Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NovwRjrLCmlZQpA-3Y7fLsjpgjE.roa
File:                     NovwRjrLCmlZQpA-3Y7fLsjpgjE.roa (raw, json)
Hash identifier:          5tQqe9M+1wq3aKUKi4Dy11xoWbZlia8qEWKiQHAoWx0=
Subject key identifier:   36:8B:F0:46:3A:CB:0A:69:59:42:90:3E:DD:8E:DF:2E:C8:E9:82:31
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       01979B8881B80505502A50573CD893ED3BD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NovwRjrLCmlZQpA-3Y7fLsjpgjE.roa
Signing time:             Mon 23 Jun 2025 06:45:03 +0000
ROA not before:           Mon 23 Jun 2025 06:45:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.4.0/23 maxlen: 23
                          31.56.48.0/24 maxlen: 24
                          31.56.57.0/24 maxlen: 24
                          31.56.77.0/24 maxlen: 24
                          31.56.90.0/23 maxlen: 23
                          31.56.104.0/22 maxlen: 22
                          31.56.108.0/22 maxlen: 22
                          31.56.114.0/23 maxlen: 24
                          31.56.118.0/23 maxlen: 24
                          31.56.120.0/22 maxlen: 24
                          31.56.146.0/24 maxlen: 24
                          31.56.180.0/22 maxlen: 24
                          31.56.188.0/22 maxlen: 24
                          31.56.196.0/22 maxlen: 24
                          31.56.200.0/22 maxlen: 24
                          31.56.204.0/22 maxlen: 22
                          31.56.208.0/22 maxlen: 24
                          31.56.212.0/22 maxlen: 24
                          31.56.228.0/22 maxlen: 24
                          31.56.236.0/22 maxlen: 24
                          31.57.12.0/23 maxlen: 24
                          31.57.36.0/23 maxlen: 24
                          31.57.38.0/23 maxlen: 23
                          31.57.60.0/22 maxlen: 24
                          31.57.92.0/22 maxlen: 22
                          31.57.92.0/23 maxlen: 24
                          31.57.94.0/24 maxlen: 24
                          31.57.99.0/24 maxlen: 24
                          31.57.104.0/21 maxlen: 24
                          31.57.120.0/22 maxlen: 24
                          31.57.124.0/22 maxlen: 24
                          31.57.132.0/23 maxlen: 23
                          31.57.136.0/21 maxlen: 24
                          31.57.146.0/23 maxlen: 24
                          31.57.168.0/22 maxlen: 24
                          31.57.176.0/21 maxlen: 21
                          31.57.183.0/24 maxlen: 24
                          31.57.184.0/22 maxlen: 24
                          31.57.192.0/22 maxlen: 24
                          31.57.200.0/23 maxlen: 24
                          31.57.208.0/20 maxlen: 24
                          31.57.216.0/24 maxlen: 24
                          31.57.217.0/24 maxlen: 24
                          31.57.224.0/22 maxlen: 22
                          31.57.232.0/22 maxlen: 24
                          31.57.250.0/24 maxlen: 24
                          31.57.251.0/24 maxlen: 24
                          31.57.252.0/22 maxlen: 24
                          31.58.34.0/23 maxlen: 24
                          31.58.50.0/23 maxlen: 24
                          31.58.50.0/24 maxlen: 24
                          31.58.64.0/23 maxlen: 24
                          31.58.68.0/22 maxlen: 24
                          31.58.84.0/22 maxlen: 24
                          31.58.134.0/24 maxlen: 24
                          31.58.152.0/22 maxlen: 24
                          31.58.171.0/24 maxlen: 24
                          31.58.172.0/22 maxlen: 24
                          31.58.220.0/22 maxlen: 22
                          31.58.224.0/22 maxlen: 24
                          31.58.226.0/24 maxlen: 24
                          31.59.76.0/22 maxlen: 24
                          31.59.96.0/22 maxlen: 22
                          31.59.112.0/22 maxlen: 22
                          31.59.136.0/21 maxlen: 24
                          31.59.144.0/21 maxlen: 24
                          31.59.160.0/21 maxlen: 24
                          31.59.212.0/22 maxlen: 24
                          31.59.224.0/22 maxlen: 22
