Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uxOU3Ohhaud2KS4b_ob40I-875w.roa
File:                     uxOU3Ohhaud2KS4b_ob40I-875w.roa (raw, json)
Hash identifier:          lmkXDgNyvJmPL4gCBMviVa4y4nCMSDXyLouknNjazkg=
Subject key identifier:   BB:13:94:DC:E8:61:6A:E7:76:29:2E:1B:FE:86:F8:D0:8F:BC:EF:9C
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       01929035B58986DCA1F5D471FE04BF116988
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uxOU3Ohhaud2KS4b_ob40I-875w.roa
Signing time:             Tue 15 Oct 2024 12:44:51 +0000
ROA not before:           Tue 15 Oct 2024 12:44:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29800
IP address blocks:        31.57.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 19:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:90:35:b5:89:86:dc:a1:f5:d4:71:fe:04:bf:11:69:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Oct 15 12:44:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb1394dce8616ae776292e1bfe86f8d08fbcef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:d7:f9:0a:36:04:77:56:32:29:ee:af:36:
                    e1:f8:42:2e:c6:87:a6:57:96:98:1c:24:17:6c:00:
                    70:a3:a7:2c:4a:d6:1d:6c:82:75:1d:f0:f7:54:cd:
                    36:4e:7d:d7:36:e0:87:f7:52:d1:ca:9f:77:0a:c0:
                    e1:74:57:aa:57:32:37:aa:70:f5:c4:38:bb:ed:5c:
                    42:bc:5e:f3:cd:4f:db:5d:cd:92:f2:9c:d7:6a:e6:
                    7f:48:25:2d:ff:a8:6e:5b:c2:01:3a:93:a2:11:ec:
                    64:d5:59:c8:a6:e9:4a:af:16:42:55:0b:08:2c:de:
                    a0:71:e2:eb:c9:45:40:4a:9c:9d:95:f5:fb:b4:1d:
                    06:de:ab:48:10:51:c0:ba:ae:a2:dc:9e:6e:af:d0:
                    b2:f0:83:36:82:53:61:48:12:01:53:fa:95:b9:c6:
                    0f:4e:dd:4f:e8:19:75:3e:04:ec:7b:1a:be:c4:ab:
                    7f:06:49:ba:68:89:a2:4d:cf:3b:b1:db:2a:f1:14:
                    a4:24:49:ee:07:71:40:19:c4:f1:dc:16:fd:7c:ec:
                    4a:95:6e:50:19:30:b6:fb:49:5a:70:e5:0e:75:0f:
                    ed:cb:b9:5f:ae:6c:0a:7c:f4:5f:70:ef:50:42:71:
                    f8:49:97:1d:3c:6c:77:88:a2:d4:cb:3b:e5:4b:ff:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:13:94:DC:E8:61:6A:E7:76:29:2E:1B:FE:86:F8:D0:8F:BC:EF:9C
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uxOU3Ohhaud2KS4b_ob40I-875w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:b3:4f:18:93:bf:cd:6d:87:ff:23:a6:4b:ad:a4:4d:d1:
         67:cc:72:2b:87:79:c7:0f:e2:e6:eb:b4:a8:9b:7b:25:b3:fe:
         74:2b:33:cc:43:3d:8d:3a:cc:42:59:db:58:46:4d:3b:d3:a7:
         75:8e:da:38:cb:cc:fe:2d:51:f1:d1:47:b4:94:dd:4a:53:7e:
         5c:7e:0a:1a:97:18:27:16:40:29:da:e0:44:46:64:0f:43:f9:
         0c:c9:6f:73:2a:5d:e2:2a:92:b3:44:24:5d:88:62:d2:d8:4b:
         ee:61:aa:2a:5d:fd:4e:42:20:b0:c0:8f:f5:89:dd:2e:9c:cd:
         15:b9:1e:31:83:a3:69:b1:8c:6c:bf:43:38:e4:6e:c0:71:11:
         ab:1a:59:57:1a:ab:85:3d:fe:1b:f5:45:42:7c:ad:bc:0e:0f:
         1e:63:2d:50:dc:56:03:a1:d0:aa:79:b5:29:49:ee:67:76:5d:
         0d:60:51:07:8f:d5:4c:9d:b9:24:f1:18:ed:60:48:61:50:0b:
         e8:ea:15:2f:e4:ae:7c:3a:f3:f7:22:8b:c8:e2:29:75:52:bd:
         e9:96:2c:e7:90:5b:e0:ef:c0:c6:a5:d1:6c:e3:23:cc:77:65:
         40:4c:24:5e:77:53:09:77:38:41:9a:c2:fe:97:10:3c:e4:2c:
         55:51:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:33:10 2024 by rpki-client on console-fra.rpki-client.org