Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/WPGneUlpJJKn3esP_FB14FdeEfU.roa
File:                     WPGneUlpJJKn3esP_FB14FdeEfU.roa (raw, json)
Hash identifier:          CtpJjAwCdN4kjsPFV6gzAykjAQqFWKzduCh5qVgUBEA=
Subject key identifier:   58:F1:A7:79:49:69:24:92:A7:DD:EB:0F:FC:50:75:E0:57:5E:11:F5
Certificate issuer:       /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial:       01856E268944F4ADCCB94145C01946DF5F38
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/WPGneUlpJJKn3esP_FB14FdeEfU.roa
Signing time:             Sun 01 Jan 2023 16:24:57 +0000
ROA not before:           Sun 01 Jan 2023 16:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12874
IP address blocks:        185.139.48.0/24 maxlen: 24
                          185.139.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:89:44:f4:ad:cc:b9:41:45:c0:19:46:df:5f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
        Validity
            Not Before: Jan  1 16:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58f1a77949692492a7ddeb0ffc5075e0575e11f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:35:ac:5c:f1:1b:6d:ff:84:ef:06:49:3e:
                    b8:28:66:8a:f2:cf:07:84:c7:e6:7f:09:43:68:28:
                    83:c0:fc:0c:fc:f4:db:52:b2:72:88:22:5f:d2:ff:
                    12:47:71:89:e8:34:85:43:64:a4:6f:a2:31:4e:08:
                    56:ee:22:ef:dd:dd:38:8e:5d:99:97:1c:6c:fe:9d:
                    f4:6a:6d:3a:11:94:6e:86:15:28:06:30:2c:26:6e:
                    a1:d0:8b:69:52:1b:60:8a:03:b3:aa:e4:46:e6:75:
                    ac:a0:4d:53:26:c5:40:ca:08:57:85:43:a9:b6:f8:
                    6e:2f:e9:4a:1c:b1:12:06:8b:2d:b7:ee:95:a6:b0:
                    1e:f5:dc:bf:98:e7:30:33:e0:64:77:c2:89:62:c9:
                    2f:80:d9:e8:3f:15:a5:09:57:9b:96:83:bb:d8:3d:
                    4d:b6:41:7f:46:93:28:ef:88:a3:d5:51:60:d2:b3:
                    7d:b4:b0:a9:f8:bf:93:e2:f0:17:a8:2e:b4:b2:d5:
                    c1:77:8b:e1:e7:4d:8b:de:b0:1a:1c:29:d9:41:6b:
                    1b:00:02:6b:4c:47:fb:ef:69:69:d8:82:89:f7:5d:
                    19:80:1a:82:86:96:bf:d8:8a:f1:4d:44:a7:6c:74:
                    e9:07:bc:cb:69:11:62:89:bf:bc:df:56:2f:8c:b7:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:A7:79:49:69:24:92:A7:DD:EB:0F:FC:50:75:E0:57:5E:11:F5
            X509v3 Authority Key Identifier:
                keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/WPGneUlpJJKn3esP_FB14FdeEfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:11:17:ad:41:93:00:7e:e9:86:fc:79:cd:68:7c:1b:af:15:
         12:34:4e:2d:96:49:c8:a3:ab:36:c1:a1:a4:37:7e:d5:85:62:
         56:30:51:3b:17:9f:69:22:0c:a9:28:27:e7:e1:28:08:13:81:
         2a:0b:6a:7a:9a:c9:e4:a1:59:5e:36:85:bb:95:f6:b4:43:64:
         96:e5:9e:7e:c9:36:1e:a8:24:07:ac:1e:51:d8:a7:12:45:8f:
         b9:29:37:94:e2:0f:dc:61:e3:7e:8d:3d:e8:7a:f9:5f:1b:0a:
         6e:b9:ca:d2:35:65:a2:e2:74:7c:5e:98:05:f7:80:24:38:28:
         1a:4f:88:de:7f:79:b9:46:f9:ab:ea:fe:d8:a2:2e:89:44:90:
         6b:9f:4b:a6:de:a9:35:bd:5e:53:15:59:4d:b9:73:e6:e9:fc:
         8e:2d:e7:70:15:c4:ec:e2:19:4b:07:c5:99:a4:1f:7a:2d:ef:
         c6:0b:2f:49:1b:e1:8f:ed:80:02:f4:81:9c:80:37:b3:e0:80:
         4f:8a:f1:e2:3b:03:dd:2c:ff:63:af:7c:46:ef:d1:a4:dd:53:
         60:47:69:2b:54:e0:f1:c1:9a:f6:22:23:57:ed:66:2e:9c:7f:
         e8:ae:09:e0:c7:80:85:e0:74:c0:38:be:ba:fa:5c:ba:06:4a:
         ee:7a:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:40 2024 by rpki-client on console-fra.rpki-client.org