Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wspg-4UvyEZ_D1qWRa8sKIgkydw.roa
File:                     wspg-4UvyEZ_D1qWRa8sKIgkydw.roa (raw, json)
Hash identifier:          zqpmB4v8URSStQ4sZB2/F4qOnkAeqnE6U76rTLky2tw=
Subject key identifier:   C2:CA:60:FB:85:2F:C8:46:7F:0F:5A:96:45:AF:2C:28:88:24:C9:DC
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       01914D19C34A159383319EE0AA1353A400FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wspg-4UvyEZ_D1qWRa8sKIgkydw.roa
Signing time:             Tue 13 Aug 2024 18:56:59 +0000
ROA not before:           Tue 13 Aug 2024 18:56:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     272040
IP address blocks:        31.56.42.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Oct 2024 06:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4d:19:c3:4a:15:93:83:31:9e:e0:aa:13:53:a4:00:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Aug 13 18:56:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2ca60fb852fc8467f0f5a9645af2c288824c9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:12:6a:31:af:01:ef:19:9a:f7:3a:c5:32:
                    bc:9d:d2:78:91:1c:0a:24:e4:46:b4:1a:0e:3f:ff:
                    1c:93:33:d7:50:51:6c:ed:ce:cc:9a:2e:c4:28:d3:
                    ef:89:a2:98:c0:8c:9d:be:e4:62:89:35:c5:8e:cd:
                    39:7f:1c:6c:c4:fa:cc:cd:5d:94:0f:37:36:99:68:
                    df:8b:8e:00:61:9c:27:43:89:c1:8c:f1:f5:26:c8:
                    ea:80:83:2a:4b:2c:93:ef:a6:06:de:de:f5:91:41:
                    d1:03:c3:eb:d6:86:ca:f9:31:96:26:13:bf:6b:ca:
                    ff:79:19:6b:e4:0e:92:4e:23:82:24:03:b7:9c:6c:
                    08:5e:40:d7:55:d4:07:d1:62:a8:e2:49:68:a7:7f:
                    3a:8f:ad:23:8b:44:49:5e:12:4b:49:ce:13:7e:32:
                    3b:df:3d:c1:5f:16:9a:4f:6e:32:d4:2c:36:87:91:
                    c3:6c:f7:11:36:28:b1:1b:e1:fb:1b:ff:56:15:50:
                    9d:16:06:5d:f3:44:1d:92:72:f5:96:32:23:73:98:
                    1b:89:67:33:f6:3f:e2:27:35:c0:50:1e:85:34:44:
                    d0:bf:15:3d:78:c7:8a:b6:8a:e7:86:c9:95:35:f3:
                    68:e3:0b:77:02:05:c4:e4:21:a1:2b:7a:a8:3b:ac:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:60:FB:85:2F:C8:46:7F:0F:5A:96:45:AF:2C:28:88:24:C9:DC
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wspg-4UvyEZ_D1qWRa8sKIgkydw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:04:d6:78:0e:66:ad:47:cb:6c:ca:fa:90:0b:c7:15:e4:13:
         df:3b:f6:eb:b8:28:99:c4:4a:74:5d:6c:24:7f:a5:08:3a:3d:
         31:2d:5a:2a:c3:6d:25:2a:ad:2a:2f:a3:be:67:78:2b:71:da:
         02:0f:da:e0:12:d7:77:d2:aa:41:10:1b:af:3a:4d:19:e5:a3:
         c7:8c:1c:fb:bc:57:c2:a5:cf:1c:47:07:a9:7b:03:33:48:9c:
         f8:1f:5e:31:72:2d:76:2d:03:5e:bc:12:68:48:b5:7e:4c:8b:
         61:f4:94:a7:2d:14:f7:62:12:2c:03:13:5a:e9:20:6c:e1:3e:
         fb:18:e8:73:4b:0e:6d:16:74:67:37:a8:ee:aa:0d:af:3c:ff:
         25:60:2d:d8:c8:1f:82:45:34:f4:d8:ec:bc:d3:aa:45:e9:7c:
         3e:35:d3:45:86:75:d7:6e:e7:e7:04:9a:be:3b:36:29:68:e3:
         d4:64:6d:65:f3:1c:f4:97:9a:af:c3:f6:8d:0f:98:93:9f:db:
         c2:a6:f0:ab:4b:6e:e0:86:48:29:a1:88:a2:ee:6a:99:cd:a1:
         41:6f:7e:f7:4d:98:8d:fe:bd:90:1f:62:88:3f:39:e0:7d:91:
         b2:73:4a:4b:01:ea:8f:89:6a:3f:9a:bb:4d:2d:78:3d:0c:55:
         32:09:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 07:36:30 2024 by rpki-client on console-ams.rpki-client.org