Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Wx-d0DtQNXElxiMTdFfNaPkOJE8.roa
File:                     Wx-d0DtQNXElxiMTdFfNaPkOJE8.roa (raw, json)
Hash identifier:          T6IbKewAR1T+yjqxk3zfLRjQj3WGlC8jMvRplBrImEQ=
Subject key identifier:   5B:1F:9D:D0:3B:50:35:71:25:C6:23:13:74:57:CD:68:F9:0E:24:4F
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       01898769394C1AD68B08F7A208B1DA587233
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Wx-d0DtQNXElxiMTdFfNaPkOJE8.roa
Signing time:             Mon 24 Jul 2023 10:19:27 +0000
ROA not before:           Mon 24 Jul 2023 10:19:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197677
IP address blocks:        185.223.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Aug 2023 09:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:87:69:39:4c:1a:d6:8b:08:f7:a2:08:b1:da:58:72:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jul 24 10:19:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b1f9dd03b50357125c623137457cd68f90e244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:2a:f7:06:65:e5:75:c1:db:e8:76:a6:8b:
                    bf:c1:ac:95:c2:e0:66:0f:02:b2:f5:6f:db:a8:0c:
                    62:5a:d5:70:27:b3:f2:a9:e1:42:fd:f4:ae:c0:7f:
                    41:8d:5e:f9:bc:57:f3:ec:61:fd:83:51:29:84:15:
                    18:ec:ab:c3:db:f3:43:4d:84:94:a0:9e:14:6b:85:
                    f9:bd:42:9d:25:75:a1:c5:1b:4c:d7:66:34:f9:d1:
                    51:dd:26:e2:17:23:32:b3:77:6a:04:1a:dc:98:ca:
                    4e:1c:65:82:44:36:57:e6:87:dc:f6:30:9d:f6:b8:
                    6c:cb:c5:37:de:3b:f4:7d:c7:e1:21:f6:4a:af:c1:
                    41:37:2d:50:c9:4e:3a:b4:74:fd:05:61:49:53:e2:
                    68:34:21:b1:04:e3:50:f8:44:04:e1:ce:1c:e5:7c:
                    0b:bd:3c:7e:45:23:59:f1:3e:b1:6c:56:e1:54:5e:
                    28:0c:42:b2:b0:2e:84:a4:12:46:7f:62:dc:3a:b8:
                    1c:07:05:c8:82:e0:06:9e:cc:58:86:53:fb:cd:e4:
                    87:57:71:7c:d6:af:2b:4e:83:4a:45:bf:70:fa:d5:
                    ef:d0:37:15:c0:cf:9f:85:73:1e:05:8f:d6:60:af:
                    a4:f1:bb:99:3d:39:65:9d:c4:6d:db:2c:30:d2:5a:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:9D:D0:3B:50:35:71:25:C6:23:13:74:57:CD:68:F9:0E:24:4F
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Wx-d0DtQNXElxiMTdFfNaPkOJE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:66:34:ae:26:ce:b8:17:0a:e6:f0:3c:6e:ac:24:30:4e:24:
         8f:e5:45:12:e6:5c:f6:85:b9:2e:e7:8e:c0:4d:be:a5:c5:21:
         76:30:67:e4:00:fc:d1:bb:04:01:ff:12:19:a7:fa:90:0e:0f:
         7b:01:9c:02:30:ce:71:f9:9e:87:62:18:5e:13:ea:a4:c6:9f:
         53:72:6f:08:61:78:50:c4:5e:7d:27:da:c4:93:6b:25:78:68:
         a2:e2:c2:b9:b7:f5:f9:47:48:6d:5a:19:23:71:7c:5c:fb:06:
         50:bc:d0:29:98:3c:a9:5a:b4:41:97:2c:eb:44:9c:77:11:e5:
         d8:f5:cd:16:cd:98:20:77:30:bf:1a:ba:d7:f9:a9:d0:20:47:
         75:f9:e4:09:14:ea:1b:50:0c:7c:00:68:49:02:6d:a3:9e:e3:
         4c:e1:ee:0f:4f:39:26:81:1b:11:95:6d:3c:38:f7:ff:a0:a2:
         b6:4d:69:5a:05:81:40:11:2a:99:64:14:99:e0:5a:03:91:2d:
         02:fd:2c:71:54:71:8e:43:70:50:1e:34:19:d6:70:bf:d4:fd:
         77:3a:66:49:74:14:3b:53:13:8f:b5:34:5f:a1:d1:c7:85:18:
         d0:56:24:53:c4:ee:c0:8e:f1:4b:46:42:16:b8:44:5f:c7:dc:
         7c:26:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org