Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/molgcmmTVl4Lm_XSCywO-Bhc3EM.roa
File:                     molgcmmTVl4Lm_XSCywO-Bhc3EM.roa (raw, json)
Hash identifier:          T8/FV/qBMDgzP6xSChHEs67nFspEJcnAwke91/Vzvso=
Subject key identifier:   9A:89:60:72:69:93:56:5E:0B:9B:F5:D2:0B:2C:0E:F8:18:5C:DC:43
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0190D01645ABBFC8047C0EC4FC958854C3BF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/molgcmmTVl4Lm_XSCywO-Bhc3EM.roa
Signing time:             Sat 20 Jul 2024 12:20:38 +0000
ROA not before:           Sat 20 Jul 2024 12:20:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60808
IP address blocks:        31.57.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 18:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:d0:16:45:ab:bf:c8:04:7c:0e:c4:fc:95:88:54:c3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul 20 12:20:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9a8960726993565e0b9bf5d20b2c0ef8185cdc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:5d:db:b3:4d:89:bd:c2:1e:6f:f0:dd:4f:
                    4f:c5:d3:8e:94:1b:6b:d6:6a:3a:5a:44:c7:f0:f5:
                    5e:2c:6d:5e:8f:d8:25:08:7f:3f:d7:6d:b3:f5:97:
                    f6:9d:19:87:2c:6c:8d:e3:23:d8:8f:14:b9:09:eb:
                    52:66:70:12:24:64:a5:ec:3c:8a:52:ce:27:61:54:
                    1d:17:8e:15:79:0e:0a:d7:b7:4b:be:4d:80:af:ce:
                    27:43:40:f4:80:15:a7:90:2a:7a:e1:85:5c:13:c8:
                    5f:43:04:0a:aa:2f:64:66:18:16:52:80:a8:09:87:
                    ee:d5:f0:6b:59:d9:17:d0:fe:5a:2c:fc:81:7f:ce:
                    9f:4c:16:59:a9:d1:a8:44:e7:cc:88:60:53:5e:20:
                    74:99:d7:ac:2d:8b:65:8f:39:5f:98:bc:23:05:ac:
                    c7:3c:37:3c:bc:74:48:d7:45:92:00:d8:89:d7:16:
                    6c:ed:7c:fa:f3:ff:01:55:87:a4:02:18:84:68:db:
                    3e:74:38:70:b1:2e:94:43:7e:02:95:bb:8b:d5:22:
                    e8:4c:73:5d:ab:2a:2a:e5:09:24:16:2b:6a:32:89:
                    77:41:fb:84:9b:ea:ae:a0:d2:99:74:cf:ea:d4:a0:
                    ca:07:e9:5c:42:d0:31:5a:68:ca:a8:63:d2:68:f4:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:89:60:72:69:93:56:5E:0B:9B:F5:D2:0B:2C:0E:F8:18:5C:DC:43
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/molgcmmTVl4Lm_XSCywO-Bhc3EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:7d:6f:cf:bd:b8:54:e3:78:41:4f:aa:f5:dc:d9:83:0e:
         ed:03:68:39:4d:88:57:ee:b0:c9:b0:e2:9e:a8:6e:44:7a:c2:
         a2:69:e6:d1:9e:85:6d:c1:39:3b:49:d7:8d:43:9f:bb:8b:a8:
         51:1e:fe:e2:46:db:98:74:5d:ae:66:2d:0e:ee:e4:78:fb:0c:
         6d:6b:f8:62:66:97:bd:44:ee:17:c6:6c:48:f2:fe:60:60:84:
         68:fb:f4:34:73:af:60:86:b8:e7:f7:94:29:18:54:e3:36:73:
         3d:ad:83:4e:e0:90:bd:4d:e1:15:c7:54:fa:85:1e:79:7b:74:
         b7:26:5f:9f:3a:0c:7e:fe:ea:be:9e:46:7d:8f:bc:a9:a0:07:
         89:45:51:7e:94:ee:0d:7d:50:77:8e:df:40:03:a8:82:97:00:
         90:5a:83:49:e2:2d:23:0e:2c:d3:d9:a1:7a:8f:76:8c:86:d3:
         a6:71:b7:34:dc:88:bf:d5:61:1a:07:ba:bb:7d:10:fc:5e:f1:
         bb:42:5e:4e:6d:62:17:f1:ef:8a:1c:64:99:60:c4:ce:f6:e8:
         a5:c3:ac:0e:86:10:43:31:0f:88:35:66:50:fd:ed:ec:75:3c:
         b3:98:94:f9:7d:3c:9c:32:b3:e1:94:48:16:36:e3:fe:d1:57:
         20:43:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 20:33:47 2024 by rpki-client on console-ams.rpki-client.org