Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wwuhRnkTn4SnBVR8Bz8rNEDJbfY.roa
File:                     wwuhRnkTn4SnBVR8Bz8rNEDJbfY.roa (raw, json)
Hash identifier:          61IwwtlEOhet4CzBLtALP/27s749Hxy/8CIf1N0JBuQ=
Subject key identifier:   C3:0B:A1:46:79:13:9F:84:A7:05:54:7C:07:3F:2B:34:40:C9:6D:F6
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       018BECFD401FCAFD2F459E586627EDF0E7E1
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wwuhRnkTn4SnBVR8Bz8rNEDJbfY.roa
Signing time:             Mon 20 Nov 2023 13:48:21 +0000
ROA not before:           Mon 20 Nov 2023 13:48:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13046
IP address blocks:        188.125.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:fd:40:1f:ca:fd:2f:45:9e:58:66:27:ed:f0:e7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Nov 20 13:48:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c30ba14679139f84a705547c073f2b3440c96df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:a8:e9:0b:f6:cf:b7:1a:21:6c:a6:41:18:
                    ed:27:13:9b:9a:23:da:cb:2b:ac:84:46:f7:96:d1:
                    6d:ce:3a:45:2e:6e:ac:45:23:de:0a:5e:4c:25:4a:
                    29:2b:06:bf:00:85:d3:17:79:60:2f:4a:de:4a:00:
                    7f:94:37:15:dd:14:cd:09:a3:92:bf:a8:74:75:6b:
                    1a:f9:c1:57:33:68:5a:d8:db:40:59:f0:a8:83:a9:
                    82:e1:5e:e9:4a:e1:d8:ff:84:a1:f3:5f:f1:b8:58:
                    45:b5:90:ca:eb:d0:f2:30:0e:3d:e3:a6:b2:bf:0a:
                    e5:fc:7e:6b:25:74:c3:69:c6:ed:a5:1d:e2:09:1c:
                    05:89:76:92:81:2a:9c:da:f6:4d:a0:d9:70:fc:ea:
                    ea:47:40:35:7b:ff:61:b7:df:dc:73:c5:97:4a:93:
                    6a:e8:09:c9:d6:38:0d:6f:4a:ff:38:6b:cb:39:f9:
                    9b:e9:b9:31:a5:49:09:af:c1:80:73:52:7e:df:50:
                    05:42:47:97:c0:7c:c9:2b:38:66:e1:6e:06:a5:32:
                    17:68:03:52:29:24:a3:12:4b:b0:28:26:77:2a:1e:
                    51:0c:54:3f:5c:ab:00:66:aa:7f:ed:1a:12:7a:6a:
                    ac:54:f0:47:73:be:3f:4e:e9:c8:89:d6:76:09:e3:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0B:A1:46:79:13:9F:84:A7:05:54:7C:07:3F:2B:34:40:C9:6D:F6
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wwuhRnkTn4SnBVR8Bz8rNEDJbfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.125.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:9a:ff:46:8e:ba:d9:09:3d:23:8d:bf:17:53:63:6b:d7:
         de:38:0c:20:58:69:52:ec:1d:ea:71:06:48:7d:a1:48:77:d3:
         a7:b0:f2:0d:8f:26:1c:ad:01:7c:01:e9:14:83:d6:5d:51:12:
         6a:07:26:23:0e:1c:87:97:da:9a:01:6b:c8:8b:0b:25:76:21:
         08:67:32:76:dd:d5:db:1f:1a:2a:f6:50:dd:c9:aa:75:9b:a7:
         10:27:0e:22:3b:67:d8:10:7b:4a:46:83:3d:72:89:60:7d:9b:
         b3:5a:86:9b:57:08:e6:d5:a1:e7:9c:ee:13:f4:12:b1:ce:06:
         73:21:5d:54:cb:fa:bb:70:ae:05:79:69:1b:c2:43:52:24:ee:
         84:49:f4:4a:f4:00:6b:a6:4c:14:c4:61:70:6c:8b:ec:df:af:
         01:0d:02:36:30:c8:d1:9a:56:08:eb:c1:c1:ea:c6:97:d9:2f:
         87:e0:e4:dc:05:e5:d5:c6:95:32:94:0f:31:75:2a:7f:1c:f1:
         f5:ea:33:24:d5:67:6d:b5:6e:1f:23:31:aa:ca:7e:c7:56:5f:
         78:a2:56:6e:e8:29:7a:9b:95:58:0f:8d:c9:3f:04:a9:10:f2:
         81:e9:99:3b:84:b3:83:fa:04:4a:19:18:ff:fe:fd:1f:4d:b8:
         8c:90:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:16 2024 by rpki-client on console-fra.rpki-client.org