Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/WoSmP-VxYaSGYnfj4cOLuAaX10M.roa
File:                     WoSmP-VxYaSGYnfj4cOLuAaX10M.roa (raw, json)
Hash identifier:          oS6RFUGU9gqVH3aaKH202uovylHvJZxf8jHVX3GZGJE=
Subject key identifier:   5A:84:A6:3F:E5:71:61:A4:86:62:77:E3:E1:C3:8B:B8:06:97:D7:43
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       018CB61992062DE039D9E9B0CB91E8409D59
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/WoSmP-VxYaSGYnfj4cOLuAaX10M.roa
Signing time:             Fri 29 Dec 2023 15:02:58 +0000
ROA not before:           Fri 29 Dec 2023 15:02:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     267809
IP address blocks:        82.86.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b6:19:92:06:2d:e0:39:d9:e9:b0:cb:91:e8:40:9d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Dec 29 15:02:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a84a63fe57161a4866277e3e1c38bb80697d743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:42:d3:a8:69:4d:29:cd:db:bf:17:d3:bb:
                    cf:ab:6b:36:77:3d:f1:f0:96:a7:36:90:09:27:87:
                    87:b7:c7:15:fe:5c:3b:74:be:a5:3e:ce:a6:6b:97:
                    07:50:27:63:2f:2a:a5:78:d2:70:69:59:b8:ca:f3:
                    54:0f:fe:a2:04:14:48:8c:5d:4e:5c:16:dd:1c:89:
                    1f:af:ac:ce:e1:4f:d2:22:8c:e9:a7:04:d2:a2:a3:
                    5d:b2:3d:9b:dc:5f:83:e8:c7:ee:87:06:7b:2a:70:
                    12:90:f8:68:a4:0d:39:e4:86:73:1c:81:63:52:37:
                    ab:83:30:ce:d5:ec:29:1c:7c:84:6b:32:0b:9a:60:
                    a4:3e:a2:2e:c3:aa:3f:81:95:92:c1:cd:63:b8:21:
                    60:35:db:4b:94:40:2a:ea:26:ad:06:b9:28:c1:1c:
                    b7:8e:ca:41:59:13:82:4f:cb:6d:a2:a2:21:77:cf:
                    f8:ff:3f:58:b4:58:7c:26:dd:fd:64:5e:b2:f5:fd:
                    a6:4b:6d:26:22:a6:f3:23:73:0e:82:89:58:a7:3a:
                    fc:b3:3d:af:7e:7a:0d:75:f9:33:74:b9:55:3a:19:
                    fe:39:5e:09:1d:b4:c0:28:c9:64:5c:c9:55:2f:53:
                    e1:6f:dc:0d:f2:f3:03:58:75:bd:90:ed:8c:27:b2:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:84:A6:3F:E5:71:61:A4:86:62:77:E3:E1:C3:8B:B8:06:97:D7:43
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/WoSmP-VxYaSGYnfj4cOLuAaX10M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.86.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:65:84:3c:7e:96:f6:ea:22:3f:86:67:3e:38:6d:9b:f1:04:
         0d:e6:f2:f6:bb:8a:96:c4:9d:c6:62:b4:6a:b7:48:7e:8c:3a:
         82:9a:c4:75:7d:aa:55:34:5f:8a:80:98:2c:5a:3b:22:94:8c:
         7e:e7:b1:a5:bd:e4:72:e5:78:1d:b5:29:96:a2:f7:23:54:f2:
         05:d6:d0:f3:8e:2f:fb:4c:3b:a6:a4:65:f6:8e:3f:2c:53:4f:
         e1:ae:36:a3:a5:07:bd:71:db:33:7e:81:ed:35:7d:85:0a:2e:
         a6:a7:c2:01:c8:35:a1:c2:a3:34:0e:70:69:9e:2c:c1:ae:c7:
         71:97:4f:5e:71:c1:29:e0:ac:f1:6a:7d:cb:a4:26:2c:41:34:
         6b:66:b7:a7:93:4e:f5:54:41:d7:63:f3:1f:9f:d8:f5:e4:69:
         c8:11:bf:0a:ec:dd:2a:2b:85:70:45:0b:e3:85:37:e4:8b:8d:
         41:8a:db:bd:32:1d:18:59:4f:41:7a:74:3b:f6:41:6c:ea:3c:
         74:6a:12:8b:20:fb:62:90:cc:2a:7d:de:33:83:d6:a3:96:58:
         93:4c:d2:d6:de:f4:0d:f6:9c:39:e5:00:c0:f8:86:69:2b:9e:
         30:ee:f0:95:a1:6b:87:38:a8:95:59:4c:8d:b8:7f:f0:50:5a:
         44:e4:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:16 2024 by rpki-client on console-fra.rpki-client.org