Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JjNfHGIVGHPLaTwbLxao8JA5IYI.roa
File:                     JjNfHGIVGHPLaTwbLxao8JA5IYI.roa (raw, json)
Hash identifier:          vrbRlGu1vNwMTeJqGPrXu1wresHPbR5VPPLr7YLZJcE=
Subject key identifier:   26:33:5F:1C:62:15:18:73:CB:69:3C:1B:2F:16:A8:F0:90:39:21:82
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       018F390CE2358578EE7FC2D435B172DEDB47
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JjNfHGIVGHPLaTwbLxao8JA5IYI.roa
Signing time:             Thu 02 May 2024 11:24:56 +0000
ROA not before:           Thu 02 May 2024 11:24:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        81.31.231.0/24 maxlen: 24
                          81.31.234.0/23 maxlen: 24
                          81.31.242.0/23 maxlen: 23
                          81.31.244.0/22 maxlen: 24
                          185.84.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 03 May 2024 20:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:0c:e2:35:85:78:ee:7f:c2:d4:35:b1:72:de:db:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: May  2 11:24:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=26335f1c62151873cb693c1b2f16a8f090392182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:5c:75:9a:a4:e9:c1:11:87:7c:80:0a:73:
                    a5:07:bd:6e:85:c2:09:19:8d:a5:68:5d:4a:0e:75:
                    88:0c:d2:db:f2:7d:64:f9:80:13:1d:df:0d:14:54:
                    6a:02:29:27:9b:a6:d1:d6:21:43:b2:50:0a:08:ee:
                    c5:5b:c9:dd:ae:9f:85:59:a6:c4:33:0c:d9:51:7a:
                    11:e0:7b:37:aa:5c:c0:ef:5c:51:01:0a:81:e8:f6:
                    58:77:83:6e:29:f2:85:ed:e8:ae:1b:68:83:4e:8a:
                    16:be:87:1f:29:15:09:01:f4:e1:ee:da:9c:3a:7f:
                    ef:4a:56:c4:37:82:65:b7:5e:ff:ed:e9:c1:d8:70:
                    df:3b:58:c0:6b:9d:bd:88:fd:78:98:74:8b:9b:0e:
                    2d:d5:78:2d:d7:5e:16:71:36:fe:b7:c2:0a:56:7b:
                    a6:4c:4d:61:81:dc:47:54:e1:9a:9d:76:9e:ae:63:
                    70:02:d7:03:8d:f5:60:98:03:01:fc:73:ea:81:d1:
                    f3:39:b2:3e:9d:e8:55:2d:c6:d7:ba:8c:f7:9a:07:
                    e0:b6:ed:e6:bd:25:20:15:e4:af:af:c1:4a:0a:9c:
                    52:3c:22:7e:1f:5c:ff:d6:78:fe:c3:13:86:b4:1e:
                    ae:3c:f9:a5:12:ff:e7:68:a7:74:38:f0:1a:ba:e1:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:5F:1C:62:15:18:73:CB:69:3C:1B:2F:16:A8:F0:90:39:21:82
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JjNfHGIVGHPLaTwbLxao8JA5IYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.231.0/24
                  81.31.234.0/23
                  81.31.242.0-81.31.247.255
                  185.84.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:80:c3:7f:73:da:91:df:bf:61:e6:b4:29:c0:80:49:63:
         a9:0c:a4:37:c3:62:5c:3f:70:d7:7e:ee:21:9f:e2:f2:fe:42:
         25:9c:ad:c0:76:22:fc:10:65:79:7e:1c:4f:c6:89:d9:cb:1c:
         b8:97:4c:8d:9f:8a:f4:70:96:8d:01:7f:a7:7f:94:d7:42:73:
         b8:f8:cb:2f:5f:09:d1:29:cb:5f:ac:71:60:38:28:f0:e8:c3:
         33:77:0f:9c:d8:4b:ab:52:73:51:06:70:4c:55:a9:26:19:44:
         8e:d3:9d:39:0a:47:40:d5:e2:94:ad:08:55:3c:d8:44:ae:26:
         aa:bd:58:f0:7b:5f:0b:13:a3:e4:79:b8:8b:86:ab:2e:86:c1:
         57:fc:49:20:83:4d:cb:f1:5d:3b:8f:a6:a8:38:ce:c4:a1:d1:
         a6:3b:c3:b5:ef:32:5a:b4:ed:52:b6:76:58:69:5a:1c:b4:ad:
         48:3b:c9:aa:31:6b:89:72:19:c8:f3:bd:1e:b8:99:35:94:85:
         db:9d:5b:63:d8:4b:89:a0:c0:36:9f:4f:17:8e:96:c1:5a:6d:
         87:77:f0:d7:0f:73:04:cd:b3:4c:0e:be:42:78:47:59:ca:83:
         a7:31:d9:13:cf:b1:aa:ee:10:f1:c5:fb:91:ef:23:f5:d6:34:
         7a:f7:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org