Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Vur7Q4EAv5mHqOY-q4cmuZVucgI.roa
File:                     Vur7Q4EAv5mHqOY-q4cmuZVucgI.roa (raw, json)
Hash identifier:          evlw/2fFJ0pMdA2rloHZ4JxFxFFb2071uUX5s3FL1C4=
Subject key identifier:   56:EA:FB:43:81:00:BF:99:87:A8:E6:3E:AB:87:26:B9:95:6E:72:02
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       0186652A514B758EC7C3030218EEA78C290A
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Vur7Q4EAv5mHqOY-q4cmuZVucgI.roa
Signing time:             Sat 18 Feb 2023 15:35:17 +0000
ROA not before:           Sat 18 Feb 2023 15:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15897
IP address blocks:        193.31.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 Feb 2023 16:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:65:2a:51:4b:75:8e:c7:c3:03:02:18:ee:a7:8c:29:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Feb 18 15:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56eafb438100bf9987a8e63eab8726b9956e7202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:42:33:1d:62:a8:0e:e7:62:ab:57:5f:cd:ce:
                    c4:12:5a:1a:02:53:18:55:99:18:8d:5d:32:80:63:
                    bb:b8:fe:47:6a:24:41:0f:51:b2:ea:4a:c2:33:1a:
                    99:be:e3:63:62:d2:cc:eb:2e:ec:c5:05:51:fc:9d:
                    23:09:e0:b4:82:7e:7c:10:51:2b:d8:15:42:66:99:
                    51:28:8d:08:6f:e6:ba:b7:ef:a8:3a:b3:f7:4e:e0:
                    59:7b:32:e5:e3:bd:26:4f:5b:e8:03:19:dd:81:8b:
                    0f:a3:2d:dc:28:84:89:e5:2a:54:78:bf:0f:28:4b:
                    02:b8:41:3e:a0:fb:6c:9d:59:f8:13:9d:28:f3:e2:
                    32:8d:38:77:36:12:92:68:da:d7:3c:f3:c3:88:0a:
                    91:b4:99:19:55:9e:c5:a6:cb:b7:a3:a3:b6:50:40:
                    93:da:00:ef:89:9e:49:84:b3:33:18:fe:08:72:ec:
                    07:41:99:d5:0f:62:5c:b9:35:9c:64:c2:d5:89:25:
                    a0:7d:3e:e8:de:ca:73:35:5b:aa:8f:7c:24:31:86:
                    94:6f:19:86:c3:af:0a:d4:1a:be:6d:54:3a:fe:5e:
                    d2:d6:a2:1c:ed:96:37:68:07:60:88:80:63:ea:ea:
                    8d:79:e2:f9:6a:b1:7f:55:4d:56:b1:28:33:b5:6a:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:FB:43:81:00:BF:99:87:A8:E6:3E:AB:87:26:B9:95:6E:72:02
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/Vur7Q4EAv5mHqOY-q4cmuZVucgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:77:1a:87:02:7e:f0:af:b4:b7:34:f3:01:52:0f:b5:c3:
         04:48:a4:d4:dc:69:12:93:e8:40:8c:30:07:bb:26:7f:25:0f:
         68:06:c3:74:ae:53:12:ab:89:c7:5a:70:1a:55:7b:2a:a4:c0:
         eb:f6:d6:07:42:57:5e:23:1b:21:82:e8:2d:11:3d:d9:72:4b:
         a4:ef:81:fa:26:b2:cd:a9:72:47:b4:87:15:b4:4f:c5:3f:d1:
         3b:a8:c2:20:97:b4:3b:74:81:f4:88:fc:cc:47:ae:73:36:12:
         da:89:f5:89:8f:7c:f4:db:f5:f8:a3:38:d1:55:8c:03:fa:35:
         c4:0c:33:aa:85:96:c3:1e:3b:3e:07:ff:5a:ca:82:d4:b5:81:
         80:69:69:6d:64:dc:17:3a:4a:6c:39:b1:44:0f:df:97:be:15:
         f5:bd:92:97:ac:4d:c4:cb:99:1d:6b:d4:8e:fa:66:50:d9:9f:
         e0:fd:91:89:9d:a7:8a:e7:dd:df:e9:4c:f4:e2:af:9a:19:fc:
         5d:52:05:77:9e:d5:5e:ae:31:a4:ca:dc:43:2b:db:ed:2e:46:
         55:5f:6f:ca:c5:5e:70:f7:1d:9a:97:76:05:49:6e:80:b3:4f:
         fc:39:2d:b6:7e:f0:a5:49:d7:a8:70:bf:79:3c:d7:69:e0:88:
         ba:c2:3f:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZlKlFLdY7HwwMCGO6njCkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjMwMjE4MTUzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmVhZmI0MzgxMDBiZjk5ODdhOGU2M2VhYjg3MjZiOTk1NmU3MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEIzHWKoDudiq1dfzc7EEloaAlMY
VZkYjV0ygGO7uP5HaiRBD1Gy6krCMxqZvuNjYtLM6y7sxQVR/J0jCeC0gn58EFEr
2BVCZplRKI0Ib+a6t++oOrP3TuBZezLl470mT1voAxndgYsPoy3cKISJ5SpUeL8P
KEsCuEE+oPtsnVn4E50o8+IyjTh3NhKSaNrXPPPDiAqRtJkZVZ7Fpsu3o6O2UECT
2gDviZ5JhLMzGP4IcuwHQZnVD2JcuTWcZMLViSWgfT7o3spzNVuqj3wkMYaUbxmG
w68K1Bq+bVQ6/l7S1qIc7ZY3aAdgiIBj6uqNeeL5arF/VU1WsSgztWq/0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFbq+0OBAL+Zh6jmPquHJrmVbnICMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvVnVyN1E0RUF2NW1IcU9ZLXE0Y211WlZ1Y2dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8HMA0G
CSqGSIb3DQEBCwUAA4IBAQA5pXcahwJ+8K+0tzTzAVIPtcMESKTU3GkSk+hAjDAH
uyZ/JQ9oBsN0rlMSq4nHWnAaVXsqpMDr9tYHQldeIxshgugtET3Zckuk74H6JrLN
qXJHtIcVtE/FP9E7qMIgl7Q7dIH0iPzMR65zNhLaifWJj3z02/X4ozjRVYwD+jXE
DDOqhZbDHjs+B/9ayoLUtYGAaWltZNwXOkpsObFED9+XvhX1vZKXrE3Ey5kda9SO
+mZQ2Z/g/ZGJnaeK593f6Uz04q+aGfxdUgV3ntVerjGkytxDK9vtLkZVX2/KxV5w
9x2al3YFSW6As0/8OS22fvClSdeocL95PNdp4Ii6wj8W
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:24 2024 by rpki-client on console-ams.rpki-client.org