Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07VtPDAOMjEANIVJX85U_-1ZwVE.roa
File:                     07VtPDAOMjEANIVJX85U_-1ZwVE.roa (raw, json)
Hash identifier:          Ukxk2RGJ1LAoPt4iidzH+d5gOaSSuHKH2hzDMyYSW0I=
Subject key identifier:   D3:B5:6D:3C:30:0E:32:31:00:34:85:49:5F:CE:54:FF:ED:59:C1:51
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019059D60CF6071011A08A88829FDFF83D9B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07VtPDAOMjEANIVJX85U_-1ZwVE.roa
Signing time:             Thu 27 Jun 2024 13:15:18 +0000
ROA not before:           Thu 27 Jun 2024 13:15:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 16:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:59:d6:0c:f6:07:10:11:a0:8a:88:82:9f:df:f8:3d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jun 27 13:15:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d3b56d3c300e3231003485495fce54ffed59c151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:8f:13:3b:24:e5:69:df:5a:6c:75:c3:34:
                    0c:51:f6:5a:ac:f2:ed:98:c8:24:7f:42:d8:c6:58:
                    a8:18:2c:b1:c4:f3:40:e0:f9:45:c8:80:1e:22:08:
                    13:ad:dd:73:db:e5:c9:a0:80:31:cf:f9:ed:7c:c6:
                    db:90:ee:11:ff:13:79:c9:4b:a1:8e:3a:f2:22:a1:
                    90:bd:6e:03:26:95:a1:c5:be:98:93:d0:72:8a:03:
                    b3:a4:02:d0:ac:fb:bd:9f:2d:c6:54:03:35:83:75:
                    c7:12:89:e7:5f:42:b1:43:ab:a7:66:06:3e:c9:c6:
                    0e:74:3e:a6:15:e0:bc:48:ef:2f:cd:7b:eb:07:ef:
                    32:5a:15:1e:66:e2:11:f5:f6:ab:9a:17:17:64:fb:
                    c8:ca:4a:8a:b2:5e:6c:77:02:2a:12:f1:d7:5b:12:
                    f1:0e:01:07:4f:52:a9:f7:6f:64:aa:d4:ba:46:89:
                    7b:38:a5:58:1b:17:41:d0:f3:07:92:fa:96:df:d9:
                    d8:a3:eb:3a:03:cd:aa:e6:0b:03:5b:82:31:ad:19:
                    49:8d:4b:ad:61:22:5f:b5:c5:5b:fb:60:c1:2b:fe:
                    7c:cf:45:c9:03:95:c4:4a:c1:30:d3:67:5d:ef:ab:
                    44:a8:1b:74:eb:ab:be:65:18:46:7a:62:43:1a:fe:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B5:6D:3C:30:0E:32:31:00:34:85:49:5F:CE:54:FF:ED:59:C1:51
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/07VtPDAOMjEANIVJX85U_-1ZwVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:54:6c:68:5c:62:5d:30:62:4f:e9:95:74:05:3a:f0:30:d4:
         b2:e2:0a:35:48:a8:b1:aa:d2:7a:5b:a6:6c:91:ba:20:8c:e4:
         d4:bd:dc:77:ef:c9:d9:ee:e6:2b:3b:12:e0:71:60:95:99:5e:
         c7:50:75:56:18:57:d1:b4:e7:6a:91:41:91:f4:e7:66:46:7e:
         35:b9:04:ce:fb:86:7a:64:66:08:b7:87:45:11:cb:a7:8c:e1:
         23:34:0b:b1:b3:ff:0c:d7:79:23:12:5e:d8:c3:a7:8c:89:b4:
         ed:02:b2:db:65:85:9e:08:90:db:a3:34:8c:97:ef:c5:f0:c3:
         3a:e0:bb:fc:7f:82:e0:b5:ac:b2:fd:97:01:b6:5c:e4:6d:6d:
         50:62:55:2c:26:17:8f:e6:bf:ad:b7:67:84:b2:6e:ad:bf:6d:
         15:fd:84:b2:38:c1:f9:7b:25:ef:32:fc:02:68:2c:84:7a:7a:
         2c:f0:18:55:88:9d:69:6c:ae:36:3f:ce:78:42:44:f3:df:e4:
         f5:1a:18:38:95:7d:5c:af:2a:ca:c6:cd:6b:e8:3f:1e:8b:e5:
         d9:db:7e:20:0d:6e:77:e4:92:2e:47:ee:fa:fe:43:d4:a5:11:
         86:09:3d:5f:a3:2b:23:9a:b4:f4:33:1b:92:ed:7d:ae:16:15:
         8e:7e:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 19:44:07 2024 by rpki-client on console-fra.rpki-client.org