Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/Dp8JYY6x3qqaPfNxM3UWfy8vpaQ.roa
File:                     Dp8JYY6x3qqaPfNxM3UWfy8vpaQ.roa (raw, json)
Hash identifier:          i3uRTBvP4gBiQOe4Si9GONuwmyJ4NK4xCN0H4Htg884=
Subject key identifier:   0E:9F:09:61:8E:B1:DE:AA:9A:3D:F3:71:33:75:16:7F:2F:2F:A5:A4
Certificate issuer:       /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial:       018570CBF26A94B2F0A75DD237B04498C59D
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/Dp8JYY6x3qqaPfNxM3UWfy8vpaQ.roa
Signing time:             Mon 02 Jan 2023 04:44:52 +0000
ROA not before:           Mon 02 Jan 2023 04:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211933
IP address blocks:        31.10.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:cb:f2:6a:94:b2:f0:a7:5d:d2:37:b0:44:98:c5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
        Validity
            Not Before: Jan  2 04:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e9f09618eb1deaa9a3df3713375167f2f2fa5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:38:41:d8:92:06:ba:e2:5b:b2:5c:3c:3b:
                    b4:c0:96:22:4a:2e:69:6b:24:7d:23:42:d1:6b:ea:
                    aa:c5:45:07:74:40:5d:78:dc:30:9b:f7:ba:80:d7:
                    47:0a:88:33:8f:10:65:88:a9:36:79:e1:b2:79:3f:
                    64:d6:59:e8:c0:a3:90:1b:4c:6a:bb:6d:f5:4d:de:
                    ba:60:00:4a:96:dc:9c:be:0c:58:50:35:c0:d1:e7:
                    72:5c:60:c7:54:6a:31:62:36:4a:33:c9:92:64:45:
                    5d:8f:3f:e8:73:36:c5:dd:66:73:7c:7c:6a:5e:9e:
                    3a:5d:21:5f:c5:f4:36:68:9e:2a:6c:a8:57:be:de:
                    45:71:71:0e:aa:07:49:de:50:f0:d3:1b:8c:5b:c9:
                    9c:8a:c8:75:2d:3d:18:f4:ce:c2:19:a7:36:27:5b:
                    ba:64:b2:3e:f5:1a:57:b4:b1:b8:bf:2b:96:01:18:
                    57:0b:d7:7b:e4:aa:d2:38:d0:0e:b4:0c:72:bd:80:
                    e4:a6:b2:d5:4b:a6:8a:bf:b7:07:80:cd:7a:6a:10:
                    b4:b0:d7:5c:c2:d6:cf:f6:39:22:05:b5:cf:0f:51:
                    ea:d4:c8:32:3b:c5:14:99:03:1c:a3:22:3c:ff:eb:
                    ed:4e:08:c7:ce:65:34:59:3f:11:50:5c:c5:3d:c1:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:09:61:8E:B1:DE:AA:9A:3D:F3:71:33:75:16:7F:2F:2F:A5:A4
            X509v3 Authority Key Identifier:
                keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/Dp8JYY6x3qqaPfNxM3UWfy8vpaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.10.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:94:cf:74:61:e8:ae:81:b7:f6:a0:91:1e:81:95:35:66:
         fc:88:1d:ea:b6:e2:03:df:a5:69:3d:48:85:fa:26:db:6b:4d:
         d3:bf:5e:2b:95:f3:08:74:5b:f9:ff:1f:7f:23:1e:92:ba:71:
         30:b6:27:2a:cf:8c:5c:ff:d8:cf:4e:86:a6:23:1b:94:05:88:
         a7:6c:45:c4:c7:ba:bf:63:bb:46:51:19:06:86:c8:6f:b1:b2:
         e2:77:e1:00:b0:8a:aa:85:88:6e:dc:59:f3:af:f1:24:8c:cc:
         eb:c0:17:e3:09:75:56:7a:3c:c0:1b:9d:b9:0e:4c:48:4e:c9:
         85:a1:a2:19:ff:92:11:bf:68:93:e7:d8:2f:7e:34:50:88:91:
         8c:0e:fd:89:ca:db:ed:d4:ac:e5:09:85:8d:23:b4:d1:f7:a7:
         5f:b8:05:ce:90:df:6b:4a:a6:96:cf:06:00:cc:ec:44:fa:c0:
         83:7a:36:97:29:1c:26:b7:38:fd:30:6c:0b:3a:db:02:8a:ad:
         55:3b:de:46:c4:35:0f:ea:2b:32:c0:9f:40:e0:3a:c6:2f:75:
         e5:9b:3f:7a:a9:c4:34:47:8b:17:16:27:59:ff:f0:db:90:91:
         41:39:d1:e1:e6:41:19:fb:25:a7:4e:65:0f:2f:a2:75:bc:93:
         94:54:01:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy/JqlLLwp13SN7BEmMWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0
NWE4MzYwHhcNMjMwMTAyMDQ0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTlmMDk2MThlYjFkZWFhOWEzZGYzNzEzMzc1MTY3ZjJmMmZhNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdo4QdiSBrriW7JcPDu0wJYiSi5p
ayR9I0LRa+qqxUUHdEBdeNwwm/e6gNdHCogzjxBliKk2eeGyeT9k1lnowKOQG0xq
u231Td66YABKltycvgxYUDXA0edyXGDHVGoxYjZKM8mSZEVdjz/oczbF3WZzfHxq
Xp46XSFfxfQ2aJ4qbKhXvt5FcXEOqgdJ3lDw0xuMW8mcish1LT0Y9M7CGac2J1u6
ZLI+9RpXtLG4vyuWARhXC9d75KrSONAOtAxyvYDkprLVS6aKv7cHgM16ahC0sNdc
wtbP9jkiBbXPD1Hq1MgyO8UUmQMcoyI8/+vtTgjHzmU0WT8RUFzFPcGjWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6fCWGOsd6qmj3zcTN1Fn8vL6WkMB8GA1UdIwQY
MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt
YTVkMTE0OGYyNWJkLzEvRHA4SllZNngzcXFhUGZOeE0zVVdmeTh2cGFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk
LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwoGMA0G
CSqGSIb3DQEBCwUAA4IBAQBzzJTPdGHoroG39qCRHoGVNWb8iB3qtuID36VpPUiF
+ibba03Tv14rlfMIdFv5/x9/Ix6SunEwticqz4xc/9jPToamIxuUBYinbEXEx7q/
Y7tGURkGhshvsbLid+EAsIqqhYhu3Fnzr/EkjMzrwBfjCXVWejzAG525DkxITsmF
oaIZ/5IRv2iT59gvfjRQiJGMDv2Jytvt1KzlCYWNI7TR96dfuAXOkN9rSqaWzwYA
zOxE+sCDejaXKRwmtzj9MGwLOtsCiq1VO95GxDUP6isywJ9A4DrGL3Xlmz96qcQ0
R4sXFidZ//DbkJFBOdHh5kEZ+yWnTmUPL6J1vJOUVAGp
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net