Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oSX8Wx7B6slfS1dO6FC8LyheZIo.roa
File:                     oSX8Wx7B6slfS1dO6FC8LyheZIo.roa (raw, json)
Hash identifier:          6CsOLIN9247K1eehJ5iKDrloMnellbSUCRun1qQLXMQ=
Subject key identifier:   A1:25:FC:5B:1E:C1:EA:C9:5F:4B:57:4E:E8:50:BC:2F:28:5E:64:8A
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0188579ECCC319D273208C41E0F8762B3DF8
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oSX8Wx7B6slfS1dO6FC8LyheZIo.roa
Signing time:             Fri 26 May 2023 10:33:24 +0000
ROA not before:           Fri 26 May 2023 10:33:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        81.31.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Aug 2023 16:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:9e:cc:c3:19:d2:73:20:8c:41:e0:f8:76:2b:3d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: May 26 10:33:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a125fc5b1ec1eac95f4b574ee850bc2f285e648a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:15:0f:56:e3:b7:c7:ef:22:85:23:85:d9:
                    7a:8a:63:9f:c8:1d:52:6b:2e:df:a6:ff:aa:31:bd:
                    a8:bc:bb:04:e0:f8:e0:94:c0:36:42:c3:b0:88:49:
                    2a:0b:c4:88:ab:09:b4:54:0c:5c:ca:7c:af:fa:1d:
                    0e:2b:73:ba:a5:de:20:17:17:dc:8b:2f:95:33:91:
                    90:b1:f1:b3:86:db:33:23:30:76:f4:5e:7e:c9:a8:
                    70:47:6a:bc:0d:7e:21:13:37:ef:ac:39:7d:1f:d8:
                    c9:4e:5f:89:c9:47:33:63:46:8a:7a:6c:86:25:a8:
                    45:4c:f7:1e:6f:f2:67:fa:8c:85:b6:05:9d:31:b6:
                    c9:50:0d:30:e6:ff:38:aa:19:32:41:74:7a:18:e5:
                    9f:b6:a4:af:1c:bf:f8:8a:64:80:b8:05:0a:37:af:
                    cf:c0:5b:d8:88:c6:cb:c3:4a:d3:06:42:b1:22:54:
                    bc:9b:ee:33:f0:d6:77:31:2a:5d:ae:ef:b3:91:55:
                    b6:30:a6:c5:1a:d1:0b:9a:44:de:90:87:ab:45:66:
                    24:fb:6a:cd:fb:44:ec:f5:97:11:83:12:83:02:cd:
                    dc:26:e6:06:7e:78:9d:54:bc:1f:55:11:38:14:5a:
                    a3:25:fa:07:ff:c9:a9:33:cd:1d:f7:ac:ab:f2:6c:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:FC:5B:1E:C1:EA:C9:5F:4B:57:4E:E8:50:BC:2F:28:5E:64:8A
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oSX8Wx7B6slfS1dO6FC8LyheZIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:5b:5f:8e:0e:10:b6:5e:5b:b3:79:70:11:37:c7:72:db:b2:
         95:26:7a:83:23:8b:10:f2:7a:2f:f9:b0:f2:9b:57:c4:67:dc:
         19:ba:17:47:88:fa:1a:cb:70:f6:67:6b:97:c6:60:d4:a7:a9:
         ca:1f:64:3c:be:ad:8b:c8:1d:88:02:42:15:cd:14:20:ea:f5:
         6e:c9:67:1b:f6:b9:14:f3:88:34:ab:7e:dd:3a:a4:76:20:d6:
         b6:a2:7f:3b:c6:02:b2:da:33:9f:99:d1:b7:03:34:1c:db:95:
         2d:b7:f7:c2:02:bf:a2:6e:af:00:c5:06:3e:3d:a1:6e:82:4a:
         2d:a5:70:87:d1:11:f7:e4:15:20:eb:e0:d9:88:2d:ee:8c:5a:
         39:eb:c1:ff:89:18:9c:c3:6f:b8:a0:0d:3d:be:69:0a:c8:ed:
         e7:54:28:34:c6:98:4c:e6:10:a4:6f:30:0b:1d:73:10:8c:13:
         b0:0d:6a:b1:91:d4:86:24:42:69:d9:74:1d:11:c0:0a:e0:62:
         18:f5:4a:a0:c8:c8:19:1a:9f:52:f1:64:28:cd:d9:1b:8d:ef:
         8b:e6:fd:f7:7d:e3:e8:07:3e:25:69:c7:b5:4d:5f:11:01:0f:
         7a:a6:f7:0b:dc:ab:4b:fb:00:c7:f4:6c:f3:9c:44:c1:b1:c0:
         53:92:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org