Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5CR7vLWMI-1X_VKR5A-e77cJCyc.roa
File:                     5CR7vLWMI-1X_VKR5A-e77cJCyc.roa (raw, json)
Hash identifier:          JB7Yus9YwnUBXX+PcVqPNi4xdocIsYzefAP8NNr7sYs=
Subject key identifier:   E4:24:7B:BC:B5:8C:23:ED:57:FD:52:91:E4:0F:9E:EF:B7:09:0B:27
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01858248B9628D049495037B7FAC2DD03BE0
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5CR7vLWMI-1X_VKR5A-e77cJCyc.roa
Signing time:             Thu 05 Jan 2023 14:14:42 +0000
ROA not before:           Thu 05 Jan 2023 14:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        81.31.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 Feb 2023 04:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:82:48:b9:62:8d:04:94:95:03:7b:7f:ac:2d:d0:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jan  5 14:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4247bbcb58c23ed57fd5291e40f9eefb7090b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:5c:28:dd:6d:b0:0e:da:9e:ab:40:13:15:
                    df:b6:a2:a3:08:c4:24:f2:b9:63:38:50:7d:7a:db:
                    fd:0b:bb:37:dc:e8:77:4d:99:e6:5d:09:82:40:5d:
                    e1:57:1c:55:26:48:f3:7d:e0:98:64:b8:e0:9d:30:
                    a9:6f:6d:2a:29:ca:1a:69:d6:68:1f:5f:34:65:21:
                    a0:9f:90:45:2c:c5:cc:e7:97:4c:24:db:56:8f:09:
                    51:68:9b:7d:b9:0c:5a:10:a4:54:13:77:8f:0a:d4:
                    0d:dc:7b:9a:f6:e7:5a:fe:7d:f5:16:78:b2:8d:3c:
                    bf:ff:25:a7:52:a3:19:80:6a:b9:2a:04:7e:7d:0d:
                    d0:99:3f:1a:03:7d:cb:1d:21:43:9f:dc:38:91:d8:
                    26:82:ea:a4:e9:ef:37:54:9b:04:23:21:7e:ff:74:
                    41:7b:15:5f:d9:77:8d:81:ab:3c:1f:45:6a:12:c8:
                    f0:ea:2a:7a:af:bd:fb:ac:63:aa:96:af:c0:9d:63:
                    50:f6:a7:04:b2:22:a8:56:38:d4:ae:6b:ca:eb:17:
                    c4:83:13:c8:35:1c:75:13:45:35:09:39:d5:bb:e2:
                    1e:70:1c:71:4d:7d:b3:97:6c:18:89:c5:7b:d4:59:
                    8c:47:42:3c:4e:e5:74:e4:2d:a8:6e:0b:40:0d:76:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:7B:BC:B5:8C:23:ED:57:FD:52:91:E4:0F:9E:EF:B7:09:0B:27
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5CR7vLWMI-1X_VKR5A-e77cJCyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:c5:61:6d:77:91:7b:b8:d3:7b:40:06:ba:98:0e:e8:76:fd:
         c0:20:dd:17:79:83:1a:00:b8:c2:a4:ca:52:49:45:50:be:e0:
         52:8e:bf:73:3b:ab:36:c9:76:9b:02:4b:bd:ab:2f:02:5a:21:
         b8:ed:cb:4a:da:96:c3:c2:c6:38:db:6c:c6:55:f9:3e:bb:6c:
         75:00:ec:ee:f3:fe:e3:c4:14:db:47:35:36:3a:f1:6b:2b:2c:
         b4:cb:6d:d0:8c:a5:d5:b6:2e:f9:d9:82:5d:db:78:ca:8a:da:
         8b:d2:99:46:1c:59:11:0e:02:6e:87:10:c0:e2:33:94:02:b5:
         0b:83:15:aa:37:ff:ec:7a:39:bd:ec:2a:4c:e3:d8:e9:e9:e3:
         be:82:88:e4:f2:6c:58:af:99:43:fb:30:c6:6a:7f:5d:67:0b:
         61:35:7d:18:d5:bc:ea:84:37:77:77:bb:46:05:af:b7:79:fb:
         a0:1d:01:a3:d8:d0:88:1a:98:6f:0f:77:6e:f6:0d:71:dd:d8:
         a2:4e:c5:ce:8c:d6:dc:a9:fa:c8:de:fd:42:d5:ec:56:85:a2:
         07:07:3b:90:eb:46:c7:27:81:9c:e4:b5:f9:a3:42:cb:84:9a:
         29:81:cf:17:18:7b:15:29:4f:55:ec:64:b3:f5:85:7d:4c:b4:
         76:d4:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org