Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/72kOyaL9QHPPttb9gpNwgRnJOpM.roa
File:                     72kOyaL9QHPPttb9gpNwgRnJOpM.roa (raw, json)
Hash identifier:          oS4q35iSHi2eSwBUQEHvIpkB+Dx4T7AVTX8FYhlmhtY=
Subject key identifier:   EF:69:0E:C9:A2:FD:40:73:CF:B6:D6:FD:82:93:70:81:19:C9:3A:93
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0191BB8D431157830AFB7418B3B2BF6378A9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/72kOyaL9QHPPttb9gpNwgRnJOpM.roa
Signing time:             Wed 04 Sep 2024 05:41:22 +0000
ROA not before:           Wed 04 Sep 2024 05:41:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        31.56.4.0/23 maxlen: 23
                          31.56.35.0/24 maxlen: 24
                          31.56.39.0/24 maxlen: 24
                          31.56.45.0/24 maxlen: 24
                          31.56.65.0/24 maxlen: 24
                          31.56.89.0/24 maxlen: 24
                          31.56.112.0/21 maxlen: 24
                          31.56.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 20:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:bb:8d:43:11:57:83:0a:fb:74:18:b3:b2:bf:63:78:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Sep  4 05:41:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef690ec9a2fd4073cfb6d6fd8293708119c93a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:6f:3f:9a:0d:72:e8:58:34:dd:ba:e7:d0:
                    04:67:89:69:6f:92:d4:aa:f9:74:20:fd:3c:73:b8:
                    33:83:34:94:64:79:eb:dc:ad:d4:92:4b:d1:36:05:
                    1d:5f:95:d2:b3:21:7f:80:6d:c9:fe:81:e6:d2:31:
                    0e:a1:32:72:c8:65:c9:92:21:cc:4a:96:e6:de:0a:
                    61:15:f9:70:cf:76:14:07:9e:41:3a:24:fa:65:04:
                    77:99:80:de:8c:ba:6d:7e:1f:84:cd:99:19:7d:ff:
                    ab:ce:f3:d9:11:9b:1d:b2:9d:1b:36:7d:35:5e:8f:
                    e1:d7:ef:18:c8:e0:fb:81:e9:64:89:59:f4:4c:c2:
                    01:66:51:47:33:8b:46:91:de:37:ef:f3:9a:be:09:
                    c8:c3:16:b1:7f:5d:33:98:af:ff:b3:a4:59:ad:2e:
                    85:66:a9:5c:0b:c6:79:b3:10:54:f8:39:f3:d0:61:
                    da:97:2d:0e:2a:c2:b4:c8:82:3a:bf:6f:a1:f7:23:
                    98:82:7e:55:71:b8:3b:70:b7:2a:eb:e4:38:e6:18:
                    80:af:36:90:99:8e:6c:45:9b:d6:4d:7e:ca:09:43:
                    93:3a:ab:16:c6:0f:f8:fb:3b:4f:57:56:2a:78:9b:
                    7b:a6:2c:ad:3b:95:52:a4:31:c7:9b:70:e4:64:df:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:69:0E:C9:A2:FD:40:73:CF:B6:D6:FD:82:93:70:81:19:C9:3A:93
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/72kOyaL9QHPPttb9gpNwgRnJOpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.4.0/23
                  31.56.35.0/24
                  31.56.39.0/24
                  31.56.45.0/24
                  31.56.65.0/24
                  31.56.89.0/24
                  31.56.112.0/21
                  31.56.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:f0:a3:99:ef:ef:ed:11:71:3e:b8:f5:c3:a7:68:1f:9a:
         5c:54:67:53:7b:a6:51:c3:80:db:03:4e:34:97:f0:21:d1:02:
         48:d4:01:ef:3d:1a:33:74:ef:cc:b5:48:07:4f:9d:60:aa:b6:
         5e:3d:98:f7:f6:56:f4:4c:5c:8c:55:e2:89:79:cb:48:ef:e5:
         d4:0e:41:f7:9f:26:14:97:35:8a:ee:4c:09:ea:ed:13:f1:a0:
         ab:ac:c1:a4:21:a2:43:93:44:0b:57:c1:50:b7:2e:bd:f6:cd:
         ad:2c:fa:f4:2d:26:c0:10:d7:4e:9f:4c:cd:78:db:76:d6:31:
         da:e5:2e:d9:63:12:d9:29:c4:30:87:35:83:1f:6d:b9:fe:f2:
         15:3e:2a:08:c9:22:f7:1a:35:92:49:cd:ea:3f:f7:67:96:bd:
         d3:32:ee:44:1c:b9:53:78:43:e5:0c:b2:a4:82:87:27:59:ad:
         ba:08:53:70:a5:42:6b:d1:a2:4f:80:d4:6d:c9:f3:0c:8f:d2:
         cb:46:77:34:21:57:1f:b1:8d:30:60:1e:22:3f:5c:9f:41:76:
         64:e0:a2:a0:c2:3e:ee:6c:7a:12:59:15:a8:1c:0c:d2:09:59:
         40:33:0a:fb:2e:1d:6f:66:1f:ad:a2:63:97:22:04:75:52:65:
         1f:3f:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 21:26:31 2024 by rpki-client on console-fra.rpki-client.org