Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_E4jsWNEJXnkJKUujhGzO7dk6GE.roa
File:                     _E4jsWNEJXnkJKUujhGzO7dk6GE.roa (raw, json)
Hash identifier:          tMwOnZNVUBNpU7R9ipqqUb8kS0/1vCoRfwKnDzV0TUs=
Subject key identifier:   FC:4E:23:B1:63:44:25:79:E4:24:A5:2E:8E:11:B3:3B:B7:64:E8:61
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0192871019FF631D75D38B1D6997F2E37D0D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_E4jsWNEJXnkJKUujhGzO7dk6GE.roa
Signing time:             Sun 13 Oct 2024 18:07:12 +0000
ROA not before:           Sun 13 Oct 2024 18:07:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42831
IP address blocks:        31.57.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 19:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:87:10:19:ff:63:1d:75:d3:8b:1d:69:97:f2:e3:7d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Oct 13 18:07:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc4e23b163442579e424a52e8e11b33bb764e861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:71:56:a1:c3:9e:14:9b:61:c1:7a:6c:77:
                    b5:69:3a:f3:94:3d:05:4d:a3:9b:f9:f3:ee:e4:80:
                    83:ab:6b:d4:4e:59:d8:3c:be:dd:db:2d:f5:48:85:
                    61:b4:71:ec:e2:63:93:dd:fe:23:2a:db:da:a3:80:
                    fb:0e:5b:23:66:18:d5:d2:ab:bd:cc:9a:8f:62:b2:
                    f0:b5:c7:46:0a:70:27:43:38:e6:bd:a6:11:54:d3:
                    33:e7:e8:0d:25:92:1a:c9:4f:dd:26:62:33:5b:49:
                    62:e3:f5:d4:1b:0e:91:eb:e1:9c:b6:df:70:a7:48:
                    3a:e9:5b:d7:51:35:b2:f2:2e:d7:b3:1d:9a:80:ce:
                    43:fd:88:71:d0:9a:d6:49:fe:b8:c9:8b:84:79:6b:
                    fb:ed:f6:ae:7f:71:98:d2:a8:ac:eb:ea:0a:8b:22:
                    aa:8f:94:a1:91:05:7f:0c:d3:60:cc:c7:9b:32:88:
                    ed:55:25:5e:e0:2e:38:98:b7:8a:dd:14:65:3c:05:
                    33:00:ef:78:5b:9a:a1:a0:13:71:14:30:cf:df:2e:
                    2e:17:15:f8:28:6b:65:59:00:b2:ed:b9:09:71:4b:
                    0f:d3:48:15:9b:61:10:65:25:c8:9d:90:bb:4e:5e:
                    e3:90:67:f0:bc:53:db:aa:65:e5:30:a1:a5:6a:78:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4E:23:B1:63:44:25:79:E4:24:A5:2E:8E:11:B3:3B:B7:64:E8:61
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_E4jsWNEJXnkJKUujhGzO7dk6GE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:03:60:21:b0:87:21:b6:2e:63:2d:25:59:b9:0b:f6:e3:
         cb:66:56:26:4c:70:28:6e:f9:48:c1:f3:5c:5b:0e:b7:60:0d:
         ac:fd:91:e4:cb:12:b9:b5:04:ea:72:ab:61:37:e6:88:1e:6a:
         b7:36:8f:03:61:76:95:59:cc:85:25:e5:c6:33:5d:02:b8:32:
         15:5c:81:97:9a:ba:a3:f7:66:af:39:f6:63:ae:c9:45:e6:db:
         99:27:20:eb:46:5d:73:1a:96:65:40:de:5d:ac:cb:43:00:d1:
         ee:85:9b:83:d7:00:c9:4e:b3:bf:84:e3:b6:3c:5e:94:c5:40:
         68:6b:9e:d7:60:d7:6e:69:10:e4:cb:e0:0b:32:50:3a:5d:5a:
         d5:64:59:ed:fc:10:96:5f:0a:fd:60:42:1f:d0:e4:c0:96:a7:
         15:ef:92:65:1e:e6:79:e7:49:2c:ba:30:8d:77:d6:b1:ce:e9:
         ac:75:2b:ac:f8:ba:ce:bb:ee:c8:f6:9c:c5:b9:8b:92:6e:1e:
         92:00:af:04:3a:22:f2:c7:dd:d3:c2:c8:15:20:59:3f:89:dc:
         10:ff:c8:8f:e6:81:8a:22:bb:18:e1:42:0b:4c:2a:6b:82:ee:
         18:b8:38:76:84:2c:41:ca:79:df:a8:38:ac:43:1f:97:e4:1f:
         77:8c:73:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKHEBn/Yx1104sdaZfy430NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDEzMTgwNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzRlMjNiMTYzNDQyNTc5ZTQyNGE1MmU4ZTExYjMzYmI3NjRlODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqxxVqHDnhSbYcF6bHe1aTrzlD0F
TaOb+fPu5ICDq2vUTlnYPL7d2y31SIVhtHHs4mOT3f4jKtvao4D7DlsjZhjV0qu9
zJqPYrLwtcdGCnAnQzjmvaYRVNMz5+gNJZIayU/dJmIzW0li4/XUGw6R6+Gctt9w
p0g66VvXUTWy8i7Xsx2agM5D/Yhx0JrWSf64yYuEeWv77fauf3GY0qis6+oKiyKq
j5ShkQV/DNNgzMebMojtVSVe4C44mLeK3RRlPAUzAO94W5qhoBNxFDDP3y4uFxX4
KGtlWQCy7bkJcUsP00gVm2EQZSXInZC7Tl7jkGfwvFPbqmXlMKGlanh3tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxOI7FjRCV55CSlLo4Rszu3ZOhhMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvX0U0anNXTkVKWG5rSktVdWpoR3pPN2RrNkdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznsMA0G
CSqGSIb3DQEBCwUAA4IBAQCnugNgIbCHIbYuYy0lWbkL9uPLZlYmTHAobvlIwfNc
Ww63YA2s/ZHkyxK5tQTqcqthN+aIHmq3No8DYXaVWcyFJeXGM10CuDIVXIGXmrqj
92avOfZjrslF5tuZJyDrRl1zGpZlQN5drMtDANHuhZuD1wDJTrO/hOO2PF6UxUBo
a57XYNduaRDky+ALMlA6XVrVZFnt/BCWXwr9YEIf0OTAlqcV75JlHuZ550ksujCN
d9axzumsdSus+LrOu+7I9pzFuYuSbh6SAK8EOiLyx93TwsgVIFk/idwQ/8iP5oGK
IrsY4UILTCprgu4YuDh2hCxBynnfqDisQx+X5B93jHMS
-----END CERTIFICATE-----
Generated at Thu Oct 17 22:34:22 2024 by rpki-client on console-ams.rpki-client.org