Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/UWu55LuIkJWRCVPRGT-GtAk-6QY.roa
File:                     UWu55LuIkJWRCVPRGT-GtAk-6QY.roa (raw, json)
Hash identifier:          8XgKspq7Xt5/Qm4W+wh8hPhDuYBf+0NXCb9vUhgQFBI=
Subject key identifier:   51:6B:B9:E4:BB:88:90:95:91:09:53:D1:19:3F:86:B4:09:3E:E9:06
Certificate issuer:       /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial:       0187E5FCF1D5E49C44CFCACF4DA3212912F6
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/UWu55LuIkJWRCVPRGT-GtAk-6QY.roa
Signing time:             Thu 04 May 2023 08:59:31 +0000
ROA not before:           Thu 04 May 2023 08:59:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56749
IP address blocks:        31.130.183.0/24 maxlen: 24
                          31.130.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e5:fc:f1:d5:e4:9c:44:cf:ca:cf:4d:a3:21:29:12:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
        Validity
            Not Before: May  4 08:59:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=516bb9e4bb889095910953d1193f86b4093ee906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:54:36:1f:b5:c1:a6:9d:08:f6:c6:a3:f6:
                    d6:fa:9f:3e:3e:88:7a:09:5c:ca:47:e0:d9:ba:25:
                    11:28:9e:2d:ee:a9:df:a0:89:6f:b7:6a:f9:3c:03:
                    2f:60:00:40:25:4b:f7:95:65:84:cc:63:9d:81:13:
                    36:ff:cd:6e:19:85:a7:03:a7:0a:68:6a:dc:5e:3e:
                    75:eb:55:01:3f:a5:0e:40:46:4c:19:55:50:a3:81:
                    7c:13:44:60:8e:6f:3c:74:c0:f6:0f:72:9b:23:ef:
                    be:21:6f:f9:fa:b6:8a:f7:21:c4:54:51:c8:f0:10:
                    b6:f9:fc:bd:94:43:6c:55:ba:cf:67:10:69:ef:52:
                    6b:6b:d8:b8:2f:c6:f9:7f:57:e4:76:17:f8:84:5f:
                    84:b1:93:ff:4e:0a:ca:61:88:d1:4b:cc:b2:b0:3a:
                    8d:fa:67:6b:21:08:ee:ff:7a:12:d2:d0:58:7a:e8:
                    94:f0:fd:ec:f3:1d:91:1b:f5:34:7f:7c:a1:7f:5f:
                    5c:13:9c:47:ff:0e:8a:0a:7e:43:e3:3d:fd:5a:b4:
                    ad:54:a3:ec:23:e8:6f:19:5d:4b:f4:44:12:4a:b4:
                    ab:a1:f1:42:8a:3b:9f:fc:ed:86:a2:82:b3:a8:00:
                    d6:d6:a5:04:53:a1:a6:d7:a5:64:ca:23:70:11:b3:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6B:B9:E4:BB:88:90:95:91:09:53:D1:19:3F:86:B4:09:3E:E9:06
            X509v3 Authority Key Identifier:
                keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/UWu55LuIkJWRCVPRGT-GtAk-6QY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.130.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:15:5b:2c:0a:6a:cd:42:16:12:61:4b:83:af:68:3f:5f:41:
         71:cd:67:55:ad:69:51:7a:63:74:a9:31:a0:61:df:5c:fa:a4:
         bd:c3:09:32:33:7e:b2:74:83:41:a3:87:06:d1:8f:e5:70:eb:
         1e:8c:21:a6:4b:cb:8e:8c:05:40:0f:c7:a0:1b:8f:8d:8d:58:
         40:41:ec:91:38:83:11:87:61:7e:25:ed:a7:91:2e:33:0a:8c:
         2a:9a:60:7f:2e:6a:50:08:dc:61:bd:b4:5f:2f:d1:eb:3a:79:
         17:93:a8:b4:c3:b6:6e:bb:e9:f3:ca:f3:40:f4:90:2b:4a:e5:
         85:17:e7:1a:0b:55:65:3c:13:7b:51:5f:34:96:16:3b:de:ce:
         1e:29:5b:5b:d9:f6:d1:11:63:3e:95:90:37:0b:14:47:45:1c:
         db:a4:fb:91:e4:3d:4e:97:18:b4:f6:a7:3c:19:f4:89:a1:71:
         00:e7:6f:70:74:54:87:30:20:c9:10:4d:07:c6:47:30:c0:7d:
         4c:4e:10:f1:fa:3c:93:e9:be:f1:6e:22:af:cb:24:c6:06:e2:
         07:b8:5c:03:d6:69:fe:a5:7c:f7:ef:a8:cc:31:d0:06:0e:ba:
         4b:34:a7:c3:a8:e1:88:cd:3b:02:85:33:5a:eb:32:b4:b9:c0:
         c0:0c:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org