Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/eJxhtiLuNpVxHZl1TX6v_HCb0Vc.roa
File:                     eJxhtiLuNpVxHZl1TX6v_HCb0Vc.roa (raw, json)
Hash identifier:          /LxugZoLkNfrIrR0ZX/THkqTYZFZYr4qOObcW/rakUM=
Subject key identifier:   78:9C:61:B6:22:EE:36:95:71:1D:99:75:4D:7E:AF:FC:70:9B:D1:57
Certificate issuer:       /CN=140ecb72ff00398d3642ec23f212ada0ea72066d
Certificate serial:       018A953E1BE6B89F934A5A325B7A3913743E
Authority key identifier: 14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/eJxhtiLuNpVxHZl1TX6v_HCb0Vc.roa
Signing time:             Thu 14 Sep 2023 19:49:50 +0000
ROA not before:           Thu 14 Sep 2023 19:49:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     931
IP address blocks:        31.216.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:95:3e:1b:e6:b8:9f:93:4a:5a:32:5b:7a:39:13:74:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140ecb72ff00398d3642ec23f212ada0ea72066d
        Validity
            Not Before: Sep 14 19:49:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=789c61b622ee3695711d99754d7eaffc709bd157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:92:d6:50:f4:15:2d:27:8c:fa:87:fd:c4:
                    9d:a1:b3:31:ef:65:04:51:76:ca:2b:fc:0c:a1:f0:
                    cd:19:4b:40:db:1e:5f:95:ed:81:a4:a6:51:09:7c:
                    a1:8f:be:45:9e:26:e2:f8:d8:d8:37:44:d1:42:87:
                    de:59:47:9b:06:4d:e4:5f:4d:ac:1a:91:ac:36:21:
                    60:f4:35:69:dd:44:4f:68:34:0a:3f:b6:84:4d:da:
                    d8:fd:f1:5d:df:15:a5:db:c7:85:96:2f:b6:39:66:
                    43:21:fc:ec:72:6b:7e:bb:d0:21:ef:1b:de:de:ea:
                    0e:53:25:69:fc:94:e8:c5:7f:e3:88:24:31:14:3d:
                    c7:d4:7f:94:44:9d:bd:69:bf:cf:fb:04:e0:7b:b2:
                    c3:35:9b:d0:f1:2e:01:31:b5:dc:25:ec:67:b2:76:
                    65:21:4a:09:bf:fa:82:29:3d:fc:ed:69:4d:2c:6a:
                    09:c6:c7:4d:41:c7:8b:b2:20:32:48:38:a7:19:d0:
                    e9:a3:ca:20:48:7e:a0:3a:ab:d5:65:e7:c1:7c:5d:
                    e0:39:d8:b6:b4:de:f6:7f:b1:7c:d4:04:4f:5b:0b:
                    d9:07:52:71:e4:16:83:1e:23:c2:3f:58:b8:f6:ad:
                    08:e4:c6:94:3c:27:44:50:3f:24:d8:1b:52:a0:97:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:61:B6:22:EE:36:95:71:1D:99:75:4D:7E:AF:FC:70:9B:D1:57
            X509v3 Authority Key Identifier:
                keyid:14:0E:CB:72:FF:00:39:8D:36:42:EC:23:F2:12:AD:A0:EA:72:06:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FA7Lcv8AOY02Quwj8hKtoOpyBm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/eJxhtiLuNpVxHZl1TX6v_HCb0Vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e70035-b69a-446a-8de4-270e72af21a9/1/FA7Lcv8AOY02Quwj8hKtoOpyBm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.216.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:32:24:86:be:00:50:25:83:35:23:c1:98:57:ed:52:bf:
         63:0b:4c:1b:a7:86:0d:6e:ad:7d:35:20:cf:7a:ff:1a:d2:aa:
         ba:b1:3d:45:6f:0f:80:84:58:c9:e2:b2:97:93:ed:69:f8:ae:
         87:e6:8b:a1:b0:69:34:6b:34:64:e8:14:f0:b3:25:ef:b6:3c:
         0e:c7:ad:df:67:db:0b:71:13:7a:c6:45:0b:5c:06:49:13:f6:
         75:3f:2d:99:42:bc:85:ae:f0:59:96:d1:3c:df:68:0d:6b:d9:
         c4:3b:92:52:ea:19:ba:31:31:81:f5:c5:cd:84:9c:ac:0a:6e:
         47:d2:93:d2:e2:0c:e3:7c:5f:f8:ac:d5:9f:ef:f9:8f:fc:75:
         6d:d5:83:20:e6:43:40:8f:be:8a:c2:7a:65:ca:5b:95:aa:33:
         19:b4:07:8a:96:e4:16:92:e4:de:b2:a5:c2:ee:89:6e:03:39:
         76:78:98:f8:f4:90:1c:09:8b:05:dc:d5:4d:2c:a2:dc:af:99:
         f5:0b:ce:45:c0:3c:4b:35:87:f0:b6:32:27:a2:11:87:5f:e2:
         d8:b6:80:b9:07:36:98:2d:5f:37:85:b3:83:ae:4f:d5:72:0e:
         ad:34:c2:58:2a:19:a7:5c:dc:54:62:1e:ea:7a:70:69:d2:a6:
         93:cb:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:41 2024 by rpki-client on console-fra.rpki-client.org