Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/2Fn-AlZfjvvphSU-Nv00aZt46kk.roa
File:                     2Fn-AlZfjvvphSU-Nv00aZt46kk.roa (raw, json)
Hash identifier:          3AHgCmTHyygqlte7HdM9zPuUlYSk62vxSdhUhWkzLpk=
Subject key identifier:   D8:59:FE:02:56:5F:8E:FB:E9:85:25:3E:36:FD:34:69:9B:78:EA:49
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0189BD2A14CD3F908D6B1759B164298D8E05
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/2Fn-AlZfjvvphSU-Nv00aZt46kk.roa
Signing time:             Thu 03 Aug 2023 20:49:58 +0000
ROA not before:           Thu 03 Aug 2023 20:49:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57494
IP address blocks:        81.31.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 27 Aug 2023 20:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bd:2a:14:cd:3f:90:8d:6b:17:59:b1:64:29:8d:8e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug  3 20:49:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d859fe02565f8efbe985253e36fd34699b78ea49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:02:5c:e0:ac:30:28:0e:b2:ff:8b:75:3f:
                    8f:86:2d:b9:f5:0d:24:ec:b1:26:ab:0b:c0:86:d5:
                    a3:e7:43:23:e5:4e:6c:77:9b:f7:f3:cb:3f:f9:c4:
                    52:d9:fe:48:41:bf:f9:5e:ad:06:96:a7:a7:f4:9d:
                    df:85:9e:1b:98:1d:cc:8d:e9:90:db:e9:54:df:ed:
                    9b:69:97:6e:93:a7:e8:f9:1d:ec:a8:ed:e6:55:77:
                    96:40:e4:31:c9:21:10:b9:dd:0f:eb:2a:0d:2a:a4:
                    20:ac:b5:a9:ac:4e:ff:4c:91:a2:0c:9c:1c:76:77:
                    b7:3e:1c:89:10:63:73:42:db:59:76:35:5f:2e:2f:
                    6b:56:06:1e:df:bb:42:44:5b:c6:54:88:4f:65:5a:
                    ef:2f:95:0a:0e:9c:f7:39:5a:61:bd:79:2a:a7:a7:
                    65:98:55:d3:a6:19:7f:99:16:0e:87:8f:cd:23:92:
                    1e:ca:a0:83:61:e3:a1:14:87:58:54:51:7a:18:92:
                    39:bd:ed:18:da:2d:88:e1:e5:1b:e2:cd:eb:4e:44:
                    55:57:50:8b:8d:a8:c9:e5:60:2c:2d:f5:f6:2b:34:
                    a9:47:99:44:ea:e3:69:ad:42:3c:2c:4f:41:39:2e:
                    e3:f8:65:c2:b0:df:2d:2a:85:0a:7c:e4:30:ef:f0:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:59:FE:02:56:5F:8E:FB:E9:85:25:3E:36:FD:34:69:9B:78:EA:49
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/2Fn-AlZfjvvphSU-Nv00aZt46kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:98:0b:77:b0:64:2c:96:d3:1f:2e:1d:a7:49:16:c6:83:fb:
         7b:50:e7:f6:30:73:1b:79:85:cb:0d:88:f5:af:ff:1b:be:22:
         b7:7e:21:1f:9a:f0:cd:0d:36:82:0a:43:7f:db:5c:1d:28:18:
         24:cf:60:08:54:f2:23:95:21:5a:69:0b:a5:d9:1c:0a:1d:69:
         98:14:e9:c3:61:7c:46:ab:ea:18:a9:c2:a8:85:4b:bb:7d:fd:
         c9:c4:9a:8f:e2:b0:fc:6e:1a:10:db:9d:b7:bc:88:f2:06:aa:
         ee:5f:b9:5f:af:27:b1:f8:45:60:65:c2:8b:1b:2b:e4:ad:fb:
         22:5b:23:4f:91:c4:de:03:87:22:eb:cb:89:a2:a6:5d:c2:62:
         1d:62:84:93:c1:7d:58:e9:52:59:41:63:6c:c0:9b:88:86:1e:
         5c:be:44:c3:4f:25:17:4a:02:98:9b:3c:0a:c1:88:6d:5f:b1:
         c0:0a:0f:b3:85:61:60:d3:6f:49:19:be:6f:1c:15:62:34:2b:
         f4:be:dc:0e:db:8c:d4:66:67:01:24:41:f6:a5:68:6b:12:16:
         c2:32:ad:f7:af:d4:81:99:f1:15:96:50:8e:6a:d7:ff:ea:68:
         2f:3e:28:da:a1:0b:b3:8f:71:87:51:3b:e5:50:94:fe:af:46:
         7a:bd:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org