Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/iiREaVRUPIFjw5Q0MFTSqH1EMKQ.roa
File:                     iiREaVRUPIFjw5Q0MFTSqH1EMKQ.roa (raw, json)
Hash identifier:          idXjeG+Jt64T4oenPKL1GFexA4uzRBB/+93q3yTpOQE=
Subject key identifier:   8A:24:44:69:54:54:3C:81:63:C3:94:34:30:54:D2:A8:7D:44:30:A4
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       01856F42A3DF396A0DA53708A23948A3F287
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/iiREaVRUPIFjw5Q0MFTSqH1EMKQ.roa
Signing time:             Sun 01 Jan 2023 21:35:16 +0000
ROA not before:           Sun 01 Jan 2023 21:35:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57729
IP address blocks:        194.31.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:a3:df:39:6a:0d:a5:37:08:a2:39:48:a3:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Jan  1 21:35:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a24446954543c8163c394343054d2a87d4430a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:32:8e:ae:41:cf:f7:2b:c8:a5:ee:fb:ef:
                    ec:5d:cd:ca:e4:96:96:c9:ce:ca:ac:7b:e5:32:44:
                    64:4f:3a:7a:60:9f:37:c7:9e:b2:d3:0a:29:52:b4:
                    e8:17:42:f7:64:52:e9:66:4e:4c:81:26:70:6a:e4:
                    e0:df:08:b4:78:6a:6b:a8:3a:75:81:41:aa:fc:c3:
                    10:a2:18:43:ed:9a:47:5c:d9:50:3b:53:17:8d:f4:
                    b0:d1:36:8f:ac:4d:71:34:e1:21:31:84:27:f0:3a:
                    d5:87:96:be:5a:d5:5f:26:cd:59:3f:ce:cd:74:7d:
                    00:69:17:b5:f9:ad:e9:e9:ae:43:c1:85:54:1f:fa:
                    18:43:f8:4b:2b:51:3b:d2:81:dc:88:62:da:e9:aa:
                    36:dd:64:e8:e3:9c:d9:76:1b:cf:bb:49:97:8b:29:
                    65:6d:1a:36:84:35:a2:98:be:da:9d:a2:59:4c:93:
                    ec:16:0a:bb:9f:a6:33:fd:f9:0f:b8:38:da:f5:41:
                    cb:fd:8c:08:e9:b3:3b:62:cd:12:52:ab:45:bf:c3:
                    15:c7:a8:4c:f1:29:20:03:f3:12:fe:9b:f4:aa:cb:
                    c4:ae:8e:bc:f6:98:28:6e:bc:95:65:5e:ef:28:85:
                    1b:8f:78:8b:1d:d8:fd:4b:e3:63:03:4a:44:5f:d7:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:44:69:54:54:3C:81:63:C3:94:34:30:54:D2:A8:7D:44:30:A4
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/iiREaVRUPIFjw5Q0MFTSqH1EMKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:55:fb:31:aa:95:e8:e1:db:8d:89:58:40:2f:03:17:e0:cd:
         19:63:da:43:1c:d5:c6:75:f8:87:08:50:ff:ee:ad:ad:9d:ee:
         c2:bd:0a:3a:3d:d3:1a:0d:fc:9c:b0:4c:e8:5c:f0:75:1a:ea:
         b7:11:1a:e6:a9:c3:1f:bf:5a:24:9b:76:88:29:4d:1e:89:8b:
         4b:d8:31:a5:93:56:73:b1:a5:fb:ed:4d:bc:dd:13:10:d4:18:
         09:c6:5e:d1:cc:0a:a1:45:29:57:7a:62:66:c3:dd:8a:0a:39:
         94:57:1b:69:fa:81:7b:53:52:54:e1:28:37:7b:18:c1:bb:b5:
         ab:4c:5c:0c:25:47:eb:1b:3a:42:5f:59:0d:3b:66:21:ac:0a:
         2b:fd:df:89:96:b0:8c:0e:02:4b:94:46:24:3c:73:64:91:93:
         d4:ca:3c:a2:ae:b5:60:a7:53:92:bf:cc:fc:f3:f1:6a:67:44:
         08:ae:d3:d1:07:80:f5:ae:5a:53:09:4a:bc:e7:3f:6d:0d:e9:
         9e:12:0f:67:df:e6:90:8d:63:30:23:c4:98:52:89:df:a2:1d:
         df:18:46:2b:ec:77:29:e1:ee:f7:a7:fa:86:f0:37:12:22:a2:
         04:01:fe:d4:8c:fe:0a:0f:8c:1a:f1:63:56:f3:c7:2c:06:90:
         5e:24:7f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:15 2024 by rpki-client on console-fra.rpki-client.org