Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/sw244d_YrklLkTSMaUtcLxSpVSk.roa
File:                     sw244d_YrklLkTSMaUtcLxSpVSk.roa (raw, json)
Hash identifier:          8JZcOUpriDNKj32gCjHaHkbKZJ35WC4/Fy7CrcuiHyU=
Subject key identifier:   B3:0D:B8:E1:DF:D8:AE:49:4B:91:34:8C:69:4B:5C:2F:14:A9:55:29
Certificate issuer:       /CN=d5b8670ca93364f3443f82e3011eac1537197771
Certificate serial:       018964C059E9CE316F7DDDA962B19B3A4F28
Authority key identifier: D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/sw244d_YrklLkTSMaUtcLxSpVSk.roa
Signing time:             Mon 17 Jul 2023 16:47:54 +0000
ROA not before:           Mon 17 Jul 2023 16:47:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        31.41.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:59:e9:ce:31:6f:7d:dd:a9:62:b1:9b:3a:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b8670ca93364f3443f82e3011eac1537197771
        Validity
            Not Before: Jul 17 16:47:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b30db8e1dfd8ae494b91348c694b5c2f14a95529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:e6:7d:a5:f9:d6:87:c0:42:43:b6:19:7f:
                    f1:5a:c8:2e:55:dc:94:e8:91:96:26:73:a2:9e:d5:
                    9d:68:1f:9a:e5:03:ef:87:4a:3b:24:17:80:fb:05:
                    22:60:85:72:92:16:52:bc:e0:74:35:e3:c2:ab:42:
                    df:71:c5:2f:8b:46:79:31:ab:17:53:0e:11:98:10:
                    10:62:20:e1:e5:67:60:64:f6:a6:08:ef:3d:c9:a3:
                    ff:21:ad:2e:a8:42:c7:df:af:da:ed:56:ce:84:6b:
                    c1:62:5a:3e:33:68:73:5c:af:18:e5:25:f1:0c:e6:
                    0e:1e:0d:76:90:c0:a6:c8:81:d3:c9:a7:5f:fb:d2:
                    4f:57:32:b7:fc:39:13:c0:79:9f:b0:54:16:fd:5f:
                    59:8d:2f:17:30:43:34:50:88:64:13:13:67:13:c3:
                    26:db:29:50:e5:6e:64:96:fe:60:7b:37:25:5e:a7:
                    fb:0c:61:56:38:a5:04:74:d8:89:47:7c:5c:15:30:
                    f8:43:91:a5:2c:b0:fe:30:c0:29:0c:72:cb:3b:52:
                    75:88:14:6e:f5:08:ad:92:09:a4:e7:12:5e:29:47:
                    f8:d3:6b:84:23:d9:df:70:25:3d:09:0c:e0:f8:bc:
                    45:79:79:44:67:dd:3e:95:12:d1:ab:9d:41:7b:24:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:B8:E1:DF:D8:AE:49:4B:91:34:8C:69:4B:5C:2F:14:A9:55:29
            X509v3 Authority Key Identifier:
                keyid:D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/sw244d_YrklLkTSMaUtcLxSpVSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:00:3d:82:8f:b3:bf:c7:26:76:db:04:97:de:c0:2c:90:a5:
         42:d4:5b:74:ec:61:5d:c5:3c:81:84:1f:a1:0a:04:70:43:da:
         ab:34:f3:e5:69:16:61:ca:2a:61:e1:ad:68:92:bc:d7:72:29:
         f6:66:54:74:c7:63:bf:6a:2e:34:45:dc:b3:bf:5e:a9:ce:54:
         a1:5b:82:54:12:49:23:dc:8d:2f:09:19:c6:89:d0:40:6a:8c:
         b3:c1:28:dc:2a:78:75:2b:19:b9:97:0b:05:ed:72:8f:25:83:
         b2:5e:d5:3a:1b:80:23:c7:13:8b:38:55:50:7a:20:b8:e9:2d:
         33:20:a8:57:31:ab:80:5f:3a:e1:ef:fa:3d:c8:7d:ca:02:a9:
         61:62:43:1e:41:9c:9d:01:df:72:eb:e9:01:9d:68:a8:71:35:
         cb:30:f3:d4:87:4f:c4:12:ca:2d:b3:71:39:2b:db:9c:27:d4:
         d7:40:f9:60:7d:9e:4f:7c:a5:ed:9b:0e:02:9b:9d:1e:1e:f9:
         b8:a9:f1:7f:2f:0c:bb:05:40:a2:b7:8b:74:9a:d6:bc:da:93:
         18:24:49:8e:e4:54:7f:6c:1f:35:9e:ed:a0:ac:0f:44:b2:75:
         5b:98:e6:0b:ec:bb:3e:71:5d:0f:fc:69:5e:0f:ea:43:e7:f2:
         2b:d3:f6:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFnpzjFvfd2pYrGbOk8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Yjg2NzBjYTkzMzY0ZjM0NDNmODJlMzAxMWVhYzE1Mzcx
OTc3NzEwHhcNMjMwNzE3MTY0NzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzBkYjhlMWRmZDhhZTQ5NGI5MTM0OGM2OTRiNWMyZjE0YTk1NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q7mfaX51ofAQkO2GX/xWsguVdyU
6JGWJnOintWdaB+a5QPvh0o7JBeA+wUiYIVykhZSvOB0NePCq0LfccUvi0Z5MasX
Uw4RmBAQYiDh5WdgZPamCO89yaP/Ia0uqELH36/a7VbOhGvBYlo+M2hzXK8Y5SXx
DOYOHg12kMCmyIHTyadf+9JPVzK3/DkTwHmfsFQW/V9ZjS8XMEM0UIhkExNnE8Mm
2ylQ5W5klv5gezclXqf7DGFWOKUEdNiJR3xcFTD4Q5GlLLD+MMApDHLLO1J1iBRu
9Qitkgmk5xJeKUf402uEI9nfcCU9CQzg+LxFeXlEZ90+lRLRq51BeySR1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMNuOHf2K5JS5E0jGlLXC8UqVUpMB8GA1UdIwQY
MBaAFNW4ZwypM2TzRD+C4wEerBU3GXdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJobkRLa3paUE5FUDRMakFSNnNGVGNaZDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85Y2U1ZjAtYTIzOC00NGU4LThmNWIt
YzVlYzY4ZTU4OWViLzEvc3cyNDRkX1lya2xMa1RTTWFVdGNMeFNwVlNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85Y2U1ZjAtYTIzOC00NGU4LThmNWItYzVlYzY4ZTU4OWVi
LzEvMWJobkRLa3paUE5FUDRMakFSNnNGVGNaZDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHykmMA0G
CSqGSIb3DQEBCwUAA4IBAQAYAD2Cj7O/xyZ22wSX3sAskKVC1Ft07GFdxTyBhB+h
CgRwQ9qrNPPlaRZhyiph4a1okrzXcin2ZlR0x2O/ai40Rdyzv16pzlShW4JUEkkj
3I0vCRnGidBAaoyzwSjcKnh1Kxm5lwsF7XKPJYOyXtU6G4AjxxOLOFVQeiC46S0z
IKhXMauAXzrh7/o9yH3KAqlhYkMeQZydAd9y6+kBnWiocTXLMPPUh0/EEsots3E5
K9ucJ9TXQPlgfZ5PfKXtmw4Cm50eHvm4qfF/Lwy7BUCit4t0mta82pMYJEmO5FR/
bB81nu2grA9EsnVbmOYL7Ls+cV0P/GleD+pD5/Ir0/ZX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:09 2024 by rpki-client on console-ams.rpki-client.org