Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/uVZ9SRxm9p7T4aiYkybTUbtLizM.roa
File:                     uVZ9SRxm9p7T4aiYkybTUbtLizM.roa (raw, json)
Hash identifier:          XibV4pUnmART0ngMA5zx1e08u/U/GkEQafnmajluiQs=
Subject key identifier:   B9:56:7D:49:1C:66:F6:9E:D3:E1:A8:98:93:26:D3:51:BB:4B:8B:33
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       01896F598C5AB4E912F734B9051A3D2F1AB7
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/uVZ9SRxm9p7T4aiYkybTUbtLizM.roa
Signing time:             Wed 19 Jul 2023 18:11:26 +0000
ROA not before:           Wed 19 Jul 2023 18:11:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55096
IP address blocks:        31.186.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6f:59:8c:5a:b4:e9:12:f7:34:b9:05:1a:3d:2f:1a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Jul 19 18:11:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9567d491c66f69ed3e1a8989326d351bb4b8b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:20:e3:8a:2a:a2:d0:4d:aa:82:d9:a3:8a:
                    53:aa:0c:c2:41:5e:ad:3b:81:22:42:0d:96:0f:54:
                    a5:0a:ef:e5:da:d0:88:d8:e2:fd:90:6d:1e:59:d9:
                    d1:2a:95:fc:2e:46:3b:9f:8b:8b:7c:f0:26:1b:e2:
                    bc:73:d3:cd:af:19:c9:56:b7:c3:3e:52:9a:b0:d3:
                    7d:a3:52:4b:a9:5a:69:c1:55:cd:5e:c0:eb:8b:f8:
                    43:97:26:28:22:71:35:4e:a8:72:60:00:cf:2f:3b:
                    fb:96:ce:24:f0:5d:33:28:c6:c5:27:2e:38:ba:25:
                    11:da:45:c2:fa:65:db:b5:02:e9:da:37:24:f6:bc:
                    49:6e:a7:9f:16:62:bd:2c:76:2d:ba:cc:aa:15:fa:
                    ba:8f:cf:ff:32:e7:9c:23:36:e2:45:5b:11:26:3f:
                    03:b4:f5:51:b1:f2:49:d1:a3:b6:14:16:c7:8a:a2:
                    d3:e7:49:f8:66:12:e5:6c:26:0a:02:fc:bc:c7:89:
                    77:ea:b3:dc:eb:75:92:01:eb:f7:5e:ba:c1:ac:1a:
                    b8:82:59:8c:82:1e:a4:7e:b5:d4:28:da:22:ed:f4:
                    d2:3c:59:9f:72:a8:11:26:ca:1c:b1:32:9c:8c:19:
                    f2:c4:a2:19:e7:32:a8:bc:0e:b9:07:84:8b:f9:f8:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:56:7D:49:1C:66:F6:9E:D3:E1:A8:98:93:26:D3:51:BB:4B:8B:33
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/uVZ9SRxm9p7T4aiYkybTUbtLizM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.186.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:d0:0a:97:5a:0b:1a:1e:e6:d7:be:ad:f2:a0:e7:13:4c:
         01:ea:92:7e:b2:ac:7a:12:2c:78:c7:9c:46:82:fb:3d:6e:70:
         03:20:20:55:1f:3a:e4:a9:6f:30:fd:38:73:f3:d3:95:f6:c8:
         b9:11:08:4f:f7:e5:ed:3d:48:11:65:f6:6e:26:73:2b:45:28:
         90:61:7f:23:76:b2:06:5b:f4:27:3e:a1:ee:db:21:8f:49:c2:
         d3:e6:0c:f4:cc:99:00:a2:ed:f2:07:ef:74:55:06:42:8e:9c:
         f1:9a:61:4a:9e:42:c2:dd:60:94:c0:75:a5:92:19:41:6b:4a:
         07:f6:f1:f5:5c:2c:92:66:a6:ce:39:da:f8:6d:49:02:a0:a0:
         de:63:4f:c8:5f:a8:ea:75:b6:84:a7:64:28:b0:0e:9f:cd:ae:
         d0:c1:ad:27:ed:b7:d2:03:58:09:b8:c7:01:65:ea:11:75:9b:
         fb:e8:61:63:b3:99:81:45:7a:45:13:0c:c2:32:c2:60:d4:95:
         72:14:2a:73:73:06:28:e4:e2:44:9f:61:37:25:d6:4d:42:be:
         48:b0:2a:c1:71:a1:77:45:bc:ce:9d:77:fe:c8:7e:66:b5:d1:
         e2:e5:93:38:b1:9f:a0:3c:10:cb:91:66:9f:fd:75:43:ad:b5:
         7d:b6:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:02 2024 by rpki-client on console-ams.rpki-client.org