Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JDzLjh5Jo5wV_keaKTN_NRIYJyk.roa
File:                     JDzLjh5Jo5wV_keaKTN_NRIYJyk.roa (raw, json)
Hash identifier:          r8acs+zeZ1NrEMTn9xBI4vQpj0+sZw/34+2JYUtdTYE=
Subject key identifier:   24:3C:CB:8E:1E:49:A3:9C:15:FE:47:9A:29:33:7F:35:12:18:27:29
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019209A51D99A351CC07E57BEE9DC945EE40
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JDzLjh5Jo5wV_keaKTN_NRIYJyk.roa
Signing time:             Thu 19 Sep 2024 09:37:48 +0000
ROA not before:           Thu 19 Sep 2024 09:37:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29802
IP address blocks:        31.57.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 15:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:09:a5:1d:99:a3:51:cc:07:e5:7b:ee:9d:c9:45:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Sep 19 09:37:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=243ccb8e1e49a39c15fe479a29337f3512182729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:8b:45:ad:94:26:ae:42:94:12:a2:2d:3d:
                    8b:ae:60:7e:fa:d3:16:3f:46:3a:ff:60:c4:c0:a6:
                    0e:e6:84:bc:4f:42:7f:88:5d:35:d3:da:07:71:77:
                    f5:a9:a5:89:9a:3f:31:a2:c7:05:f3:0c:f3:03:3c:
                    5e:83:1d:27:b9:4a:b3:28:7f:39:33:d7:af:da:f9:
                    6f:99:52:7a:e4:dd:3f:8a:dd:54:9a:d2:b8:d4:fc:
                    ef:bd:67:cf:c6:00:1b:4d:eb:ea:64:42:e4:bc:38:
                    d5:ee:9f:89:25:18:ab:7c:25:4f:d3:53:82:0e:57:
                    1f:f8:3f:5e:96:f1:20:6a:d7:be:e3:4f:44:24:14:
                    1c:5e:ae:22:11:9e:8d:a0:6e:29:8d:2b:87:f2:04:
                    e4:c1:2e:09:0a:28:98:6c:0d:f9:1f:e3:30:94:7a:
                    00:76:a2:17:f5:07:da:2b:91:f3:d4:b9:8e:28:01:
                    c7:36:87:bd:45:f8:86:f5:a2:ff:76:52:63:c3:26:
                    c0:02:98:aa:83:00:79:d5:db:f0:d3:5a:9d:d1:99:
                    c0:7c:a9:4c:4b:7b:8e:f5:aa:e4:df:79:f6:cd:40:
                    d6:af:9a:6c:f2:6c:5c:07:08:2d:85:4e:2e:eb:88:
                    15:e1:2f:ba:6c:d0:47:b5:c8:e7:96:31:8b:a7:08:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3C:CB:8E:1E:49:A3:9C:15:FE:47:9A:29:33:7F:35:12:18:27:29
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JDzLjh5Jo5wV_keaKTN_NRIYJyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:99:c1:99:15:5e:70:cf:4c:34:f1:97:4c:09:b0:d2:0c:
         79:d9:fa:02:b8:83:b3:d9:16:c7:f0:cb:66:1b:ef:c0:f5:99:
         76:eb:2b:1e:55:87:78:e9:ae:a6:9d:c7:52:47:1b:49:8f:85:
         d8:29:fd:c6:44:99:31:72:70:1a:16:39:cb:c8:8f:80:e6:ea:
         e7:d8:b8:92:cb:a2:a4:4a:db:38:ef:cb:ad:68:33:96:0e:cd:
         b5:a7:93:8d:37:ab:cb:1f:ff:a2:e2:3f:ee:d2:92:af:2a:6b:
         6b:ec:1c:3e:b9:11:37:f7:b2:36:42:f0:11:e0:ca:34:93:fa:
         14:81:9e:74:3c:f0:8a:84:29:88:ac:2c:ab:9e:dc:96:d8:64:
         51:fb:09:21:c3:89:ae:88:a7:87:ae:c2:6a:51:32:8f:92:0f:
         2e:7d:97:d6:87:89:cd:26:4b:08:fc:41:35:21:74:3b:7b:c8:
         84:f9:ef:bc:c4:1b:92:3b:75:2a:7e:fe:1e:1b:af:04:96:ca:
         cf:27:e2:2d:e9:4b:31:42:53:0a:8c:9e:5b:60:94:85:7f:15:
         93:16:39:21:97:62:11:09:89:f6:0f:94:a2:af:cd:4e:44:96:
         be:d3:4b:9d:ed:b4:2c:49:e2:e2:88:55:1f:da:37:eb:30:cf:
         f0:6c:e0:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIJpR2Zo1HMB+V77p3JRe5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE5MDkzNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDNjY2I4ZTFlNDlhMzljMTVmZTQ3OWEyOTMzN2YzNTEyMTgyNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCiLRa2UJq5ClBKiLT2LrmB++tMW
P0Y6/2DEwKYO5oS8T0J/iF0109oHcXf1qaWJmj8xoscF8wzzAzxegx0nuUqzKH85
M9ev2vlvmVJ65N0/it1UmtK41PzvvWfPxgAbTevqZELkvDjV7p+JJRirfCVP01OC
Dlcf+D9elvEgate+409EJBQcXq4iEZ6NoG4pjSuH8gTkwS4JCiiYbA35H+MwlHoA
dqIX9QfaK5Hz1LmOKAHHNoe9RfiG9aL/dlJjwybAApiqgwB51dvw01qd0ZnAfKlM
S3uO9ark33n2zUDWr5ps8mxcBwgthU4u64gV4S+6bNBHtcjnljGLpwi2JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQ8y44eSaOcFf5HmikzfzUSGCcpMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSkR6TGpoNUpvNXdWX2tlYUtUTl9OUklZSnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmWMA0G
CSqGSIb3DQEBCwUAA4IBAQCRbZnBmRVecM9MNPGXTAmw0gx52foCuIOz2RbH8Mtm
G+/A9Zl26yseVYd46a6mncdSRxtJj4XYKf3GRJkxcnAaFjnLyI+A5urn2LiSy6Kk
Sts478utaDOWDs21p5ONN6vLH/+i4j/u0pKvKmtr7Bw+uRE397I2QvAR4Mo0k/oU
gZ50PPCKhCmIrCyrntyW2GRR+wkhw4muiKeHrsJqUTKPkg8ufZfWh4nNJksI/EE1
IXQ7e8iE+e+8xBuSO3Uqfv4eG68ElsrPJ+It6UsxQlMKjJ5bYJSFfxWTFjkhl2IR
CYn2D5Sir81ORJa+00ud7bQsSeLiiFUf2jfrMM/wbOBt
-----END CERTIFICATE-----
Generated at Sat Sep 21 18:20:01 2024 by rpki-client on console-fra.rpki-client.org