Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/W6GjPGA7PqjIRnlAvWEI-6yrooE.roa
File:                     W6GjPGA7PqjIRnlAvWEI-6yrooE.roa (raw, json)
Hash identifier:          B97nkKxEjHxSHCVqUie4wWTrTWupiQLZDk2m1LK0qYM=
Subject key identifier:   5B:A1:A3:3C:60:3B:3E:A8:C8:46:79:40:BD:61:08:FB:AC:AB:A2:81
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       018570307AFC7860149BB75A20FC502EC131
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/W6GjPGA7PqjIRnlAvWEI-6yrooE.roa
Signing time:             Mon 02 Jan 2023 01:55:03 +0000
ROA not before:           Mon 02 Jan 2023 01:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201992
IP address blocks:        217.23.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:7a:fc:78:60:14:9b:b7:5a:20:fc:50:2e:c1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: Jan  2 01:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ba1a33c603b3ea8c8467940bd6108fbacaba281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:f3:49:71:0c:a7:f9:c3:da:2a:ad:88:5b:
                    c1:17:d1:23:19:9b:8b:b2:01:c4:4c:35:bc:ab:40:
                    68:6b:17:ec:69:78:ea:4a:56:5c:63:30:a5:27:d0:
                    ce:cc:f1:13:fe:73:be:77:d0:33:1c:f8:01:55:e0:
                    de:36:2a:9c:fc:90:05:02:ba:d1:a9:08:9f:96:7a:
                    0b:ac:43:44:ce:a7:ae:b7:aa:e2:bb:63:dd:98:81:
                    03:29:9b:3c:6d:8b:91:e7:d7:1f:a5:38:79:36:fa:
                    3d:4b:b8:91:d5:57:60:47:8e:f0:dc:cf:4e:bc:b1:
                    08:b9:fd:d8:ac:81:41:4d:3a:e4:d4:46:fc:dd:1a:
                    ea:76:e6:9b:a0:29:fe:90:fc:9d:c0:e6:da:e8:c2:
                    a6:3a:4c:78:e1:d5:91:d3:e8:55:2d:04:d1:3f:2e:
                    7b:bd:29:52:16:24:7e:26:76:eb:9e:34:a5:26:ac:
                    49:ad:df:a9:33:15:6c:23:48:f8:d8:1c:35:26:6a:
                    c0:e6:0b:44:40:63:ca:2d:0b:0f:89:b8:91:75:70:
                    57:d2:53:05:33:d1:af:c4:f8:b2:3a:76:58:20:79:
                    56:c5:4d:9e:0b:03:51:33:33:79:a4:d6:56:e9:02:
                    87:42:3b:b0:6e:9a:c8:42:10:7a:27:7b:f1:2f:18:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A1:A3:3C:60:3B:3E:A8:C8:46:79:40:BD:61:08:FB:AC:AB:A2:81
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/W6GjPGA7PqjIRnlAvWEI-6yrooE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.23.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:1a:b9:e1:a0:aa:7b:94:fb:91:5a:98:8a:54:ed:41:c0:
         37:b7:8b:1a:25:7c:fc:be:db:dd:e1:6b:4e:96:51:4f:84:2e:
         1d:65:cf:af:79:96:ab:38:89:cd:16:01:64:3b:70:da:c1:50:
         2f:f6:cb:f3:a4:77:82:95:9c:36:1b:83:d5:90:54:4f:0f:76:
         61:65:b8:46:aa:2e:c1:f9:84:fc:6c:9f:44:a8:08:6b:cf:ce:
         6c:96:cf:20:78:f2:57:90:89:3d:30:f8:4a:7f:5b:ef:5a:cc:
         b4:93:71:18:90:cd:14:11:14:87:18:1d:fa:4a:34:8c:0f:cd:
         98:25:c3:3f:08:a7:4a:cf:ab:e1:dd:02:6e:a8:1f:21:e9:63:
         44:c0:47:e2:0e:61:91:1f:af:75:6f:48:9a:ec:9e:c1:79:ae:
         74:5f:ef:f7:2f:e7:ee:d1:f2:a4:f7:79:75:bb:47:3b:c7:e0:
         4e:a3:6c:8b:1d:63:a3:54:d9:24:a0:1e:b7:66:3a:78:19:4b:
         3f:b9:42:3c:8c:f3:bc:28:31:e7:d5:8a:84:39:44:c6:e0:15:
         cc:c1:a5:ad:1c:11:15:4c:b1:29:ea:8c:ee:5f:16:d8:a6:2c:
         84:93:54:86:53:f7:02:f7:b4:93:10:dc:5c:e2:d7:c4:04:ec:
         a5:a9:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:30 2024 by rpki-client on console-fra.rpki-client.org