Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/n63BdkIcSRqIQvjsQRqZeiOtv_Y.roa
File:                     n63BdkIcSRqIQvjsQRqZeiOtv_Y.roa (raw, json)
Hash identifier:          NrVzZ36sUMhhM5XiEpvotlIfxK2Af90WwfjJzswTy8E=
Subject key identifier:   9F:AD:C1:76:42:1C:49:1A:88:42:F8:EC:41:1A:99:7A:23:AD:BF:F6
Certificate issuer:       /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial:       018EA8122476DD3A8B3E39DA98A30283F75B
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/n63BdkIcSRqIQvjsQRqZeiOtv_Y.roa
Signing time:             Thu 04 Apr 2024 07:45:44 +0000
ROA not before:           Thu 04 Apr 2024 07:45:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43260
IP address blocks:        31.193.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 11:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a8:12:24:76:dd:3a:8b:3e:39:da:98:a3:02:83:f7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
        Validity
            Not Before: Apr  4 07:45:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9fadc176421c491a8842f8ec411a997a23adbff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:4a:49:c1:c4:10:53:b2:62:37:bf:59:98:
                    ec:6b:08:68:cf:5d:ee:79:e7:cc:5b:85:6f:68:2e:
                    38:39:d7:02:25:62:96:3f:ce:6c:ff:9b:61:f5:ef:
                    24:bb:9e:e9:13:72:88:a8:b3:12:b0:92:ac:46:35:
                    81:3c:83:f4:e3:70:33:39:e1:65:b9:76:ec:3c:eb:
                    4e:8b:65:47:51:a9:28:f2:3a:f2:57:41:2d:b0:c8:
                    a8:4b:ab:05:ca:a5:68:e6:c7:65:39:66:11:5c:3d:
                    c4:b7:f7:2a:b1:5f:a7:45:a0:d6:88:76:54:c2:68:
                    fc:e1:18:f1:95:f1:6e:c2:ac:89:61:26:07:f0:73:
                    55:71:2c:89:cb:b5:d4:f9:94:d7:f6:fc:dc:17:c4:
                    4f:a8:5b:4f:1a:15:93:7f:f0:c0:2e:bb:c0:a2:86:
                    4d:4a:12:b4:f1:ac:92:02:09:80:f9:f5:4f:46:7e:
                    9e:77:71:4d:64:1e:45:be:a0:af:3c:c9:51:ef:ba:
                    b0:76:57:70:17:51:73:9f:da:b3:8f:15:8e:ad:c6:
                    78:58:fc:39:44:6b:3e:be:bd:b3:06:69:05:e3:3d:
                    9c:1e:60:40:16:ee:b8:4a:a4:2a:05:2c:40:3a:55:
                    94:d0:14:21:fc:2a:6d:f1:25:53:db:e4:ed:33:6c:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AD:C1:76:42:1C:49:1A:88:42:F8:EC:41:1A:99:7A:23:AD:BF:F6
            X509v3 Authority Key Identifier:
                keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/n63BdkIcSRqIQvjsQRqZeiOtv_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:23:84:34:9a:53:2d:5e:b3:d1:40:63:a8:2c:c5:74:ba:
         df:f8:09:64:31:98:51:e8:38:30:a9:65:2c:fc:e6:48:7a:4d:
         b3:29:db:37:96:8d:e5:78:6a:34:c4:3b:6a:f3:c5:04:49:8c:
         bf:bf:50:73:c7:7d:bf:81:47:2d:c9:a9:a1:e4:14:1f:fb:a7:
         82:30:e3:27:ba:22:2b:26:5d:2f:eb:39:69:10:25:8b:96:30:
         34:6c:6e:b2:04:6b:3f:ef:55:cc:4f:f1:55:47:44:33:0a:e1:
         1f:a5:7f:d5:6c:a1:9f:33:bc:97:75:e5:4b:54:11:7c:34:22:
         9d:14:b8:f4:6a:7e:85:88:45:54:85:f5:f7:86:fb:0a:cd:a9:
         c8:d5:29:dd:21:0f:63:98:04:77:33:e8:a8:a1:81:fa:16:fb:
         d4:82:a5:fc:45:c8:5f:84:41:c8:a1:97:2c:58:e2:6b:ab:77:
         3b:a4:b8:51:90:27:7c:9e:bb:e8:7f:a9:9e:1f:fe:0b:b4:93:
         b8:88:9c:2e:8e:0f:98:01:11:98:8d:d4:de:c0:be:52:50:44:
         69:51:68:02:60:4d:5d:e1:d7:1d:f6:e8:a6:0c:a9:12:4c:ce:
         45:58:d7:37:ab:8c:e4:c2:c8:2e:43:5a:17:49:f0:51:82:95:
         60:22:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org