Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Wlwwc36-T5Xc0e2sXGMHR8fyZ4k.roa
File:                     Wlwwc36-T5Xc0e2sXGMHR8fyZ4k.roa (raw, json)
Hash identifier:          NCGQDK/wXCKLTwkPR8qXtNhSV8WjM7eC5B+C7qgLsGQ=
Subject key identifier:   5A:5C:30:73:7E:BE:4F:95:DC:D1:ED:AC:5C:63:07:47:C7:F2:67:89
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018A7834FB04C829167C3A72288E610782ED
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Wlwwc36-T5Xc0e2sXGMHR8fyZ4k.roa
Signing time:             Sat 09 Sep 2023 04:30:52 +0000
ROA not before:           Sat 09 Sep 2023 04:30:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205570
IP address blocks:        45.15.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Oct 2023 11:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:78:34:fb:04:c8:29:16:7c:3a:72:28:8e:61:07:82:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Sep  9 04:30:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a5c30737ebe4f95dcd1edac5c630747c7f26789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:13:90:e6:b1:91:63:9b:fe:a2:26:05:1f:
                    7f:92:9b:4e:f6:8d:2d:4e:06:73:b2:82:2b:b5:bf:
                    54:52:81:dc:75:d0:46:b0:f7:bd:46:5f:51:44:31:
                    ce:e0:2e:0c:81:0c:02:73:b0:d7:3c:fe:cd:11:67:
                    59:ba:77:49:d2:90:27:92:89:ef:73:d1:ba:9a:8f:
                    c2:ed:01:ac:f9:f7:81:ff:bf:17:29:c8:7d:ea:6d:
                    78:8d:5a:6a:76:bb:ac:95:f8:dd:8b:b7:88:18:42:
                    cd:45:bb:16:4b:f8:a1:a4:ea:e3:74:84:e9:ed:e7:
                    bc:fa:3c:5a:dc:4d:7b:e7:6e:2b:b8:fd:de:e5:b4:
                    5b:83:c1:6c:66:f5:50:5d:7b:96:43:45:7f:24:61:
                    12:bf:9f:2d:b0:6f:f1:7c:b7:23:6c:15:54:fe:10:
                    3f:d4:8e:8c:49:18:45:79:ec:45:6a:de:20:34:3f:
                    83:d4:88:61:af:fd:d3:13:d6:4f:cb:1f:44:42:c5:
                    5b:8e:9b:e6:be:cd:26:ec:cf:17:1b:c2:26:d3:ed:
                    cf:04:51:80:4f:d3:ef:73:54:2f:74:0f:b2:78:80:
                    1d:4f:43:59:26:93:21:5e:c3:c1:6b:b5:84:8e:e0:
                    ec:18:6b:5e:30:2d:0d:b8:fc:43:08:10:eb:de:60:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:30:73:7E:BE:4F:95:DC:D1:ED:AC:5C:63:07:47:C7:F2:67:89
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Wlwwc36-T5Xc0e2sXGMHR8fyZ4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:ff:b7:bd:32:d4:98:a6:28:a0:5c:86:46:54:df:0c:be:
         b8:65:8a:af:a6:1f:76:a1:e3:98:0b:cf:14:06:b5:e5:61:e3:
         6d:aa:e8:7a:43:6e:22:fb:24:7d:e9:d7:b0:db:8d:6f:60:cf:
         92:e9:4c:18:e9:85:9c:e2:0f:1b:0d:ee:69:2e:33:23:80:90:
         df:12:f8:3a:0d:50:eb:be:fe:13:f4:1b:0f:84:0a:f2:93:3f:
         22:4b:1f:94:35:56:e6:cb:0f:55:35:d6:a9:7d:d7:86:3f:e9:
         3b:95:74:4e:4e:57:7c:78:f4:e6:73:43:f7:8e:ab:88:c6:66:
         88:9c:de:0f:f1:67:ef:9a:d9:99:d2:67:d9:00:34:2d:39:90:
         6f:07:05:1f:b7:84:23:2c:1e:c2:97:46:cd:09:91:12:00:ce:
         e6:d6:ca:b5:74:dd:07:68:14:5b:27:08:6f:0c:26:64:df:eb:
         71:b0:8c:00:a7:3e:9a:1c:ae:4b:98:de:d5:ad:dc:3a:52:d3:
         2d:f1:f3:da:e3:cc:4b:b6:05:28:f6:5a:97:73:2a:f5:9c:88:
         30:36:57:bf:5f:de:85:b5:43:93:c5:12:33:33:59:73:e5:28:
         2a:0c:ee:be:ab:31:c2:14:4d:dc:a3:cb:eb:cc:93:43:72:d9:
         26:1c:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:20 2024 by rpki-client on console-ams.rpki-client.org