Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JVGEBjTVgG_FD2MgW9MS3FVMk4A.roa
File:                     JVGEBjTVgG_FD2MgW9MS3FVMk4A.roa (raw, json)
Hash identifier:          U9oGH4PAJw7aWKGQfqiKgK1yIX95RmI2qVnz7EdPLe0=
Subject key identifier:   25:51:84:06:34:D5:80:6F:C5:0F:63:20:5B:D3:12:DC:55:4C:93:80
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019144E6D7680FF2EF191AD06D53020BC780
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JVGEBjTVgG_FD2MgW9MS3FVMk4A.roa
Signing time:             Mon 12 Aug 2024 04:44:24 +0000
ROA not before:           Mon 12 Aug 2024 04:44:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64289
IP address blocks:        31.14.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 09:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:44:e6:d7:68:0f:f2:ef:19:1a:d0:6d:53:02:0b:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Aug 12 04:44:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2551840634d5806fc50f63205bd312dc554c9380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3b:30:5d:7b:03:3d:49:ea:62:a3:1a:bd:ee:
                    f3:8a:d4:1e:9a:77:62:bb:ae:2c:98:7b:6f:cf:a1:
                    ec:36:ce:67:88:d9:ad:25:22:d8:2f:cb:e6:e3:ae:
                    1d:2b:6c:71:a1:aa:74:be:58:4d:ad:e5:43:c6:44:
                    4f:b0:a3:43:72:9c:bc:0b:29:e6:f5:08:a4:dc:64:
                    fe:1d:05:89:b3:64:f8:26:fb:80:b4:91:09:03:d5:
                    7b:e0:57:e4:5c:3b:84:46:2b:ef:a7:ea:9d:b0:1d:
                    7d:de:c3:c1:da:f8:d8:40:d5:50:dc:a9:fa:5d:4d:
                    3f:6a:e1:42:15:1d:f3:dc:f1:fb:cd:81:e0:73:18:
                    1f:65:77:f4:0b:0e:d1:92:0a:37:fa:1b:be:a0:28:
                    63:33:f0:32:8f:f6:51:44:2f:6c:6e:1f:ee:f4:82:
                    72:f1:95:82:52:5f:dc:73:7f:79:b3:16:fd:4b:a0:
                    74:f6:75:5d:a8:cd:09:63:16:e3:a8:3b:24:6b:b3:
                    ec:9f:34:db:36:df:71:8f:91:79:28:2d:ad:52:6d:
                    72:d5:63:3b:0a:b9:fd:ab:a3:ab:b2:b7:42:f8:d4:
                    fe:85:a1:67:ed:33:3c:78:2e:56:ab:6c:be:40:9f:
                    2b:5d:77:e3:12:e6:c0:88:b3:e5:0d:b7:54:34:1f:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:84:06:34:D5:80:6F:C5:0F:63:20:5B:D3:12:DC:55:4C:93:80
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JVGEBjTVgG_FD2MgW9MS3FVMk4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:82:ef:d1:11:9c:16:14:3e:16:e9:49:c1:6a:89:4f:51:
         a0:21:b7:63:2f:0c:7b:7c:b7:ea:36:5b:42:5e:e3:dc:fc:55:
         2e:87:64:65:50:49:b7:6f:08:e3:d0:c9:23:66:f1:9e:49:1e:
         fa:62:3e:f5:33:3c:88:a4:95:48:0a:46:c4:c0:a8:16:3f:1e:
         c2:a5:10:6b:53:d6:06:19:35:8e:2e:88:0b:79:b7:61:46:c5:
         e0:5a:28:0d:0c:46:3f:e4:ae:f0:44:22:72:0c:9e:31:59:80:
         6c:41:68:34:89:07:c8:60:44:74:04:16:9d:c0:b1:79:e9:ea:
         49:14:a8:40:c4:c0:cd:79:c7:62:ca:08:cb:8b:c3:3d:41:69:
         a5:62:48:1c:8f:9c:af:fa:94:22:83:78:14:64:98:a8:b9:c6:
         dd:c9:f1:48:94:6a:39:8b:19:4e:b9:6b:2f:62:61:74:09:15:
         c3:36:35:02:18:5e:f2:67:c1:84:6c:28:7c:0a:3c:98:5d:d2:
         2a:89:9f:cb:44:42:a3:98:5c:a7:2b:b7:c9:d0:69:76:05:30:
         3f:fc:95:99:28:20:a5:29:5e:7e:09:02:91:3d:fc:4b:77:00:
         16:e9:38:4c:a7:99:a3:e2:66:97:17:69:b2:20:05:32:5f:72:
         cf:a4:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 13:34:36 2024 by rpki-client on console-ams.rpki-client.org