Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Ojy7_hGBbogciZAWDZOI69nMPwc.roa
File:                     Ojy7_hGBbogciZAWDZOI69nMPwc.roa (raw, json)
Hash identifier:          iyyrejOAO41mpAQV2JsZvVFoFv+MsHcncn7cBpzLkC8=
Subject key identifier:   3A:3C:BB:FE:11:81:6E:88:1C:89:90:16:0D:93:88:EB:D9:CC:3F:07
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01866200122DAA346453FD6631855FC46758
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Ojy7_hGBbogciZAWDZOI69nMPwc.roa
Signing time:             Sat 18 Feb 2023 00:50:17 +0000
ROA not before:           Sat 18 Feb 2023 00:50:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        81.31.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Sep 2023 20:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:62:00:12:2d:aa:34:64:53:fd:66:31:85:5f:c4:67:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Feb 18 00:50:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3a3cbbfe11816e881c8990160d9388ebd9cc3f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:96:e0:b0:35:bd:8a:31:85:95:51:44:3e:
                    35:a5:13:83:a8:6b:38:dc:b4:35:37:2a:db:55:a3:
                    d0:3e:87:cd:97:39:c7:2c:35:37:a3:c0:88:3c:a6:
                    72:cc:bc:4d:d4:cc:fa:d7:9a:b0:00:dd:26:a2:be:
                    d4:36:69:0e:61:c2:7b:72:47:9d:e8:b5:44:a6:dc:
                    e3:cd:00:fe:2d:e4:07:17:85:b4:ad:2e:57:d5:cb:
                    dd:07:e4:bf:4b:84:10:6c:4d:f4:b8:66:43:88:25:
                    3a:cb:6a:fe:bc:56:3a:b3:98:fb:41:c2:5d:e0:7c:
                    e3:3e:b8:60:94:52:e9:24:c7:c3:a8:0e:0e:f1:3e:
                    8b:a6:ca:5d:2b:bb:98:05:75:26:37:08:05:00:e2:
                    91:ea:cc:b7:fb:30:68:67:ce:5e:05:6c:49:b6:63:
                    08:80:8c:03:97:8e:fe:8f:c3:c8:01:79:94:ee:20:
                    bd:da:82:d3:8e:58:b8:d0:42:52:1e:36:6b:fe:9d:
                    a1:d6:3e:f8:0b:8e:62:f7:eb:2a:b0:29:58:e9:bd:
                    e9:cf:3c:9b:13:8e:82:a0:cf:b5:cf:84:7f:34:4b:
                    2d:0e:ee:2b:74:42:a0:d3:8d:ad:3b:46:74:f7:fb:
                    5b:f2:e6:71:83:6d:a4:a3:8f:90:ae:7d:19:6d:79:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:BB:FE:11:81:6E:88:1C:89:90:16:0D:93:88:EB:D9:CC:3F:07
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Ojy7_hGBbogciZAWDZOI69nMPwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ee:fe:af:f9:c1:a5:28:2b:50:68:69:77:5f:ee:77:76:3d:
         8c:b0:9d:bd:5d:82:83:d0:6a:6b:b6:fb:5f:b8:b6:d8:89:d3:
         f9:c8:db:db:99:fa:10:e3:26:1d:9e:c1:82:e5:09:ad:55:72:
         38:a0:dd:20:cb:2d:12:5d:59:30:90:c6:07:59:6b:eb:b3:18:
         17:0e:97:16:0c:d1:c8:b4:cb:de:fa:c6:68:e1:10:36:19:c0:
         8f:4e:16:de:e9:de:56:fc:70:0c:c5:ca:3a:55:74:a3:4a:0d:
         d4:d1:86:93:87:a7:a4:cf:68:40:9e:e7:11:9a:64:20:d3:0c:
         f7:09:15:75:01:53:ab:6c:d4:1a:ad:26:17:5d:a3:82:86:1d:
         6c:9e:f4:bb:e6:ad:8b:b7:5c:39:ba:e1:56:db:d4:9a:6b:1a:
         bb:18:66:7f:35:50:de:2a:41:8f:71:70:c6:98:52:93:04:b9:
         e1:f7:55:e4:dd:85:5f:71:70:bd:de:d8:c3:17:60:84:36:29:
         1d:ad:ed:f5:d7:67:b6:8e:32:24:7e:79:24:69:69:ec:3b:40:
         d8:a7:c2:d2:9a:bc:1c:e5:ed:2e:a9:0c:24:f2:f5:15:e5:0b:
         96:80:3c:a9:9b:70:56:f2:87:d1:2b:fe:ad:cb:e9:e6:e1:1c:
         05:6b:53:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZiABItqjRkU/1mMYVfxGdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwMjE4MDA1MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTNjYmJmZTExODE2ZTg4MWM4OTkwMTYwZDkzODhlYmQ5Y2MzZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPeW4LA1vYoxhZVRRD41pRODqGs4
3LQ1NyrbVaPQPofNlznHLDU3o8CIPKZyzLxN1Mz615qwAN0mor7UNmkOYcJ7cked
6LVEptzjzQD+LeQHF4W0rS5X1cvdB+S/S4QQbE30uGZDiCU6y2r+vFY6s5j7QcJd
4HzjPrhglFLpJMfDqA4O8T6LpspdK7uYBXUmNwgFAOKR6sy3+zBoZ85eBWxJtmMI
gIwDl47+j8PIAXmU7iC92oLTjli40EJSHjZr/p2h1j74C45i9+sqsClY6b3pzzyb
E46CoM+1z4R/NEstDu4rdEKg042tO0Z09/tb8uZxg22ko4+Qrn0ZbXl1qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDo8u/4RgW6IHImQFg2TiOvZzD8HMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvT2p5N19oR0Jib2djaVpBV0RaT0k2OW5NUHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/oMA0G
CSqGSIb3DQEBCwUAA4IBAQAf7v6v+cGlKCtQaGl3X+53dj2MsJ29XYKD0Gprtvtf
uLbYidP5yNvbmfoQ4yYdnsGC5QmtVXI4oN0gyy0SXVkwkMYHWWvrsxgXDpcWDNHI
tMve+sZo4RA2GcCPThbe6d5W/HAMxco6VXSjSg3U0YaTh6ekz2hAnucRmmQg0wz3
CRV1AVOrbNQarSYXXaOChh1snvS75q2Lt1w5uuFW29Saaxq7GGZ/NVDeKkGPcXDG
mFKTBLnh91Xk3YVfcXC93tjDF2CENikdre3112e2jjIkfnkkaWnsO0DYp8LSmrwc
5e0uqQwk8vUV5QuWgDypm3BW8ofRK/6ty+nm4RwFa1Pp
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org