Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/31ii4Jvud_BJ0RUGMABYqo3Z5h0.roa
File:                     31ii4Jvud_BJ0RUGMABYqo3Z5h0.roa (raw, json)
Hash identifier:          j7rPHdauAZxkDpkX0/XlCGh+dwZK8b0tGcBqYWn4SAE=
Subject key identifier:   DF:58:A2:E0:9B:EE:77:F0:49:D1:15:06:30:00:58:AA:8D:D9:E6:1D
Certificate issuer:       /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial:       01856E2FA6256347E823AABDC39A70D15221
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/31ii4Jvud_BJ0RUGMABYqo3Z5h0.roa
Signing time:             Sun 01 Jan 2023 16:34:54 +0000
ROA not before:           Sun 01 Jan 2023 16:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57295
IP address blocks:        2001:67c:2ba8::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:a6:25:63:47:e8:23:aa:bd:c3:9a:70:d1:52:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
        Validity
            Not Before: Jan  1 16:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df58a2e09bee77f049d11506300058aa8dd9e61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:b2:fb:7d:d5:74:bc:d3:c3:2b:76:b8:44:
                    0e:a0:ed:0c:d7:35:d3:7e:c2:e0:37:26:e0:a1:7a:
                    9b:8d:de:6f:1b:2e:e5:c1:46:a9:84:0e:bb:15:70:
                    af:b8:b1:c6:ba:b5:99:21:01:4d:14:e1:d8:ca:49:
                    f6:f8:12:46:c7:66:cf:8e:f7:a7:46:ea:db:d6:b0:
                    9a:ab:f0:72:79:9b:b8:28:60:4f:9b:1f:6f:f1:6d:
                    f6:7f:58:b5:87:37:8f:5b:3e:b1:ba:2e:e0:a7:f0:
                    fa:80:f6:6c:22:f4:65:c9:11:2f:ff:fa:54:53:4e:
                    9f:62:97:73:43:ca:ef:91:9b:3f:d1:20:9a:a7:25:
                    4a:f4:cb:df:7d:06:79:3c:ab:26:6a:b5:e7:df:de:
                    8d:53:06:9e:64:7d:25:c2:6c:bf:3f:2e:12:f3:5e:
                    53:7a:5c:e2:28:e7:17:5c:85:0a:4a:59:ab:73:eb:
                    0e:ed:b4:f9:67:d7:c6:6f:2b:b6:90:21:37:df:e5:
                    f5:8a:41:30:bb:db:f4:b3:52:0c:55:78:fa:b1:63:
                    c2:c5:d1:04:6a:c5:99:8c:db:ff:68:c3:bd:f9:6f:
                    f5:c8:34:b3:0b:91:84:10:a7:e9:a9:a4:86:aa:1d:
                    7e:34:5c:7d:1d:fa:fa:5f:a1:e1:18:a2:6e:98:2a:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:58:A2:E0:9B:EE:77:F0:49:D1:15:06:30:00:58:AA:8D:D9:E6:1D
            X509v3 Authority Key Identifier:
                keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/31ii4Jvud_BJ0RUGMABYqo3Z5h0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ba8::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:b6:e4:c5:ae:e0:d0:c3:16:b6:22:42:5a:3f:4b:0b:c9:58:
         dc:1c:4a:ee:0a:25:fd:16:cf:fe:f5:1f:52:fb:5d:0b:5c:92:
         f4:6c:30:2a:3b:9e:cd:c0:0f:f0:39:4a:dc:a4:d2:77:2b:0d:
         53:c2:b5:00:d1:ac:4a:6e:cf:b3:e3:a0:54:a9:f5:82:33:b3:
         d2:15:f0:f5:bc:7a:cb:c7:c6:81:77:f6:2c:6d:c5:5b:69:0a:
         9b:29:dd:4f:34:af:51:25:99:56:d7:ac:3b:15:0c:b9:47:cf:
         02:6e:33:a1:18:f8:1e:37:32:5f:da:aa:86:6c:51:90:c3:17:
         fe:b6:c1:5a:a0:b4:6f:39:9c:df:9e:b9:b0:d5:d5:00:13:39:
         d2:3f:cf:23:da:33:31:3b:27:b9:14:0a:ad:1e:ab:0c:36:50:
         a8:8f:bf:87:50:39:6b:50:62:92:f6:b9:bf:0c:01:4b:57:6b:
         55:45:8d:62:e5:a0:a3:08:e2:46:fb:5c:d9:23:f6:53:9f:f6:
         39:14:1c:08:a7:dc:fd:8b:41:9a:a8:3b:b2:ba:75:73:c9:83:
         72:d6:c8:b5:3c:67:b9:ef:18:39:93:5a:b5:21:93:14:87:a0:
         3d:92:b0:d5:54:df:0f:23:65:bf:e6:4a:25:e7:87:12:40:7a:
         58:cb:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org