Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/_wpUsM53ka3SF7E6MegMNUdzp24.roa
File:                     _wpUsM53ka3SF7E6MegMNUdzp24.roa (raw, json)
Hash identifier:          pRzGswm1e7qhVXmKqMrqNKKtdFNh+3i8oT433OXrev8=
Subject key identifier:   FF:0A:54:B0:CE:77:91:AD:D2:17:B1:3A:31:E8:0C:35:47:73:A7:6E
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       018A1DCC90027F0D21ABEBC6F959C4E0525E
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/_wpUsM53ka3SF7E6MegMNUdzp24.roa
Signing time:             Tue 22 Aug 2023 15:11:00 +0000
ROA not before:           Tue 22 Aug 2023 15:11:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47692
IP address blocks:        185.190.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Aug 2023 07:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1d:cc:90:02:7f:0d:21:ab:eb:c6:f9:59:c4:e0:52:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Aug 22 15:11:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff0a54b0ce7791add217b13a31e80c354773a76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:d2:b6:ca:cc:8e:91:d7:f5:86:05:91:d1:
                    90:29:39:2b:39:23:74:ad:91:86:ad:b0:a6:09:59:
                    d1:90:b4:4b:ce:5b:c9:ac:c1:b6:99:57:94:87:e9:
                    34:cc:8a:19:53:9a:5e:7f:99:2d:17:a8:65:42:73:
                    49:24:08:8a:0c:38:95:88:50:ac:28:07:1c:52:43:
                    f8:16:e4:ef:9b:6d:28:b6:8e:3a:7c:5e:df:79:e1:
                    c5:f1:a0:4a:ec:5f:e6:c5:22:81:79:78:2d:8f:4e:
                    94:5a:d8:4b:05:bb:77:c4:20:62:37:5d:e6:15:0a:
                    c9:ad:36:4b:8f:96:f2:1d:49:cf:82:a0:54:33:83:
                    91:c5:f1:b5:47:af:21:c1:40:12:6e:a3:19:80:5c:
                    27:82:9f:5d:24:db:6e:22:f9:8f:b4:7d:99:e3:03:
                    34:08:5e:72:36:63:30:de:ef:b7:2a:55:7d:bf:c7:
                    56:48:5b:4b:ed:5b:7d:fa:cf:9f:d4:9a:19:f5:5c:
                    c9:89:0a:c8:5e:25:89:50:db:d3:96:01:a2:d9:dd:
                    47:36:49:15:d4:c2:61:d3:07:1e:0c:63:e2:2a:69:
                    f4:33:af:af:87:73:a8:85:6e:66:a2:6a:3f:06:b9:
                    07:1e:37:e5:b9:2d:9c:45:00:55:b9:00:01:28:e2:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:54:B0:CE:77:91:AD:D2:17:B1:3A:31:E8:0C:35:47:73:A7:6E
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/_wpUsM53ka3SF7E6MegMNUdzp24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:0c:a3:8f:81:8f:8c:14:e3:dc:26:3b:9f:0b:82:e2:05:
         cd:d7:1c:4f:6c:cb:db:d6:51:cc:5d:2c:26:bf:a2:89:68:df:
         35:bf:9c:82:d8:04:9a:f4:3c:58:16:94:51:da:56:48:c0:c4:
         51:14:38:20:46:3e:7e:07:58:db:c9:20:4d:65:eb:8a:ea:9e:
         48:f0:04:09:70:22:42:d4:dd:cd:69:c1:11:5c:60:8f:a0:c8:
         0f:df:61:8f:82:78:3d:2b:80:7b:dd:93:fa:f7:70:ac:76:82:
         b4:7b:4f:44:bd:7f:bd:e4:5a:f4:e2:88:5b:33:38:a4:44:cb:
         f9:70:2e:38:7f:89:a4:60:0a:c4:ae:24:76:8b:b2:fa:cb:19:
         71:7b:5f:38:f4:85:fc:7a:75:ce:2e:e1:0d:f9:80:ab:5a:88:
         a1:2f:01:61:19:61:f6:e7:a5:7d:c3:fe:6b:4b:3f:d7:12:c8:
         b1:ea:5a:7c:d7:e3:12:7f:7c:c6:c0:31:84:90:25:bc:35:4a:
         84:bc:4b:37:e9:3d:80:8c:a5:aa:c7:b6:71:df:1a:1a:03:8a:
         5a:84:6e:c9:7a:12:91:4f:4a:f4:68:c9:77:e6:ad:78:c2:af:
         38:ce:94:fa:b2:74:6f:0d:6e:34:2b:6a:8b:fb:19:80:a8:71:
         05:0f:a0:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYodzJACfw0hq+vG+VnE4FJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz
ZTA2MWMwHhcNMjMwODIyMTUxMTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjBhNTRiMGNlNzc5MWFkZDIxN2IxM2EzMWU4MGMzNTQ3NzNhNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0nStsrMjpHX9YYFkdGQKTkrOSN0
rZGGrbCmCVnRkLRLzlvJrMG2mVeUh+k0zIoZU5pef5ktF6hlQnNJJAiKDDiViFCs
KAccUkP4FuTvm20oto46fF7feeHF8aBK7F/mxSKBeXgtj06UWthLBbt3xCBiN13m
FQrJrTZLj5byHUnPgqBUM4ORxfG1R68hwUASbqMZgFwngp9dJNtuIvmPtH2Z4wM0
CF5yNmMw3u+3KlV9v8dWSFtL7Vt9+s+f1JoZ9VzJiQrIXiWJUNvTlgGi2d1HNkkV
1MJh0wceDGPiKmn0M6+vh3OohW5momo/BrkHHjfluS2cRQBVuQABKOK7ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8KVLDOd5Gt0hexOjHoDDVHc6duMB8GA1UdIwQY
MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt
YmVlZWJlZGZmYzk1LzEvX3dwVXNNNTNrYTNTRjdFNk1lZ01OVWR6cDI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1
LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4wMA0G
CSqGSIb3DQEBCwUAA4IBAQBmLAyjj4GPjBTj3CY7nwuC4gXN1xxPbMvb1lHMXSwm
v6KJaN81v5yC2ASa9DxYFpRR2lZIwMRRFDggRj5+B1jbySBNZeuK6p5I8AQJcCJC
1N3NacERXGCPoMgP32GPgng9K4B73ZP693CsdoK0e09EvX+95Fr04ohbMzikRMv5
cC44f4mkYArEriR2i7L6yxlxe1849IX8enXOLuEN+YCrWoihLwFhGWH256V9w/5r
Sz/XEsix6lp81+MSf3zGwDGEkCW8NUqEvEs36T2AjKWqx7Zx3xoaA4pahG7JehKR
T0r0aMl35q14wq84zpT6snRvDW40K2qL+xmAqHEFD6Cm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:31 2024 by rpki-client on console-fra.rpki-client.org