Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hXJSHw5FhV136S2Dkz4eCqcS1IA.roa
File:                     hXJSHw5FhV136S2Dkz4eCqcS1IA.roa (raw, json)
Hash identifier:          MaNLEHkDBXotiAcrBE8ggALUgNDpmFwtzn2vuQ7Hxoo=
Subject key identifier:   85:72:52:1F:0E:45:85:5D:77:E9:2D:83:93:3E:1E:0A:A7:12:D4:80
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0190DDEB8866F2DCE94BDA277D9BE9494FDB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hXJSHw5FhV136S2Dkz4eCqcS1IA.roa
Signing time:             Tue 23 Jul 2024 04:48:38 +0000
ROA not before:           Tue 23 Jul 2024 04:48:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199414
IP address blocks:        31.56.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 18:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:dd:eb:88:66:f2:dc:e9:4b:da:27:7d:9b:e9:49:4f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul 23 04:48:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8572521f0e45855d77e92d83933e1e0aa712d480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:e6:7a:68:30:a2:cc:bf:ac:54:17:54:77:
                    94:36:bd:82:51:6e:87:44:69:19:23:87:c4:f1:87:
                    6b:00:39:99:af:92:92:a6:41:fb:c3:68:46:24:6b:
                    6b:a7:53:83:35:f6:98:b0:d0:60:e7:22:3b:b5:57:
                    eb:f0:07:d4:04:75:77:89:c4:65:fe:49:29:e4:ba:
                    03:b9:41:a9:d6:60:59:5c:2b:c7:ee:7e:77:b8:c1:
                    0d:14:58:41:e4:fa:13:0e:07:8a:c0:8f:bc:d5:67:
                    5b:1c:dd:2e:7e:1d:2f:ef:75:da:d7:df:bd:b3:ea:
                    ff:4f:2b:62:30:39:fc:ab:a4:bb:38:16:37:b7:36:
                    d8:c1:2b:9b:04:41:fa:34:b5:80:d4:c0:cd:83:22:
                    ee:26:30:69:39:56:a6:a2:f5:cf:cc:0d:b7:55:20:
                    1b:82:de:4c:da:5e:51:f6:d1:b0:75:ea:05:0a:6a:
                    1c:a8:d5:fa:ce:71:75:13:1f:ec:c0:7a:1c:fd:26:
                    a8:4f:a6:be:1e:b0:02:91:02:ed:8a:28:cf:1d:b3:
                    ad:eb:a7:a4:8b:2a:c8:b9:ec:ea:a2:9d:92:44:e4:
                    0b:5b:42:f7:2a:91:55:ea:fc:af:87:5e:39:8b:4c:
                    74:46:70:54:3f:e5:8f:94:e2:1a:08:8f:e2:4b:08:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:52:1F:0E:45:85:5D:77:E9:2D:83:93:3E:1E:0A:A7:12:D4:80
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hXJSHw5FhV136S2Dkz4eCqcS1IA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:db:5b:b3:56:7c:75:78:ed:ef:68:a5:aa:56:47:24:c3:a2:
         23:ec:73:ca:a7:6c:54:85:d5:83:29:8b:05:a6:f3:04:b8:90:
         24:70:79:46:61:5b:72:25:1f:29:0d:17:98:19:96:28:43:f6:
         86:90:fd:8b:2a:ea:47:a8:ed:8c:0b:ea:9a:25:f5:df:56:83:
         e6:78:eb:6e:fc:35:ac:a1:86:10:1c:e9:3e:a6:dc:b7:90:e6:
         57:ae:2e:a2:4c:d1:ef:6a:d9:30:d2:51:ac:cd:da:d7:cf:25:
         ec:75:ba:06:01:8d:db:8c:68:e4:fa:0e:e6:7a:dd:89:a1:8a:
         95:30:c4:b1:db:2f:e0:18:0d:a8:aa:7a:f5:cd:bc:c4:30:e9:
         e2:b6:87:77:89:74:5c:3a:87:c0:e6:15:2d:1c:37:c0:2d:76:
         0b:b3:29:7c:a2:c4:b3:5e:fb:c7:9f:c3:bf:ed:ca:53:65:75:
         8d:9e:9e:f4:8b:a4:a3:b4:77:40:cb:fd:6a:8b:e8:db:92:82:
         0a:40:d5:c2:72:36:95:a2:a6:e1:40:43:af:fd:0e:c1:c3:d1:
         53:32:60:a4:57:14:86:ba:ea:ad:71:fb:53:55:86:a2:89:f8:
         45:6a:f9:c3:b7:79:59:bc:8c:cd:a6:40:ec:c0:6f:3a:4a:61:
         e3:da:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 21:27:32 2024 by rpki-client on console-ams.rpki-client.org