Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/0EsVwC_VsOPW6ymXnTTNQQ6dUIU.roa
File:                     0EsVwC_VsOPW6ymXnTTNQQ6dUIU.roa (raw, json)
Hash identifier:          zGLhpiqKwpUDgl+pM2yBZN9xqUceotPQDHp7c/PNz8E=
Subject key identifier:   D0:4B:15:C0:2F:D5:B0:E3:D6:EB:29:97:9D:34:CD:41:0E:9D:50:85
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       018A4B9D7384DF6C0806031F45A412BF67FB
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/0EsVwC_VsOPW6ymXnTTNQQ6dUIU.roa
Signing time:             Thu 31 Aug 2023 12:42:04 +0000
ROA not before:           Thu 31 Aug 2023 12:42:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209733
IP address blocks:        31.24.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4b:9d:73:84:df:6c:08:06:03:1f:45:a4:12:bf:67:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Aug 31 12:42:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d04b15c02fd5b0e3d6eb29979d34cd410e9d5085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:ad:44:00:3f:4e:cf:3d:cc:9e:04:5c:28:
                    d1:f7:de:a8:8c:b4:db:1f:0e:61:32:6c:50:b4:6b:
                    96:71:cf:97:21:fd:c7:ba:76:45:ac:59:54:6a:95:
                    a3:2d:42:30:d9:bf:23:53:3f:34:09:88:84:cc:cc:
                    f9:97:bc:7a:61:f5:a9:da:f5:8a:e8:70:d4:05:0e:
                    20:39:63:e9:06:ce:82:5b:7a:99:dc:70:18:73:f4:
                    ed:a5:d6:fb:73:08:c7:65:e3:8f:4e:3a:40:13:34:
                    41:24:fe:d2:92:03:f1:51:87:b4:d8:00:b9:c2:86:
                    ad:28:c8:bf:d4:24:51:c0:07:d7:c6:50:65:f5:3a:
                    25:99:e2:e4:b6:16:17:42:d8:0b:12:29:05:7d:b6:
                    07:d2:dd:c4:b9:13:63:33:b3:93:31:85:31:40:4f:
                    21:e3:8e:9e:4a:d7:87:4a:be:65:01:0c:71:8f:ba:
                    52:b0:ac:24:8a:e2:9c:94:8e:ca:17:3f:24:36:71:
                    28:64:e4:54:1a:1a:bd:4d:fa:38:8e:c2:71:d1:22:
                    eb:6b:99:46:e1:59:21:66:48:bc:c2:d6:9e:11:66:
                    14:24:7c:52:34:47:e9:87:21:55:ad:db:e2:d7:25:
                    7d:30:2e:78:e4:28:b8:41:40:c1:61:30:c1:4f:8b:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4B:15:C0:2F:D5:B0:E3:D6:EB:29:97:9D:34:CD:41:0E:9D:50:85
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/0EsVwC_VsOPW6ymXnTTNQQ6dUIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:c0:09:80:a0:0f:1d:91:98:c1:27:ca:2e:5b:99:48:1d:
         2d:ce:4c:9c:0d:43:5b:4f:c4:d4:1d:ed:d6:25:bc:3b:c5:d1:
         48:8b:b5:38:ff:52:84:d3:b6:8e:90:4a:32:dd:42:f0:18:97:
         f4:b7:c0:17:4d:80:61:8d:df:f5:6c:f5:4e:c2:c9:f2:7a:ea:
         86:26:2e:aa:5a:f7:38:10:85:bd:74:b3:ed:da:c1:81:56:81:
         6c:0e:ee:dd:a7:2a:b0:49:92:31:7b:f1:86:0a:6d:57:3c:47:
         0d:bf:c8:5e:e4:21:b0:04:da:87:df:cd:d1:c1:f0:94:7b:69:
         7e:19:5c:ea:4a:0c:97:b6:45:84:d8:0c:3b:0d:02:a5:23:80:
         56:9d:e4:a3:31:88:56:a2:cd:49:65:1a:62:25:b4:67:ac:8b:
         f3:7c:d1:6f:5c:75:37:c1:7b:a2:69:d4:31:00:28:f6:cb:d8:
         7c:4d:a0:96:66:6b:06:ba:62:35:35:8b:bf:b7:af:2f:b5:05:
         4c:29:65:12:3a:1d:41:36:bf:34:eb:05:a5:50:54:5d:aa:e5:
         7f:d7:e1:ec:05:3a:13:b2:87:68:58:87:a1:f5:31:ce:e1:fb:
         9b:6d:c2:e4:ac:81:d2:e8:b0:96:16:1e:41:5c:c0:2d:fd:d8:
         8a:69:1f:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpLnXOE32wIBgMfRaQSv2f7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl
ZTJjZmYwHhcNMjMwODMxMTI0MjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDRiMTVjMDJmZDViMGUzZDZlYjI5OTc5ZDM0Y2Q0MTBlOWQ1MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbutRAA/Ts89zJ4EXCjR996ojLTb
Hw5hMmxQtGuWcc+XIf3HunZFrFlUapWjLUIw2b8jUz80CYiEzMz5l7x6YfWp2vWK
6HDUBQ4gOWPpBs6CW3qZ3HAYc/Ttpdb7cwjHZeOPTjpAEzRBJP7SkgPxUYe02AC5
woatKMi/1CRRwAfXxlBl9TolmeLkthYXQtgLEikFfbYH0t3EuRNjM7OTMYUxQE8h
446eSteHSr5lAQxxj7pSsKwkiuKclI7KFz8kNnEoZORUGhq9Tfo4jsJx0SLra5lG
4VkhZki8wtaeEWYUJHxSNEfphyFVrdvi1yV9MC545Ci4QUDBYTDBT4tfkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNBLFcAv1bDj1uspl500zUEOnVCFMB8GA1UdIwQY
MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt
NGZlM2Y2MTExMGRlLzEvMEVzVndDX1ZzT1BXNnltWG5UVE5RUTZkVUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl
LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxj8MA0G
CSqGSIb3DQEBCwUAA4IBAQAQucAJgKAPHZGYwSfKLluZSB0tzkycDUNbT8TUHe3W
Jbw7xdFIi7U4/1KE07aOkEoy3ULwGJf0t8AXTYBhjd/1bPVOwsnyeuqGJi6qWvc4
EIW9dLPt2sGBVoFsDu7dpyqwSZIxe/GGCm1XPEcNv8he5CGwBNqH383RwfCUe2l+
GVzqSgyXtkWE2Aw7DQKlI4BWneSjMYhWos1JZRpiJbRnrIvzfNFvXHU3wXuiadQx
ACj2y9h8TaCWZmsGumI1NYu/t68vtQVMKWUSOh1BNr806wWlUFRdquV/1+HsBToT
sodoWIeh9THO4fubbcLkrIHS6LCWFh5BXMAt/diKaR9d
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org