Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/Wupct-x8q1JcF-vS4cyEff6buiw.roa
File:                     Wupct-x8q1JcF-vS4cyEff6buiw.roa (raw, json)
Hash identifier:          vcJAk63HYS/y84w90sn0+W5Dh81y6cxguF8vkM+t2+U=
Subject key identifier:   5A:EA:5C:B7:EC:7C:AB:52:5C:17:EB:D2:E1:CC:84:7D:FE:9B:BA:2C
Certificate issuer:       /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial:       018F5DD16B5BB35E837447833C68192809B1
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/Wupct-x8q1JcF-vS4cyEff6buiw.roa
Signing time:             Thu 09 May 2024 14:45:56 +0000
ROA not before:           Thu 09 May 2024 14:45:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58232
IP address blocks:        89.23.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 16:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:d1:6b:5b:b3:5e:83:74:47:83:3c:68:19:28:09:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
        Validity
            Not Before: May  9 14:45:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5aea5cb7ec7cab525c17ebd2e1cc847dfe9bba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:47:5e:b5:1b:c7:9b:6a:95:15:ae:93:bf:
                    17:f3:1c:a9:f9:66:60:e2:a4:f3:a1:f0:5a:5b:ff:
                    e2:df:a1:31:5c:2e:55:2f:66:a1:a8:4c:06:35:51:
                    0a:11:d6:d9:91:8e:87:e0:be:20:b0:d2:80:9c:bf:
                    34:43:8c:f2:2f:05:a8:83:d2:69:7a:ce:7c:8f:70:
                    55:1f:db:ae:42:d4:60:33:44:04:ac:6e:d4:ca:1b:
                    c7:0a:6a:e4:42:43:b6:80:e7:62:53:24:de:f9:20:
                    6d:85:cb:0c:90:6e:c4:7b:78:91:cb:51:6d:d8:f2:
                    52:85:ff:34:7a:81:86:89:78:a8:bf:32:43:b1:d0:
                    5a:92:d7:3c:71:44:8b:94:cd:fc:4c:e0:fc:36:4b:
                    4b:0e:2c:09:f8:4d:d5:14:18:5c:f2:f3:f9:d8:3e:
                    aa:41:14:3e:f5:68:86:80:46:06:06:dc:a1:ae:53:
                    58:8c:5d:ec:ce:b2:89:0d:0b:de:29:ea:3a:c3:6c:
                    fe:2e:0b:3b:84:4d:45:49:62:93:50:d5:86:b2:61:
                    3e:61:44:ad:ae:38:28:25:ad:04:74:f9:70:db:93:
                    06:f6:9b:81:ca:a9:2a:13:67:0e:7d:30:58:85:58:
                    92:64:b2:f8:99:13:dc:79:13:84:92:7c:fd:5a:25:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EA:5C:B7:EC:7C:AB:52:5C:17:EB:D2:E1:CC:84:7D:FE:9B:BA:2C
            X509v3 Authority Key Identifier:
                keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/Wupct-x8q1JcF-vS4cyEff6buiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:e5:98:3e:db:5c:fe:d1:4f:0b:c0:56:b4:79:e7:9b:ca:
         67:24:a2:f8:27:1a:47:7b:7d:42:09:99:7a:dd:f8:8b:9c:f4:
         23:43:0f:a8:cb:35:96:3b:ba:da:4c:fd:27:09:f2:47:fe:4b:
         66:19:7a:45:81:92:9d:46:7e:cb:0e:58:2c:23:26:d9:bd:f5:
         6c:1c:a0:d7:7e:70:63:c0:07:6b:e8:b4:5c:02:6e:56:0b:59:
         41:9d:f9:fb:d6:a4:4c:79:0c:4d:fd:23:53:1b:cc:40:0b:53:
         69:fe:df:f3:f7:1a:07:08:ad:71:18:94:15:63:d4:1c:2b:b1:
         22:b7:c9:eb:5f:7f:db:4b:b6:5f:c2:9e:05:1f:3c:23:8b:a6:
         76:ee:ef:f7:e0:0d:23:0c:99:07:ff:35:88:16:6b:4e:42:b0:
         5a:96:77:a2:dd:61:8f:2d:02:d2:2c:e8:30:13:84:e1:07:01:
         34:fe:8e:d6:8e:83:18:e9:cd:7b:d4:03:1f:65:0e:5b:9c:75:
         43:ce:73:70:46:d5:5d:b8:17:a5:30:9b:f9:cc:71:5b:27:c8:
         82:52:d0:14:a1:51:e1:65:8d:c2:bb:e1:8b:d6:31:25:29:a0:
         b1:05:56:f6:d2:39:a4:af:ab:c4:91:e1:f8:4c:11:cf:54:da:
         77:1c:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:56:19 2024 by rpki-client on console.sobornost.net