Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/WWn6bH7BLSrNEeECKXG4NgDAc6I.roa
File:                     WWn6bH7BLSrNEeECKXG4NgDAc6I.roa (raw, json)
Hash identifier:          5qc1E/V57Ag41+rnlQPsPbL/ILX23Av1wU2ytcdAlvM=
Subject key identifier:   59:69:FA:6C:7E:C1:2D:2A:CD:11:E1:02:29:71:B8:36:00:C0:73:A2
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       0188F037EC1A87DE06ABD9D0B1734501F18A
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/WWn6bH7BLSrNEeECKXG4NgDAc6I.roa
Signing time:             Sun 25 Jun 2023 01:42:56 +0000
ROA not before:           Sun 25 Jun 2023 01:42:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        188.214.232.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 15:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f0:37:ec:1a:87:de:06:ab:d9:d0:b1:73:45:01:f1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Jun 25 01:42:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5969fa6c7ec12d2acd11e1022971b83600c073a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:44:33:f7:ea:d3:70:ee:a7:b8:40:e2:3a:
                    ee:91:7d:02:83:6a:32:7b:3c:65:cb:76:78:af:5d:
                    37:7b:e0:18:47:98:b6:11:c4:f1:77:ed:78:9d:b1:
                    0a:32:bc:e7:29:8e:cd:ba:74:4b:e4:cf:dd:f2:27:
                    dc:a6:4e:e9:36:c3:0b:75:af:ce:06:bb:f8:f4:a2:
                    c1:9f:62:ab:0e:57:c9:0a:d0:31:61:c0:0e:07:e6:
                    37:87:a9:84:b6:d3:72:c2:34:3f:45:ac:8f:f2:d7:
                    f6:ac:ee:17:9e:af:b7:9a:20:27:8d:a6:72:4b:ff:
                    ae:c3:b3:59:df:7c:d1:99:4a:b6:8c:cc:96:db:dc:
                    ed:fc:bb:6e:eb:95:08:79:53:11:3e:86:80:25:6e:
                    ff:b4:4c:69:af:f8:d3:07:75:6a:e1:7c:fd:67:b9:
                    1c:3f:a4:cc:1a:28:a9:bb:03:d5:c0:ec:51:f7:11:
                    87:59:9a:76:71:9d:48:11:24:27:da:a7:a7:18:ae:
                    0a:5b:0d:92:2d:eb:3b:f9:4a:61:f1:59:e3:1c:95:
                    2d:fa:02:c3:e8:ef:d3:e9:53:14:50:17:3b:68:cf:
                    3e:52:cf:95:33:dd:24:c2:48:80:af:1d:9b:3c:02:
                    af:84:ea:04:57:a0:f1:ce:fd:c0:13:89:a0:4a:f7:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:FA:6C:7E:C1:2D:2A:CD:11:E1:02:29:71:B8:36:00:C0:73:A2
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/WWn6bH7BLSrNEeECKXG4NgDAc6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:2a:59:21:c4:97:b1:d2:54:0f:5b:d4:cd:64:6a:8e:04:
         39:79:cb:fa:e6:67:9a:89:8f:ba:7d:5a:f8:0b:6b:8a:64:c4:
         11:46:f3:46:f5:d9:97:a2:73:8f:44:e8:a4:cd:99:fa:bf:93:
         07:12:19:5b:6c:f0:37:54:43:0f:76:f3:75:30:f2:43:83:42:
         b3:35:8f:79:66:14:1b:25:a9:45:44:7d:be:d8:f8:18:11:90:
         34:2d:cd:f0:da:be:91:6d:4f:1a:9f:e9:75:82:8f:c9:d5:dd:
         d5:a0:a6:2f:9d:e8:a9:30:06:db:18:4f:3f:8f:0e:d2:5a:17:
         66:6c:c0:6d:7f:ce:77:af:4b:a4:47:13:d9:7c:d8:ea:d9:f5:
         b4:2c:30:4b:c7:f1:b2:03:0d:0f:2a:d7:09:4b:05:57:b9:ef:
         d7:23:3f:ff:82:57:dc:bb:d5:09:2f:f1:7f:60:50:23:8d:d0:
         17:c6:96:96:e9:16:0d:ba:c8:3d:d5:26:fb:44:cc:ca:ea:d3:
         ae:11:94:35:0a:71:27:b3:3d:96:e6:b3:a1:99:1f:a3:36:1c:
         91:88:a5:82:14:7b:83:36:1e:37:1e:2d:b1:30:d3:69:5c:3e:
         9a:aa:2b:fc:03:c3:b2:3c:be:7d:9a:37:ef:e8:b9:5c:56:fb:
         d2:07:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org