Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5Wp9eyN7dO8epJAGfeSQNmsXTQY.roa
File:                     5Wp9eyN7dO8epJAGfeSQNmsXTQY.roa (raw, json)
Hash identifier:          cqSOgmPNbz/dL1k5/P54BdDncLH9nM76RA3kznpCk6w=
Subject key identifier:   E5:6A:7D:7B:23:7B:74:EF:1E:A4:90:06:7D:E4:90:36:6B:17:4D:06
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0193781E46394C70CB83A314B9637A270448
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5Wp9eyN7dO8epJAGfeSQNmsXTQY.roa
Signing time:             Fri 29 Nov 2024 13:31:10 +0000
ROA not before:           Fri 29 Nov 2024 13:31:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        31.56.106.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:78:1e:46:39:4c:70:cb:83:a3:14:b9:63:7a:27:04:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Nov 29 13:31:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e56a7d7b237b74ef1ea490067de490366b174d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f9:45:61:4f:be:cd:4a:35:73:1a:31:26:e0:
                    14:ec:eb:77:c6:32:68:1e:a1:f5:d3:a0:1d:26:f0:
                    0c:98:8a:80:3d:95:a3:78:aa:b8:ff:b5:0d:12:8e:
                    28:ec:f4:63:21:4a:9a:b2:d5:03:10:97:1c:51:b8:
                    97:4f:9d:79:f0:d8:45:22:80:15:c2:97:e8:d8:aa:
                    39:ed:5f:9e:23:22:12:24:47:d8:a3:e4:08:92:e2:
                    b8:3d:88:88:54:1f:da:c2:52:9a:3c:38:29:dd:5f:
                    bf:cf:03:bd:4c:21:a1:9b:ea:91:a8:99:a5:58:e8:
                    b0:7c:d9:c1:68:16:c1:f9:dd:0d:a6:38:c1:ae:f3:
                    85:d5:0c:b4:ca:bb:52:b9:bd:de:ff:fc:0c:e8:0d:
                    1d:46:17:40:14:a6:84:a7:bc:30:50:90:ee:9e:98:
                    31:85:35:78:c7:96:6f:4c:3b:cc:5a:66:bf:82:d3:
                    ff:7c:13:de:0c:15:a8:63:b1:b5:4d:d0:98:dd:fb:
                    28:a8:20:6f:5c:53:9f:47:41:a9:ca:82:d9:d2:b6:
                    49:a5:59:06:80:e6:ed:4e:c2:0d:d0:96:6a:64:c2:
                    08:02:ec:b2:11:34:66:ae:e2:df:10:79:38:53:dd:
                    46:be:61:05:ee:92:ce:3e:57:18:09:1c:ce:76:e7:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:7D:7B:23:7B:74:EF:1E:A4:90:06:7D:E4:90:36:6B:17:4D:06
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5Wp9eyN7dO8epJAGfeSQNmsXTQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:84:94:7f:a8:e3:15:b9:0e:0b:9c:d4:19:77:b4:6d:23:4a:
         e7:c8:14:9d:41:5b:8d:14:5d:69:bd:67:60:cd:67:23:26:b3:
         cc:01:a9:cf:c8:ff:0a:46:6a:52:fe:17:b3:72:c9:1b:35:68:
         4d:9e:66:04:8d:73:2a:92:5a:c1:df:76:94:77:03:0c:9f:6e:
         aa:d2:1a:a8:ba:60:64:7b:dd:49:d8:1f:5d:66:65:fb:4e:fa:
         09:da:0e:24:62:03:57:9e:ae:74:85:c7:89:f9:ea:a7:89:97:
         9f:4d:13:07:8f:93:33:18:1c:05:1f:fe:97:eb:e3:b9:11:23:
         a6:22:7a:42:7e:84:b3:38:34:2b:7c:0c:c8:71:1d:21:dc:0c:
         fc:e5:13:3d:1a:28:23:ad:5a:3f:89:4f:16:9b:42:f2:ac:b7:
         79:6a:1f:06:17:76:b6:67:45:ea:43:4f:da:77:aa:21:25:3a:
         16:2b:b4:38:51:32:72:8c:68:4d:90:08:9a:e6:7b:e6:b1:c1:
         aa:c7:38:3c:8b:2e:fa:95:d2:fd:c9:9d:11:82:9e:7e:20:88:
         99:8a:fb:d6:91:80:20:38:b4:75:ca:79:57:22:a3:5b:82:a3:
         b3:f8:a1:2a:2e:8a:1b:68:3c:15:bd:a6:75:a2:db:cc:b9:de:
         6d:c7:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:04 2025 by rpki-client