Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/voiU2EdRIaTVx5AHKLxA42ssCfU.roa
File:                     voiU2EdRIaTVx5AHKLxA42ssCfU.roa (raw, json)
Hash identifier:          tJ2ATCxo+NL/B654R5fdy9EaSuyHbixIr29VB6g0EGc=
Subject key identifier:   BE:88:94:D8:47:51:21:A4:D5:C7:90:07:28:BC:40:E3:6B:2C:09:F5
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0191E751E294C35674BFB5AF3585E6947842
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/voiU2EdRIaTVx5AHKLxA42ssCfU.roa
Signing time:             Thu 12 Sep 2024 17:39:48 +0000
ROA not before:           Thu 12 Sep 2024 17:39:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        31.56.64.0/24 maxlen: 24
                          31.56.160.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Sep 2024 04:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:e7:51:e2:94:c3:56:74:bf:b5:af:35:85:e6:94:78:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Sep 12 17:39:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=be8894d8475121a4d5c7900728bc40e36b2c09f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:0c:47:5f:e3:8a:6d:62:3d:d5:37:a0:2f:
                    c8:1e:92:73:2c:59:cb:5a:b3:9c:91:b9:e9:78:11:
                    d5:38:22:92:5b:dd:27:ca:de:ef:8c:4e:0f:04:79:
                    b3:02:3a:a7:19:fb:90:cb:81:66:8e:9a:30:ea:a2:
                    48:34:cb:7b:7b:78:2d:e8:f7:7f:b6:35:1d:8b:ed:
                    b6:c6:fd:17:fa:4e:9c:a7:9a:44:8a:0f:af:1d:39:
                    22:cb:f5:ee:7a:80:65:15:2b:26:7f:b6:06:c2:aa:
                    eb:86:93:b4:d2:23:63:3d:cd:ef:0c:f3:76:12:5e:
                    4e:53:37:a6:76:f3:4a:aa:1c:fa:ea:29:62:a9:1e:
                    57:ab:d2:64:61:dd:45:fb:07:4a:f1:ff:d2:59:8b:
                    bf:6f:95:4d:c9:8b:5c:9c:61:d2:c5:a9:47:93:07:
                    d5:be:b8:63:e4:a2:02:da:01:b9:f4:ce:28:e6:bc:
                    b8:62:a3:95:74:cc:6e:17:d8:2f:11:7d:be:e5:26:
                    00:a0:43:ab:76:41:38:6c:a5:2d:2d:88:45:57:5f:
                    ad:9f:28:44:1a:6b:38:dc:c6:e0:00:4c:88:a0:e2:
                    98:dc:fa:f8:28:f3:14:29:95:7c:62:ce:0c:f7:8b:
                    ea:50:79:52:92:90:ab:64:bd:0d:e2:43:9f:1a:34:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:94:D8:47:51:21:A4:D5:C7:90:07:28:BC:40:E3:6B:2C:09:F5
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/voiU2EdRIaTVx5AHKLxA42ssCfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.64.0/24
                  31.56.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:af:9c:18:7c:c6:40:08:ce:a3:f4:b9:ff:32:bf:26:51:
         18:be:b7:d4:c8:c7:63:8a:56:76:b9:07:a4:1e:ce:31:c2:49:
         26:a1:f6:22:8f:83:00:22:4a:43:45:32:c3:01:8e:12:ef:fd:
         07:e0:d1:68:26:20:f1:fe:f3:5a:7f:ec:f8:b3:ec:b4:79:27:
         ea:84:59:f9:49:cb:66:51:0b:64:c6:0c:23:4f:f3:c3:f8:93:
         cc:54:73:97:c4:f1:a5:0e:0b:db:6f:25:87:2d:ea:ca:c1:03:
         cc:92:af:67:44:14:73:96:23:be:f5:78:96:4f:f7:42:88:8d:
         0e:71:34:09:a1:6c:2f:38:e8:63:20:98:ad:09:92:d4:dc:74:
         9c:a2:2b:68:aa:9b:79:b7:cd:5b:f8:6a:b4:6e:b0:32:ab:90:
         5d:4d:bc:12:79:8b:b8:be:88:d8:38:38:60:68:c4:05:40:b6:
         c2:77:3d:79:2f:76:6f:3e:24:0e:d8:d2:ef:1f:35:c5:24:51:
         7c:02:c4:35:d0:89:99:92:c1:05:6d:9e:67:c9:cb:ee:ae:22:
         2d:95:95:b4:7d:0e:d2:91:9a:07:23:46:e9:29:f5:02:c7:9c:
         9f:47:aa:1f:e6:a7:67:f1:83:cf:f8:57:e5:0d:9c:1b:ec:1e:
         29:2b:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 06:09:42 2024 by rpki-client on console-fra.rpki-client.org