Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/WYO1XFmlYlg5pvWjEw8UY98O6O8.roa
File:                     WYO1XFmlYlg5pvWjEw8UY98O6O8.roa (raw, json)
Hash identifier:          flINTn7qPteYI1ovihuqmzPvokBVIMtHm+9za8pFOUQ=
Subject key identifier:   59:83:B5:5C:59:A5:62:58:39:A6:F5:A3:13:0F:14:63:DF:0E:E8:EF
Certificate issuer:       /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial:       01856E2683CE8773BA2F451A2EB950FA2004
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/WYO1XFmlYlg5pvWjEw8UY98O6O8.roa
Signing time:             Sun 01 Jan 2023 16:24:55 +0000
ROA not before:           Sun 01 Jan 2023 16:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43193
IP address blocks:        37.46.8.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:83:ce:87:73:ba:2f:45:1a:2e:b9:50:fa:20:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
        Validity
            Not Before: Jan  1 16:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5983b55c59a5625839a6f5a3130f1463df0ee8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:4f:34:a5:93:de:60:63:79:87:fc:f5:c5:
                    34:92:c8:ac:3f:7f:9b:40:97:1d:36:9f:ce:4c:5e:
                    a3:93:b7:96:42:b5:92:32:cd:8d:6a:1d:2a:f4:1a:
                    0c:04:d8:89:d1:90:be:2d:c1:45:ae:12:91:c2:d5:
                    0f:79:48:9d:98:c0:37:6a:69:b3:41:03:63:05:d0:
                    f8:89:c2:34:2e:2e:b3:52:96:6b:42:6a:c0:36:dc:
                    9b:1c:36:1e:81:bb:2f:12:d2:fc:cd:b3:a6:94:a3:
                    66:21:69:93:f4:94:95:9c:bd:6c:57:e2:64:9f:c9:
                    81:65:5c:90:38:6d:68:39:34:62:96:4d:fa:5a:c7:
                    cc:f4:53:72:e7:31:ad:cd:12:8f:cd:c8:52:d6:0a:
                    3f:ab:5e:5e:b6:f0:2b:f5:8f:9e:1e:8a:48:cd:92:
                    88:8a:d2:99:8c:da:4c:99:58:7f:04:88:0e:31:1c:
                    4a:da:47:de:67:a5:86:45:09:f9:44:c4:ef:a3:97:
                    f9:b1:9b:23:5b:c0:4c:04:ad:2f:5a:db:51:4c:77:
                    5b:a9:bf:90:e5:86:f3:5f:3e:c9:cc:cc:ef:42:05:
                    54:6d:f1:94:c1:b2:46:3c:f6:79:fa:1a:bb:fe:6b:
                    0d:0d:ee:11:1c:0a:7c:36:a8:c6:5e:7c:b4:2b:51:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:B5:5C:59:A5:62:58:39:A6:F5:A3:13:0F:14:63:DF:0E:E8:EF
            X509v3 Authority Key Identifier:
                keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/WYO1XFmlYlg5pvWjEw8UY98O6O8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:52:96:7b:67:31:97:73:b9:5e:7b:12:b9:e5:76:7b:ee:
         a5:6d:f4:31:3e:86:67:f6:b8:60:a5:53:41:18:3b:89:53:6e:
         8e:a9:7b:9b:98:57:ca:83:bf:aa:ac:f3:65:10:bc:4c:71:cc:
         88:76:33:bb:49:00:7e:e8:ce:20:62:ee:a6:30:7d:8d:21:36:
         c8:35:83:cc:f7:2c:c1:09:96:1a:d0:b1:ab:f8:6d:a9:20:c6:
         4e:96:d7:b6:1a:61:da:94:68:31:72:45:bd:f7:18:1d:c0:14:
         d7:74:9b:51:eb:1b:92:d8:4a:de:2f:f6:fe:cd:53:49:41:2d:
         d5:fa:dc:fc:4f:77:a1:75:e6:cf:2c:36:4c:8a:2d:6e:13:ee:
         75:83:68:77:fc:ce:42:fe:86:83:8a:91:74:e2:c7:68:72:a8:
         ab:d6:49:2e:16:cb:89:cd:30:d9:27:83:e8:fe:7a:96:61:a0:
         d1:48:7b:74:f2:2c:f7:4f:9f:df:d0:a5:67:94:64:b9:5c:ce:
         fb:95:cf:83:7f:da:cf:08:54:e0:e1:ad:bd:61:83:77:3e:af:
         c3:d8:a0:09:2d:32:b7:d2:e1:f9:e5:42:23:7d:07:64:8e:fb:
         f3:b7:4e:0c:3a:03:ad:a3:1f:59:8e:62:81:5c:24:a2:34:37:
         e5:11:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:08 2024 by rpki-client on console-ams.rpki-client.org