:ff:44:40:c6:11:6d:a4:c3:c0:f4:f0:1d:e3:
         9e:5e:f5:38:79:3f:c9:c8:d5:10:83:ad:c2:4b:d9:f1:a8:53:
         52:a0:96:df:76:5b:d0:b1:3b:23:a3:d1:2c:36:01:69:11:1e:
         01:26:5c:ec:19:9f:15:04:15:cc:0a:22:b5:43:e0:a2:68:6a:
         dc:3c:f1:d9:ae:27:91:46:30:ef:21:38:33:76:a0:df:10:a3:
         c6:d5:a6:f1:21:1b:2d:fa:36:4c:ce:fb:43:fe:4c:f3:62:65:
         1c:58:0e:ae:b1:26:d9:cc:76:f8:bb:af:c6:f3:f1:b0:0f:a7:
         c6:6a:f1:b4:9a:f2:db:9b:39:e4:92:47:67:fe:6d:39:59:68:
         32:fa:2a:46:36:cd:53:08:47:20:3a:ab:66:d6:d0:94:23:2c:
         c5:9b:2f:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3RW8Odj/WQ0uEdM+JCnQXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwMjIyMTUwNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODZlZjhmMzE0NzU2MWNiYzFmNjBlOWQ4OTM1N2E2MGUwYWVlMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna5K9qUJwYWHqJpx8VaGnRLn2sNT
MXr3EXmpy240BX8EfpDO7Ly4EzqaAPyhTdNpefiIiVwiLmYtBefhjyM4aQjkdT8s
/82qEOZHJeyaRXBHKq1nDtB5f5sRvzpHzrjzRndy+UtnXIEHMFI3IU7qmAc49Qml
9LQe536vWyYrmRA8rTBdx19yNXY8/On69tFAlY5QAClqQjefEqaL/CoKpRNIPETF
xVL46FxsjE/Ra9ayLc0hCbRFDrAO+Th1F5wq5KE50jrLmCdM08p0ahdUBG/jwY2S
x/5s4RMDzjnGfLitHza2DOBpyoWygd9SGFTo9H6sUqXEryw6zO0p5J635QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhu+PMUdWHLwfYOnYk1emDgruJBMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvV0c3NDh4UjFZY3ZCOWc2ZGlUVjZZT0N1NGtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbiMA0G
CSqGSIb3DQEBCwUAA4IBAQA8EGtK8Joj2658PX9MisohYIDHEBC7F8GkT2CzPayj
FSCnqsHF0ZfeTC0CTc0p5UVV7XOopEV2W4Jg8ZG4D2qpv6fVME8uKHp7e1F276wW
63LI6+8BXZtSx57I+rwByf9EQMYRbaTDwPTwHeOeXvU4eT/JyNUQg63CS9nxqFNS
oJbfdlvQsTsjo9EsNgFpER4BJlzsGZ8VBBXMCiK1Q+CiaGrcPPHZrieRRjDvITgz
dqDfEKPG1abxIRst+jZMzvtD/kzzYmUcWA6usSbZzHb4u6/G8/GwD6fGavG0mvLb
mznkkkdn/m05WWgy+ipGNs1TCEcgOqtm1tCUIyzFmy9t
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org