Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wIww22l6Qo-TsO8L3_kBa4XtbQM.roa
File:                     wIww22l6Qo-TsO8L3_kBa4XtbQM.roa (raw, json)
Hash identifier:          07hr9XyDOoTXg3hcM75zOLKj7gSiDR79nqn6XYobPNA=
Subject key identifier:   C0:8C:30:DB:69:7A:42:8F:93:B0:EF:0B:DF:F9:01:6B:85:ED:6D:03
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       01904ED44C835768E13D44DE8E50497C0550
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wIww22l6Qo-TsO8L3_kBa4XtbQM.roa
Signing time:             Tue 25 Jun 2024 09:57:34 +0000
ROA not before:           Tue 25 Jun 2024 09:57:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15855
IP address blocks:        37.249.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 08:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4e:d4:4c:83:57:68:e1:3d:44:de:8e:50:49:7c:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Jun 25 09:57:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c08c30db697a428f93b0ef0bdff9016b85ed6d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:ab:56:d8:00:a4:1c:91:ec:8e:63:eb:94:
                    b6:2f:18:b7:02:f2:d1:07:80:79:36:1e:41:58:88:
                    b6:68:86:58:8c:c2:09:45:8c:34:b1:d0:14:c3:6a:
                    ef:8e:38:c2:6d:e7:da:de:a4:47:cf:65:26:1a:a9:
                    f4:02:0e:ae:b4:6e:77:31:87:8c:63:c9:b3:92:cd:
                    62:07:6c:bb:19:94:b6:91:06:9a:0f:a0:5f:2a:51:
                    20:ff:40:e9:d1:97:b5:43:4c:57:ac:47:20:23:e5:
                    94:a6:31:6c:74:cf:1e:74:db:83:3f:34:c6:9e:00:
                    28:e6:f8:bc:c8:e6:ad:1b:50:e6:d5:b8:a8:4d:d3:
                    b9:47:f1:ed:7c:bd:4b:17:eb:d0:e6:09:6b:9f:68:
                    de:40:92:ea:1c:bf:0d:a4:f3:86:80:d1:8e:83:ac:
                    66:b3:12:00:51:31:ae:18:1d:39:2c:07:5d:1e:ce:
                    c7:82:9f:71:7e:87:1d:f6:85:e3:80:d8:3a:b0:14:
                    34:e5:e7:41:38:06:06:83:58:a4:4b:2e:79:df:63:
                    75:ae:47:2f:5b:5f:61:47:6d:1b:f8:27:8b:e7:c1:
                    54:d6:36:32:52:55:9e:52:ca:a4:6b:5a:64:ab:cb:
                    e4:ce:e5:6d:54:05:74:3d:81:3e:dd:f7:1a:30:c6:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:30:DB:69:7A:42:8F:93:B0:EF:0B:DF:F9:01:6B:85:ED:6D:03
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wIww22l6Qo-TsO8L3_kBa4XtbQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:f5:17:3b:2f:20:b9:cf:e0:b2:0b:0a:29:e8:64:e8:a5:9d:
         5f:93:85:9d:8d:dd:9e:1a:fa:e7:37:39:2e:01:1e:5f:b0:7d:
         af:3d:40:4e:96:03:40:e6:55:6d:c0:97:c1:17:ac:c6:c7:a1:
         12:58:a2:1a:8e:31:33:77:47:b2:b0:c5:e0:e3:b5:f3:76:72:
         39:bf:4d:54:8d:90:3b:8e:f3:bd:97:07:de:22:6d:7e:fa:d3:
         96:9a:e5:51:c7:41:3a:f6:42:df:4e:4c:e5:4a:6e:b2:35:f3:
         56:2a:cc:a5:7f:68:4d:04:54:7f:6a:36:3f:1e:ed:2c:ff:de:
         cf:41:40:0d:2e:ce:40:10:ef:71:b1:35:e9:49:34:c1:0b:ab:
         1f:21:37:10:32:31:8e:e4:79:49:56:cf:33:40:8e:18:97:5c:
         a2:34:20:6f:27:10:7e:32:e1:41:2d:f0:19:07:66:a9:54:d5:
         33:c3:62:c3:d0:99:cf:10:5d:51:71:e4:71:a0:a9:0f:5b:72:
         b7:67:a4:d7:85:dc:e7:c2:6b:bd:4e:80:15:17:f6:93:a9:f1:
         32:2e:f9:30:e0:13:17:bd:46:ef:5a:d4:8f:31:2a:68:5e:d9:
         e7:17:49:75:d3:e8:5f:a0:42:7e:db:8b:67:8f:55:e1:7a:a1:
         24:48:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 10:54:19 2024 by rpki-client on console-ams.rpki-client.org