Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eOTdJenXW3YihoaQNKT1ae9yWhQ.roa
File:                     eOTdJenXW3YihoaQNKT1ae9yWhQ.roa (raw, json)
Hash identifier:          w3lF38xCudPgeUmdlGOnRqjdlKEovd8GoLbn3UBExSo=
Subject key identifier:   78:E4:DD:25:E9:D7:5B:76:22:86:86:90:34:A4:F5:69:EF:72:5A:14
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019250489C74056572E49AD5D1C3F64392A8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eOTdJenXW3YihoaQNKT1ae9yWhQ.roa
Signing time:             Thu 03 Oct 2024 02:49:48 +0000
ROA not before:           Thu 03 Oct 2024 02:49:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207252
IP address blocks:        31.57.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 20:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:50:48:9c:74:05:65:72:e4:9a:d5:d1:c3:f6:43:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Oct  3 02:49:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=78e4dd25e9d75b762286869034a4f569ef725a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:2a:65:17:fc:03:fd:a7:92:27:d7:02:fc:
                    f6:3c:23:e7:c0:18:b1:83:50:3d:2f:fb:a9:c1:05:
                    91:5d:d7:a0:e8:ae:1e:71:a9:fa:2a:1e:c6:ab:c2:
                    ce:14:7c:0c:57:a1:d0:fe:94:1a:a6:9b:19:bb:c6:
                    58:86:bd:58:38:50:5a:dc:fe:b3:66:f4:22:5b:4f:
                    06:c3:1a:a1:2d:a8:b1:88:21:42:38:21:ea:14:0e:
                    12:cb:27:ab:73:01:4e:ae:2f:07:4a:b0:0a:f2:9e:
                    31:32:c4:af:f4:12:4b:3e:41:de:60:9c:ec:91:da:
                    ea:c7:2e:a3:96:bf:f4:3e:5e:97:e8:99:cc:65:5c:
                    c6:18:c9:90:e3:b5:1f:80:f3:ec:9b:f6:d9:c4:0c:
                    3e:76:f5:a0:0c:90:c4:2a:dd:b1:a0:a5:99:65:54:
                    cc:df:f7:ce:e2:59:ff:07:0a:47:f5:fe:3c:54:81:
                    32:f6:b7:69:2d:67:5e:60:14:7f:1b:0e:cc:e1:69:
                    28:8b:62:d7:11:b5:e4:5b:5f:83:4e:d6:14:a1:c8:
                    7e:a7:72:df:ad:20:b9:bc:93:82:14:fd:fd:f9:cd:
                    1d:2d:77:07:1a:73:d7:6a:6f:52:97:46:d8:44:d5:
                    5f:f6:e1:e3:bb:65:6a:db:7f:4e:72:eb:19:97:25:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:DD:25:E9:D7:5B:76:22:86:86:90:34:A4:F5:69:EF:72:5A:14
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eOTdJenXW3YihoaQNKT1ae9yWhQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:bc:02:3b:57:79:db:67:5f:41:e9:bb:33:47:d4:ff:93:
         34:59:8c:5d:20:89:d7:7e:12:d2:20:94:13:b7:a0:4b:dd:77:
         7b:30:3f:51:2b:2e:35:21:03:8f:51:e0:f1:51:97:cd:de:25:
         a3:23:3a:a8:31:0a:9e:86:0c:2e:55:d6:ea:cf:6b:22:7d:36:
         1f:4d:12:9c:5d:f4:c6:6a:81:c0:09:07:ea:73:31:88:41:a0:
         4d:00:f7:44:66:28:e8:bf:0e:5f:57:ae:58:06:49:88:dd:34:
         03:1d:70:72:d2:4f:2f:1d:50:d9:64:ca:f3:a1:cd:8c:a3:2c:
         77:6d:97:71:d7:46:8e:1e:fe:6b:ca:0f:4f:b1:b8:ae:c3:63:
         a7:3c:31:dc:46:59:2f:e2:e4:58:6e:be:17:66:c3:dd:1e:86:
         bf:a4:f8:ca:b1:c2:64:8c:0c:1f:97:fa:78:f6:b8:08:bf:17:
         c0:de:b5:71:e9:71:bd:0f:54:b1:d0:bd:a5:71:b7:7d:1f:31:
         ea:af:65:fc:e3:ce:ea:3e:c1:c9:ad:31:77:87:01:df:e3:21:
         a7:fd:b0:c5:cc:14:60:cc:fe:c7:4c:8b:be:8e:19:dd:f7:76:
         43:f8:c0:92:5e:f7:86:16:55:3b:ee:0a:57:a3:2f:4c:e7:89:
         e1:7b:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 02:31:56 2024 by rpki-client on console-ams.rpki-client.org