Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Wy5drUsRlch5hSkkIauDGMVPWC4.roa
File:                     Wy5drUsRlch5hSkkIauDGMVPWC4.roa (raw, json)
Hash identifier:          KPhvoaWtcbBYMxLwC/IaXZP1P8efhHcEcQ0AE/HYmIk=
Subject key identifier:   5B:2E:5D:AD:4B:11:95:C8:79:85:29:24:21:AB:83:18:C5:4F:58:2E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       018B8B236B3EA8DC4C001A6E4ACF138D81E7
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Wy5drUsRlch5hSkkIauDGMVPWC4.roa
Signing time:             Wed 01 Nov 2023 13:47:16 +0000
ROA not before:           Wed 01 Nov 2023 13:47:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400529
IP address blocks:        193.243.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8b:23:6b:3e:a8:dc:4c:00:1a:6e:4a:cf:13:8d:81:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Nov  1 13:47:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b2e5dad4b1195c87985292421ab8318c54f582e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:16:6c:90:ea:5d:fd:89:c5:de:18:41:b3:
                    c8:fc:91:30:38:07:30:c5:74:d0:c6:13:94:69:d8:
                    88:24:77:90:2a:f5:81:f5:b1:bb:43:47:ac:08:a2:
                    f9:a5:99:aa:55:a7:0c:97:de:a7:bb:5a:a4:a2:e1:
                    74:50:47:7c:a5:1a:dc:a8:51:19:27:df:ff:4f:9c:
                    94:b2:e2:d8:44:44:db:72:f6:bd:dd:d5:65:c4:71:
                    5d:48:45:18:98:cd:cb:18:72:96:d4:2a:fa:58:be:
                    cf:af:b4:35:de:a9:56:12:af:ef:27:41:88:66:64:
                    02:eb:0a:b9:b2:c7:ee:87:08:0a:35:6d:00:a7:44:
                    dd:4f:9d:41:39:ac:41:07:e4:5e:25:c2:52:cc:82:
                    61:cd:c0:84:6f:38:33:50:15:f8:be:88:5d:37:3e:
                    ff:32:bd:53:12:62:df:16:a6:40:e2:39:e5:98:9e:
                    7b:aa:95:67:ac:65:11:b8:b5:7a:a3:4d:c1:b2:49:
                    ca:df:64:d3:c0:2e:be:f1:b8:b8:e2:d3:2f:2c:98:
                    27:57:97:0b:76:15:ec:31:21:6e:ea:1d:a0:35:0e:
                    a8:8b:aa:44:fc:6d:2c:8c:d4:3a:c4:a5:20:d2:5c:
                    fc:c5:a0:33:e3:97:c9:5e:76:43:9a:26:a3:1a:ed:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2E:5D:AD:4B:11:95:C8:79:85:29:24:21:AB:83:18:C5:4F:58:2E
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Wy5drUsRlch5hSkkIauDGMVPWC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:3f:76:52:dd:12:14:b6:e0:9c:9f:98:c6:c8:e8:05:74:
         01:bc:e3:ef:b6:f8:90:7e:24:d8:58:29:18:f0:a4:c8:b8:48:
         c7:e2:98:84:11:fe:63:23:1b:00:b1:26:34:dd:f4:c1:8c:b4:
         e9:26:34:22:d9:52:b9:c6:1e:38:fa:da:2e:be:45:f5:de:64:
         a3:00:51:de:0b:d9:2a:b5:82:90:4e:44:f3:b0:be:5f:9f:33:
         5b:b6:0b:93:df:56:e8:cc:5e:1d:1b:16:e0:0b:71:28:a6:eb:
         bb:ba:32:db:fb:ff:ef:be:d3:6e:c8:80:b0:12:55:a2:b3:65:
         0c:b9:de:74:11:79:d8:2f:28:79:14:62:23:f8:4c:44:51:f0:
         58:8b:79:94:a8:cb:eb:35:7d:81:1e:e5:6c:d1:2a:35:78:41:
         d7:84:4c:19:80:80:16:b5:47:f4:ae:51:05:ce:49:d6:7b:db:
         8e:ff:a1:cf:f3:c1:cb:7b:d3:e7:9c:df:da:9c:a5:b4:26:cb:
         64:35:69:fc:e6:26:a9:da:a8:fb:d0:42:bb:53:cd:b6:36:3a:
         26:36:22:99:57:78:6b:66:f1:d7:a9:64:3a:c9:5f:f1:f4:b6:
         a1:2a:20:f8:da:0b:3f:f3:10:3a:19:78:80:7e:9e:af:85:68:
         5b:ee:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:43 2024 by rpki-client on console-fra.rpki-client.org