Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/VV6qexkxZfFBygRVj40IgpYx8xM.roa
File:                     VV6qexkxZfFBygRVj40IgpYx8xM.roa (raw, json)
Hash identifier:          n2SVTGp3/FoNnucGz/n9zDV4YtV27bif+CjMaZEiWDc=
Subject key identifier:   55:5E:AA:7B:19:31:65:F1:41:CA:04:55:8F:8D:08:82:96:31:F3:13
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       01857002887D9072D522CB274D62B9197444
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/VV6qexkxZfFBygRVj40IgpYx8xM.roa
Signing time:             Mon 02 Jan 2023 01:04:52 +0000
ROA not before:           Mon 02 Jan 2023 01:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60083
IP address blocks:        31.145.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:88:7d:90:72:d5:22:cb:27:4d:62:b9:19:74:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  2 01:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=555eaa7b193165f141ca04558f8d08829631f313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:b3:b3:fd:24:99:b1:bb:3e:63:51:c9:7c:
                    ef:6e:c4:d0:30:df:62:cb:94:d8:8b:c3:b9:7b:d9:
                    39:1d:03:8a:2c:d4:6e:65:62:47:20:06:e1:9d:98:
                    78:3a:3e:66:6e:e3:2d:8d:1e:d6:87:6c:38:05:75:
                    b7:26:74:68:40:27:52:d1:d6:68:36:ea:64:43:7f:
                    0d:05:c9:a2:01:6f:ac:de:87:97:74:fa:3d:f4:7f:
                    2c:c4:fd:eb:a9:67:88:e6:c4:cc:26:de:37:4e:08:
                    d3:88:04:a7:85:91:bc:fd:78:10:0c:70:a4:53:7b:
                    ce:ef:3d:50:5f:fe:b0:e5:41:10:90:0c:f4:e1:8e:
                    39:fb:03:87:dd:ad:ba:77:ec:65:f0:6c:c0:4c:80:
                    5f:78:40:87:76:a0:ac:a4:53:e0:c8:06:f7:5e:61:
                    5e:0e:47:9a:b3:f0:92:32:a8:32:5f:03:68:ef:1e:
                    a0:ea:2c:83:f6:60:19:28:82:01:e7:1d:c1:cc:17:
                    21:f1:cb:8f:ef:b9:7b:ef:d2:81:12:19:cb:5e:fb:
                    64:13:21:49:09:14:21:38:38:ee:86:e3:ee:3e:a2:
                    c0:9a:55:7a:47:4f:17:7f:c4:c5:da:a6:64:2e:18:
                    cd:ea:f7:ec:a1:9b:e0:31:ee:da:19:16:ea:bd:b7:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:AA:7B:19:31:65:F1:41:CA:04:55:8F:8D:08:82:96:31:F3:13
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/VV6qexkxZfFBygRVj40IgpYx8xM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.145.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:7c:fc:90:e1:3c:56:9e:98:45:99:dc:4a:16:5e:b6:65:
         a7:b9:21:98:b2:b9:22:f3:87:9a:64:7f:3e:04:87:6f:f8:33:
         28:e3:d0:7b:f9:a9:56:be:c6:98:03:75:63:60:11:2e:93:ac:
         46:10:fa:9e:0c:f5:67:70:20:d0:bb:0e:b9:5b:1d:0a:60:d6:
         d8:6d:5d:cf:40:6f:cb:f3:bf:40:55:0c:38:65:2d:6b:a7:91:
         f9:10:4a:85:a3:2b:25:ec:dd:e6:9e:2f:92:28:8c:e9:88:b8:
         4b:7a:c2:da:fa:82:4b:23:56:d7:3f:68:4e:cf:00:9c:d2:ff:
         86:54:90:00:74:33:90:bb:12:06:a7:73:0f:0f:7e:8e:93:16:
         48:2f:b2:16:ed:6a:24:90:5b:b3:3a:9d:a5:aa:0d:fa:2d:21:
         d4:43:c5:d1:46:e9:d6:64:1f:74:2f:cb:30:54:8f:20:76:35:
         0f:d7:16:f4:5e:0a:42:f9:ac:12:bf:56:0b:1a:dd:33:32:e7:
         91:8c:3a:55:8d:59:a4:92:d4:97:13:20:72:e8:a5:46:6d:e0:
         fb:a2:74:5d:43:a8:4d:14:b0:2b:6e:fa:60:34:f1:24:17:b1:
         e3:97:7a:a4:f4:43:d0:9e:32:34:85:0d:f6:ec:79:18:54:13:
         9b:9d:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org