Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/w5lcDDDFS6EuArnPJCAefUiTEaQ.roa
File:                     w5lcDDDFS6EuArnPJCAefUiTEaQ.roa (raw, json)
Hash identifier:          147Iaue8DQk7syyuvLsEF9iMwSblZ7fdUfuiEKaxRk4=
Subject key identifier:   C3:99:5C:0C:30:C5:4B:A1:2E:02:B9:CF:24:20:1E:7D:48:93:11:A4
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018E9D6C9DF254729CCD77A287DB9242E817
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/w5lcDDDFS6EuArnPJCAefUiTEaQ.roa
Signing time:             Tue 02 Apr 2024 06:08:44 +0000
ROA not before:           Tue 02 Apr 2024 06:08:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215211
IP address blocks:        31.57.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sat 13 Apr 2024 04:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:9d:6c:9d:f2:54:72:9c:cd:77:a2:87:db:92:42:e8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Apr  2 06:08:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c3995c0c30c54ba12e02b9cf24201e7d489311a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:37:38:3c:62:9d:f4:4d:e1:45:5b:20:91:
                    16:56:29:37:3d:fe:cf:44:2c:09:f5:79:19:11:93:
                    1b:17:cd:7e:d4:05:63:07:c1:01:44:c2:a6:59:d2:
                    ed:ca:83:e9:ed:e2:f9:7d:37:80:00:0e:9b:72:c8:
                    0c:1e:73:82:90:3f:b1:c6:b9:a7:45:b5:8e:8f:a0:
                    71:30:f7:61:1e:c1:41:64:46:26:2c:20:b0:63:a5:
                    8a:ac:4f:48:cd:80:66:61:1d:cd:c1:e0:a8:fd:77:
                    05:9d:53:ac:bf:5f:dc:f4:61:d3:18:53:ed:bb:0a:
                    ab:26:2f:bb:6b:be:a2:f9:93:07:ac:0d:e8:94:da:
                    30:c0:18:f4:bc:f1:5c:18:2f:a8:34:f7:dd:48:68:
                    0b:91:fc:c8:bb:48:c2:73:1a:3c:50:91:c1:29:d3:
                    16:0c:e1:d7:16:ce:24:90:7a:5b:1d:78:c5:22:24:
                    dc:aa:5a:bd:2d:27:c3:b6:80:2c:c8:6c:d9:51:85:
                    31:23:d7:9a:55:cb:3d:60:05:3f:60:01:d2:fe:19:
                    f1:21:32:f2:29:87:aa:30:a3:f7:23:c5:d9:13:a7:
                    ab:eb:f2:a8:14:83:37:b1:53:a9:3b:e6:c2:1d:63:
                    49:03:f6:64:c4:22:97:e8:2b:4c:bf:cb:aa:7e:53:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:5C:0C:30:C5:4B:A1:2E:02:B9:CF:24:20:1E:7D:48:93:11:A4
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/w5lcDDDFS6EuArnPJCAefUiTEaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:c1:f3:f3:c3:99:c8:1b:be:87:9a:a5:8f:2d:b4:d7:32:
         6c:bf:20:30:50:a6:a8:a9:b4:ee:0d:ec:bc:36:78:27:8f:60:
         8d:29:3f:8a:51:32:62:26:98:f6:bd:c8:43:4c:ad:1d:bc:d9:
         9f:02:06:e2:8a:20:38:16:6b:b5:e6:83:62:63:ac:11:d3:90:
         89:75:02:25:b5:a7:58:75:0c:71:12:b4:bd:ea:70:3a:40:b8:
         65:a5:8a:f6:e1:c8:9e:cb:d0:ce:34:c9:6f:89:04:2a:d9:c1:
         09:f3:fd:e0:58:66:6f:ac:86:57:a3:a0:b1:9f:d3:06:12:38:
         bb:a9:c3:22:50:69:6b:51:12:41:00:af:f5:52:ec:5a:b3:75:
         36:4d:4b:21:b1:98:19:b4:66:e8:0b:cf:1e:c2:80:c8:d8:96:
         78:48:9b:0a:f1:a3:21:2a:9e:fd:aa:53:d0:35:be:98:5d:d7:
         6e:58:2b:c4:84:1c:86:66:35:3b:87:f2:47:97:5b:41:e8:05:
         d2:f5:52:df:c7:67:c4:b3:6b:fe:0b:b5:36:ae:ff:34:ec:80:
         5e:6b:75:c3:be:06:20:fe:9f:f3:7b:d2:70:29:c3:63:f9:c9:
         0d:ad:c6:7a:88:2e:ee:96:02:39:af:b0:0d:74:af:00:ab:10:
         14:eb:00:57
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAY6dbJ3yVHKczXeih9uSQugXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwNDAyMDYwODQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzk5NWMwYzMwYzU0YmExMmUwMmI5Y2YyNDIwMWU3ZDQ4OTMxMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWA3ODxinfRN4UVbIJEWVik3Pf7P
RCwJ9XkZEZMbF81+1AVjB8EBRMKmWdLtyoPp7eL5fTeAAA6bcsgMHnOCkD+xxrmn
RbWOj6BxMPdhHsFBZEYmLCCwY6WKrE9IzYBmYR3NweCo/XcFnVOsv1/c9GHTGFPt
uwqrJi+7a76i+ZMHrA3olNowwBj0vPFcGC+oNPfdSGgLkfzIu0jCcxo8UJHBKdMW
DOHXFs4kkHpbHXjFIiTcqlq9LSfDtoAsyGzZUYUxI9eaVcs9YAU/YAHS/hnxITLy
KYeqMKP3I8XZE6er6/KoFIM3sVOpO+bCHWNJA/ZkxCKX6CtMv8uqflMvawIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMOZXAwwxUuhLgK5zyQgHn1IkxGkMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvdzVsY0REREZTNkV1QXJuUEpDQWVmVWlURWFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAHzkwDQYJ
KoZIhvcNAQELBQADggEBACxhwfPzw5nIG76HmqWPLbTXMmy/IDBQpqiptO4N7Lw2
eCePYI0pP4pRMmImmPa9yENMrR282Z8CBuKKIDgWa7Xmg2JjrBHTkIl1AiW1p1h1
DHEStL3qcDpAuGWlivbhyJ7L0M40yW+JBCrZwQnz/eBYZm+shlejoLGf0wYSOLup
wyJQaWtREkEAr/VS7FqzdTZNSyGxmBm0ZugLzx7CgMjYlnhImwrxoyEqnv2qU9A1
vphd125YK8SEHIZmNTuH8keXW0HoBdL1Ut/HZ8Sza/4LtTau/zTsgF5rdcO+BiD+
n/N70nApw2P5yQ2txnqILu6WAjmvsA10rwCrEBTrAFc=
-----END CERTIFICATE-----
Generated at Sat Apr 13 06:02:22 2024 by rpki-client on console-fra.rpki-client.org