Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/dwV_GEa4YZ24zRda4hqgeVsX-KM.roa
File:                     dwV_GEa4YZ24zRda4hqgeVsX-KM.roa (raw, json)
Hash identifier:          rGrsUx1X3Las7MLIL9fb6toryG7oopoG8pbBZHMOZ7o=
Subject key identifier:   77:05:7F:18:46:B8:61:9D:B8:CD:17:5A:E2:1A:A0:79:5B:17:F8:A3
Certificate issuer:       /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial:       018570D4F818F292BF45362115A294006A88
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/dwV_GEa4YZ24zRda4hqgeVsX-KM.roa
Signing time:             Mon 02 Jan 2023 04:54:43 +0000
ROA not before:           Mon 02 Jan 2023 04:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        31.134.1.0/24 maxlen: 24
                          31.134.0.0/24 maxlen: 24
                          31.134.4.0/24 maxlen: 24
                          31.134.3.0/24 maxlen: 24
                          31.134.2.0/24 maxlen: 24
                          31.134.8.0/24 maxlen: 24
                          31.134.7.0/24 maxlen: 24
                          31.134.6.0/24 maxlen: 24
                          31.134.5.0/24 maxlen: 24
                          31.134.11.0/24 maxlen: 24
                          31.134.10.0/24 maxlen: 24
                          31.134.9.0/24 maxlen: 24
                          31.134.15.0/24 maxlen: 24
                          31.134.14.0/24 maxlen: 24
                          31.134.13.0/24 maxlen: 24
                          31.134.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d4:f8:18:f2:92:bf:45:36:21:15:a2:94:00:6a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
        Validity
            Not Before: Jan  2 04:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77057f1846b8619db8cd175ae21aa0795b17f8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:5a:7f:d8:e0:7e:33:89:45:72:e4:7b:d1:
                    d1:28:62:09:8f:bc:00:4d:ea:de:37:50:51:bb:6e:
                    4f:55:96:b5:ef:9e:41:9f:39:59:f6:14:18:46:b0:
                    a2:4e:bf:3e:52:25:ce:aa:87:e7:c2:84:19:22:ef:
                    d1:88:c7:d3:9b:65:91:d5:b3:17:d0:d5:95:4b:7d:
                    28:f8:8c:52:2a:27:0b:ec:a4:35:75:f1:30:41:97:
                    61:63:a4:b6:a3:69:38:57:ae:36:d3:c7:6a:71:a5:
                    f2:78:71:f8:e6:ab:7f:d9:e5:33:20:53:36:42:c1:
                    6a:be:69:91:08:65:0d:d5:64:62:4a:1a:91:d4:0f:
                    ee:6e:47:8e:32:ca:63:70:2e:e6:86:c4:2d:98:ea:
                    c7:37:f2:23:e5:67:70:33:e0:80:db:39:c2:ef:d3:
                    09:ff:8a:b2:4a:d6:c3:f3:f0:19:e2:23:ff:f6:32:
                    0d:c8:a8:a6:f9:f1:f6:d2:bd:0d:2e:ae:6c:f2:39:
                    47:38:c7:d0:5a:1e:72:06:0b:7f:87:53:81:fe:37:
                    ea:e2:92:5f:27:1d:6e:42:e6:23:82:b0:a2:89:ae:
                    91:07:24:95:ef:e9:af:38:15:e8:db:8a:55:a9:34:
                    ea:32:f2:4a:cf:2a:65:d3:85:3d:4c:78:61:78:6f:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:05:7F:18:46:B8:61:9D:B8:CD:17:5A:E2:1A:A0:79:5B:17:F8:A3
            X509v3 Authority Key Identifier:
                keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/dwV_GEa4YZ24zRda4hqgeVsX-KM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.134.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:f9:39:6d:f7:79:2b:80:3c:a6:f1:d1:8a:dd:70:df:f3:4e:
         34:5c:7c:1e:08:e1:19:b5:3c:a7:f3:0f:a1:d2:99:fa:41:bf:
         ea:d3:58:1c:bc:8a:d0:36:cf:54:7b:be:78:e0:c9:b5:3b:39:
         ce:cf:73:2f:a0:23:57:c9:ab:53:8a:6e:e2:3d:5c:ad:4f:52:
         53:95:49:42:6a:2a:88:25:d4:6a:23:bb:f7:73:a1:fd:80:5b:
         6d:1b:11:04:91:b5:32:8c:2e:93:21:1a:7a:c9:88:80:52:ae:
         72:41:b6:c9:9d:38:77:ef:a0:a7:9c:73:1e:af:f3:f9:9a:7a:
         fb:2d:93:e7:1f:62:81:e1:cd:06:67:ab:4f:72:cb:63:04:73:
         a3:fd:cc:58:2e:b5:83:bd:9d:a7:df:07:3e:18:af:42:66:60:
         af:d1:f9:61:3a:b2:d5:bd:de:0b:39:39:b9:19:31:68:86:ea:
         ce:85:52:51:41:8c:d6:81:7f:28:9b:0d:1d:0d:39:0b:9e:bf:
         3c:ef:17:9c:54:a8:5a:db:20:ad:f0:28:73:44:80:0d:56:a9:
         14:d0:47:b9:55:b0:c0:92:aa:21:bb:0d:6a:dc:ed:76:69:de:
         11:30:05:98:aa:a1:cb:87:04:9d:a5:20:2d:be:b6:3e:5f:bb:
         f1:44:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:16 2024 by rpki-client on console-fra.rpki-client.org