Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/FJp6vUz_kyQa4Ux-r43efL6sbYc.roa
File:                     FJp6vUz_kyQa4Ux-r43efL6sbYc.roa (raw, json)
Hash identifier:          ZGLJ/2FvJBt9B16gF6e1WRgjJtEbVQfWk8ji7+fau10=
Subject key identifier:   14:9A:7A:BD:4C:FF:93:24:1A:E1:4C:7E:AF:8D:DE:7C:BE:AC:6D:87
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       01896871AA9342975DBC3B61778207A39652
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/FJp6vUz_kyQa4Ux-r43efL6sbYc.roa
Signing time:             Tue 18 Jul 2023 10:00:26 +0000
ROA not before:           Tue 18 Jul 2023 10:00:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48910
IP address blocks:        31.186.226.0/23 maxlen: 23
                          31.186.250.0/23 maxlen: 24
                          95.172.68.0/22 maxlen: 22
                          95.172.66.0/23 maxlen: 24
                          95.172.80.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 18:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:71:aa:93:42:97:5d:bc:3b:61:77:82:07:a3:96:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Jul 18 10:00:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=149a7abd4cff93241ae14c7eaf8dde7cbeac6d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:b9:36:75:f9:f2:88:6e:66:60:0f:24:02:
                    e8:c0:d8:ea:f0:77:70:9c:d0:f9:2b:30:b6:64:b2:
                    88:44:5f:52:24:7e:37:6e:3e:38:69:92:b1:24:f7:
                    0c:8a:36:e0:59:e8:87:7b:16:33:3d:b2:d8:8b:8f:
                    22:91:7f:f2:31:a9:84:75:6e:f8:46:e2:e8:30:38:
                    0e:f9:52:bb:fd:57:19:67:84:8d:ea:8a:83:4a:ae:
                    fd:58:45:e3:ac:a6:e2:1e:df:56:83:36:ea:4d:ff:
                    f9:bd:88:00:74:a3:c3:54:38:7e:eb:a4:67:03:db:
                    c5:82:09:03:f4:dd:22:6a:de:36:a1:e1:5c:30:ac:
                    02:44:b8:e9:a2:b2:19:29:1e:ab:72:69:ce:23:23:
                    76:07:79:21:cd:86:73:57:b1:14:48:10:34:4d:75:
                    0d:15:46:67:18:20:fe:90:5c:e7:47:82:39:31:6d:
                    39:32:79:41:43:9f:aa:da:d1:71:4f:36:86:e2:da:
                    46:f2:31:23:9e:33:b5:e1:80:00:a3:0a:07:80:53:
                    49:4e:14:8a:2e:c4:92:64:ef:a5:92:17:40:92:e0:
                    50:e4:d7:9a:62:57:17:7c:c1:30:f1:c5:c0:98:34:
                    5f:fd:de:4a:bf:0e:bf:1a:43:27:88:65:0e:d0:9a:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:7A:BD:4C:FF:93:24:1A:E1:4C:7E:AF:8D:DE:7C:BE:AC:6D:87
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/FJp6vUz_kyQa4Ux-r43efL6sbYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.186.226.0/23
                  31.186.250.0/23
                  95.172.66.0-95.172.71.255
                  95.172.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:0e:5d:81:15:f0:4b:e6:f4:00:16:e6:da:a7:a3:4f:0c:
         e2:b7:23:c4:ab:c6:55:20:b3:0c:55:46:d1:6e:10:65:12:40:
         03:2e:2f:d8:6b:c0:57:35:49:35:08:43:25:59:14:25:5f:cc:
         4d:f0:89:cf:e3:69:0e:24:5d:ec:d0:64:50:24:ef:f5:0d:ea:
         21:54:0d:c6:c3:d5:ec:3d:80:82:55:c9:f9:63:59:0f:b5:e6:
         b7:de:b6:de:5c:4b:a9:6e:86:c8:cb:d5:be:19:a5:83:69:82:
         75:23:22:81:f4:46:9d:e4:c5:85:85:46:6b:7a:76:b5:21:98:
         71:c8:ec:ad:76:41:0c:f9:fb:6c:5b:55:3f:66:30:66:24:4a:
         04:32:16:eb:e6:d6:c4:0b:d7:98:0b:ea:94:f9:95:5e:06:65:
         67:c7:95:a0:6a:4f:1c:b9:dc:20:b9:ac:ae:d6:f1:61:4f:26:
         e9:52:04:54:24:09:a2:b4:f0:ba:07:6a:e0:ab:0b:52:1a:fe:
         3e:4e:a7:77:9a:e2:e3:9f:cb:a2:2b:8c:21:e5:d2:48:8c:f2:
         21:dd:64:8e:be:f3:2a:42:3f:27:b6:94:13:ba:d5:e0:27:00:
         7b:40:fa:fc:f0:94:f9:c5:67:53:8a:68:78:63:05:b6:69:08:
         a0:3b:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org