Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/wsBp973uqeZlkhhR4UoBR8OqYrY.roa
File:                     wsBp973uqeZlkhhR4UoBR8OqYrY.roa (raw, json)
Hash identifier:          HO03T8qH+iy68m0s6HEpmL7vetToBpkroyTVHzUq49w=
Subject key identifier:   C2:C0:69:F7:BD:EE:A9:E6:65:92:18:51:E1:4A:01:47:C3:AA:62:B6
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       0187B25AFBB3F187D4CB6F4028F717C3CEEE
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/wsBp973uqeZlkhhR4UoBR8OqYrY.roa
Signing time:             Mon 24 Apr 2023 08:21:59 +0000
ROA not before:           Mon 24 Apr 2023 08:21:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        46.175.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Jun 2023 19:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b2:5a:fb:b3:f1:87:d4:cb:6f:40:28:f7:17:c3:ce:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Apr 24 08:21:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2c069f7bdeea9e665921851e14a0147c3aa62b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:24:66:0b:09:5f:a6:08:46:6a:2c:d2:8b:
                    67:26:7d:34:e6:4a:d1:17:71:ae:e5:0c:73:38:05:
                    b8:f8:9c:5a:be:55:62:64:5c:01:8c:c6:68:e3:2d:
                    10:dd:d3:b4:aa:2f:41:e9:38:82:1f:05:c9:cd:7d:
                    a8:d3:90:a2:f7:58:bd:56:d8:aa:a7:37:23:94:e4:
                    1f:48:c3:95:12:df:b9:8a:22:a8:cb:78:2e:d5:a5:
                    44:da:cb:3a:51:07:10:9f:0d:db:99:d5:d0:7d:de:
                    a6:32:9b:ed:3d:03:71:5e:6d:ce:f7:4e:71:cf:46:
                    bb:30:26:60:b1:ae:c9:6d:3d:0e:96:f6:7c:f7:89:
                    14:a6:ef:f9:7e:47:cf:11:1d:bb:4e:13:92:e2:6f:
                    49:7d:d5:f0:cd:87:b8:8f:21:98:e0:e4:3d:bc:32:
                    ff:42:16:cb:7e:7a:48:5f:73:8f:50:cf:54:cc:eb:
                    42:8b:fe:e1:be:a1:66:5b:22:ae:27:8b:c2:13:dc:
                    56:89:67:c3:dc:6a:33:68:22:f0:6b:c1:d3:32:db:
                    3a:fb:c4:9a:64:01:87:65:58:84:4f:89:8a:c6:d9:
                    2d:75:8b:39:9f:1a:26:28:a8:50:d2:6a:5f:fa:b5:
                    2d:1a:00:10:9f:e8:54:98:7e:65:a3:25:bc:94:62:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:69:F7:BD:EE:A9:E6:65:92:18:51:E1:4A:01:47:C3:AA:62:B6
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/wsBp973uqeZlkhhR4UoBR8OqYrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:99:45:1a:36:46:ab:12:7f:a1:01:9b:82:ae:05:7c:a9:4c:
         ca:0c:97:f5:ba:8a:e6:5a:d1:d6:65:d3:05:3d:d0:74:e3:51:
         75:68:a8:b1:21:e9:f2:0f:6c:f2:c7:ac:c5:25:5c:d3:1f:c4:
         7d:bb:45:9e:5c:2a:f3:50:6e:2d:fa:d1:e1:96:61:f6:e5:08:
         6e:c4:cf:f6:a0:fb:64:52:0a:8e:ad:ef:9b:16:9d:51:22:1d:
         5f:c2:cc:04:3b:f3:43:34:db:73:64:17:72:6c:53:17:f9:8c:
         fa:b0:53:8f:aa:4b:45:99:a7:ff:6d:a7:99:fa:7f:be:75:f1:
         57:d0:f4:9e:ea:4f:3c:0b:dc:64:df:46:e6:b9:1f:4d:d5:3f:
         c9:fe:4c:d6:34:c6:71:d2:25:94:4f:87:c8:71:3d:d5:d2:41:
         1c:57:a7:29:91:11:40:08:d3:e9:e7:46:b4:bb:d3:0c:d2:fa:
         8b:2a:fc:98:57:a1:83:84:61:2f:a6:94:7e:fb:62:b2:13:2c:
         6a:0d:04:bd:00:35:46:5e:a8:fb:f6:79:99:4d:c8:a7:18:76:
         91:32:bc:7b:d5:98:aa:df:aa:98:ec:d0:de:ff:52:95:93:8f:
         24:62:68:83:c1:b6:ef:a6:af:06:16:5e:07:c8:53:7d:a5:a4:
         a6:84:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:12 2024 by rpki-client on console-ams.rpki-client.org