                          31.59.232.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 23 Jun 2025 14:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:88:81:b8:05:05:50:2a:50:57:3c:d8:93:ed:3b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jun 23 06:45:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=368bf0463acb0a695942903edd8edf2ec8e98231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:15:9a:28:b9:d1:94:73:ae:4b:ae:00:bb:
                    15:b0:dd:47:a7:fc:98:9c:9e:4a:6e:8f:6c:5a:80:
                    38:50:15:34:90:b9:72:79:73:88:b3:a0:91:12:ab:
                    b1:31:20:4c:de:d3:1e:b0:ab:79:bc:cd:4b:6a:67:
                    5f:b5:c6:84:c5:63:fb:29:50:54:3d:85:7a:6a:7f:
                    f6:3f:0f:3d:27:67:ef:2b:10:e5:fa:1b:da:35:82:
                    a8:18:a3:9b:1d:d3:9a:89:d2:8b:70:64:39:98:c6:
                    5b:83:8b:d4:12:7b:5a:98:a4:97:d7:86:d1:7d:6c:
                    6b:22:ca:53:2e:24:cd:de:23:a7:0c:51:9e:62:5f:
                    22:a1:e6:b0:8b:c6:4a:c1:21:2e:07:bd:7f:f6:65:
                    f2:41:6d:71:52:6e:b5:e1:b4:34:4c:01:c4:50:c5:
                    c5:8b:6c:e5:64:1c:1b:4d:07:a9:56:b9:3b:18:aa:
                    0e:97:cd:b8:c0:1a:eb:6d:94:ab:93:cf:05:0e:94:
                    54:dc:09:0e:45:61:ab:2b:8b:8a:29:02:84:e6:7e:
                    4c:90:cc:e2:61:93:a2:c3:8e:71:51:5c:40:4c:16:
                    9b:64:ec:77:10:82:9b:03:cd:80:0e:e2:b7:1e:c2:
                    23:ab:42:40:31:1b:18:41:46:4c:e6:41:03:d2:7d:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:F0:46:3A:CB:0A:69:59:42:90:3E:DD:8E:DF:2E:C8:E9:82:31
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NovwRjrLCmlZQpA-3Y7fLsjpgjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.4.0/23
                  31.56.48.0/24
                  31.56.57.0/24
                  31.56.77.0/24
                  31.56.90.0/23
                  31.56.104.0/21
                  31.56.114.0/23
                  31.56.118.0-31.56.123.255
                  31.56.146.0/24
                  31.56.180.0/22
                  31.56.188.0/22
                  31.56.196.0-31.56.215.255
                  31.56.228.0/22
                  31.56.236.0/22
                  31.57.12.0/23
                  31.57.36.0/22
                  31.57.60.0/22
                  31.57.92.0/22
                  31.57.99.0/24
                  31.57.104.0/21
                  31.57.120.0/21
                  31.57.132.0/23
                  31.57.136.0/21
                  31.57.146.0/23
                  31.57.168.0/22
                  31.57.176.0-31.57.187.255
                  31.57.192.0/22
                  31.57.200.0/23
                  31.57.208.0-31.57.227.255
                  31.57.232.0/22
                  31.57.250.0-31.57.255.255
                  31.58.34.0/23
                  31.58.50.0/23
                  31.58.64.0/23
                  31.58.68.0/22
                  31.58.84.0/22
                  31.58.134.0/24
                  31.58.152.0/22
                  31.58.171.0-31.58.175.255
                  31.58.220.0-31.58.227.255
                  31.59.76.0/22
                  31.59.96.0/22
                  31.59.112.0/22
                  31.59.136.0-31.59.151.255
                  31.59.160.0/21
                  31.59.212.0/22
                  31.59.224.0/22
                  31.59.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:7d:72:7d:53:ad:c2:40:8d:c6:67:7a:e8:b0:bc:ca:c3:
         60:48:31:84:10:62:5b:27:83:c4:c0:27:d2:66:fc:39:8b:e7:
         36:1c:67:d1:c6:61:e7:1a:c1:d7:78:af:f3:19:4d:f3:3d:16:
         59:04:ee:1b:b1:14:98:73:4a:1e:18:2f:a0:6f:29:26:1c:ec:
         d3:cb:d4:6f:d5:b3:cf:d5:7e:4f:e4:c3:34:22:e6:9d:95:be:
         40:40:fe:8a:48:55:dc:2d:3e:d3:e7:3f:cd:df:fb:81:d0:ae:
         cf:48:76:89:59:ba:04:4e:02:9b:c2:5e:05:3c:50:b1:78:0b:
         cb:89:c5:87:b1:0d:9c:46:35:e4:53:d2:8a:cf:fd:66:59:95:
         d1:a2:8c:3c:fe:46:dd:e3:6b:15:d3:00:ad:ab:c8:44:18:f8:
         7a:3e:be:1d:0d:84:45:c4:1e:d0:f9:6c:0c:ae:86:3e:59:41:
         e4:9f:34:d0:22:56:f3:6d:bd:ad:91:0e:62:a7:e0:ac:e9:9b:
         d0:18:32:8e:11:fb:d2:be:9f:f1:f6:e9:21:61:b9:f1:a5:ed:
         02:42:7c:d0:88:74:3a:c5:8f:ad:35:a6:ef:57:52:2c:a6:b1:
         e4:51:d4:c2:fe:64:af:83:be:9e:e5:31:fe:ef:ac:98:e9:d7:
         1b:f2:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:52 2025 by rpki-client