Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ww6W2-wZYzQCBE_pOrMX5YkwfZY.roa
File:                     ww6W2-wZYzQCBE_pOrMX5YkwfZY.roa (raw, json)
Hash identifier:          QsFWjgE/cba9BOrPlBciRq0J6GnNs0A0M7Fb4A/9208=
Subject key identifier:   C3:0E:96:DB:EC:19:63:34:02:04:4F:E9:3A:B3:17:E5:89:30:7D:96
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       019209DA36D35DD2565A566D7D8B6F03303A
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ww6W2-wZYzQCBE_pOrMX5YkwfZY.roa
Signing time:             Thu 19 Sep 2024 10:35:48 +0000
ROA not before:           Thu 19 Sep 2024 10:35:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        87.254.23.0/24 maxlen: 24
                          185.210.168.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 20:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:09:da:36:d3:5d:d2:56:5a:56:6d:7d:8b:6f:03:30:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Sep 19 10:35:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c30e96dbec19633402044fe93ab317e589307d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:84:1b:3a:54:80:cc:17:07:8e:de:e3:fa:
                    4a:ce:24:79:09:6e:0a:75:16:2e:90:60:f1:fd:5b:
                    44:2e:dd:5c:bd:ab:38:fe:4a:c3:93:02:0b:1c:03:
                    67:68:a5:9b:69:28:67:15:ec:09:02:ee:6f:7d:ac:
                    0f:55:eb:72:8b:5f:65:86:01:7e:45:3e:1d:05:e6:
                    24:96:2e:fe:61:6f:2b:7e:9e:59:7e:b3:45:dd:8e:
                    2b:e9:2d:0d:95:b6:23:7f:06:29:e6:a5:bb:4f:9c:
                    f6:36:99:8e:26:1d:2d:7b:25:de:1b:9b:a9:ea:bb:
                    55:b7:54:75:55:8e:f1:6c:d4:d1:5c:3b:63:6a:b2:
                    85:b0:56:19:63:b9:b4:ec:36:40:fe:f4:7a:2e:27:
                    ab:8e:1c:8c:48:57:99:a9:39:5e:60:cf:d8:cb:83:
                    22:0f:7c:2d:f4:b5:a4:3d:24:e8:ac:82:ec:4d:48:
                    e7:54:91:fd:c4:a8:44:e2:e0:ab:34:14:8e:5d:a6:
                    fe:98:ca:e7:23:c1:95:0c:09:ed:55:8e:22:32:bd:
                    fb:15:9d:03:5a:7b:86:6b:46:2b:12:8c:ab:e1:75:
                    12:7d:e0:58:95:f7:69:41:22:f4:c4:4e:05:43:8a:
                    79:7d:88:93:58:b9:18:77:2b:e0:ff:66:f4:0e:8d:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:96:DB:EC:19:63:34:02:04:4F:E9:3A:B3:17:E5:89:30:7D:96
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ww6W2-wZYzQCBE_pOrMX5YkwfZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.23.0/24
                  185.210.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:5b:e6:34:a7:9f:0e:96:91:f9:55:12:fd:8b:04:5d:54:
         82:3c:15:d9:c7:df:14:66:00:f0:0b:a7:49:8e:31:f5:b4:a5:
         98:f0:9e:97:e8:2a:e9:d4:b3:40:bf:6d:75:26:ea:9e:1a:27:
         27:3e:9e:ea:b1:65:6e:4e:b5:05:ac:df:56:63:4b:b3:06:df:
         61:61:e1:b2:78:e8:e1:1d:7b:62:11:38:3f:17:19:d3:37:00:
         cf:de:0e:d5:bb:d8:69:17:13:82:a2:7f:37:88:bf:7b:2f:4c:
         50:9a:b8:9c:9b:eb:3d:86:95:5c:0b:ea:03:3d:df:26:f5:e6:
         0a:99:0e:65:2b:40:0e:73:38:70:e1:4b:0c:11:8b:59:02:78:
         ea:64:bf:93:30:c6:bc:30:3f:4f:29:df:94:7a:48:01:74:79:
         f0:d4:d7:ad:2c:60:c7:c1:b4:2f:69:6b:26:9b:3a:4c:65:ed:
         58:00:0b:40:49:92:36:0d:4d:f6:bb:9d:9b:25:b0:bb:01:10:
         48:06:52:8a:81:02:e3:92:46:11:f8:44:9d:d8:f1:70:60:cf:
         af:d5:cf:70:a7:79:47:3c:1a:a2:80:cd:7f:ff:45:a9:b7:78:
         3f:d1:06:fd:bc:00:c2:8d:8f:f8:2f:1e:37:80:55:79:60:fd:
         79:c0:53:f6
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 28 20:53:55 2024 by rpki-client on console-fra.rpki-client.org