Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/eo7p5JGfb99Yu2lHhx8YOjOj-5I.roa
File:                     eo7p5JGfb99Yu2lHhx8YOjOj-5I.roa (raw, json)
Hash identifier:          8eSHHXWqTqZPZM8wP3/S5livEoWaBwbJD7bqhaMvHOo=
Subject key identifier:   7A:8E:E9:E4:91:9F:6F:DF:58:BB:69:47:87:1F:18:3A:33:A3:FB:92
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       019606DAE14C8390DCD14D861B815DEC4D8F
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/eo7p5JGfb99Yu2lHhx8YOjOj-5I.roa
Signing time:             Sat 05 Apr 2025 16:48:49 +0000
ROA not before:           Sat 05 Apr 2025 16:48:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212582
IP address blocks:        31.14.183.0/24 maxlen: 24
                          2a14:9680::/29 maxlen: 48
Validation:               Failed, certificate revoked on Thu 10 Apr 2025 13:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:06:da:e1:4c:83:90:dc:d1:4d:86:1b:81:5d:ec:4d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Apr  5 16:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a8ee9e4919f6fdf58bb6947871f183a33a3fb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:ba:60:de:15:1b:bd:f3:ee:8b:3c:25:66:
                    1c:83:95:d8:f8:ca:8c:ee:a1:f1:5e:17:91:41:51:
                    6f:46:14:77:7b:88:57:11:9f:ab:bc:89:3c:ea:81:
                    8b:12:97:a5:4f:bc:76:75:e6:36:a8:7f:ae:c4:e8:
                    60:34:6d:a4:07:01:dc:dd:d1:84:b8:94:16:2d:cf:
                    aa:1a:1a:0e:05:3e:82:0e:58:57:06:73:72:a3:0c:
                    c4:c0:67:a4:02:de:d8:33:8c:e9:ba:3d:d8:71:ab:
                    39:84:f0:35:97:db:57:1d:30:4f:1b:16:42:e8:47:
                    c1:e4:f2:93:d8:09:e4:53:4c:a2:40:bf:06:6d:2f:
                    0c:1e:00:8c:f3:dc:36:77:6c:14:8a:16:12:57:29:
                    15:5c:19:c3:cb:e7:a2:0a:33:64:df:db:7b:c9:b8:
                    ae:c3:f4:c1:44:77:d2:57:27:76:e0:55:d9:14:58:
                    58:43:f4:70:10:62:03:cf:8c:5b:bc:94:36:5f:c8:
                    39:c4:41:af:3b:ab:4d:ad:82:d6:b9:74:e0:be:4d:
                    87:47:68:7a:78:d3:99:9d:50:df:a4:76:8f:5b:76:
                    df:1d:93:66:9b:5f:c8:3c:fd:7f:1a:c7:35:6e:ec:
                    d8:a0:95:cd:02:8a:af:57:9d:38:9e:93:ce:44:a4:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8E:E9:E4:91:9F:6F:DF:58:BB:69:47:87:1F:18:3A:33:A3:FB:92
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/eo7p5JGfb99Yu2lHhx8YOjOj-5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.183.0/24
                IPv6:
                  2a14:9680::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:15:b9:8a:ca:70:fb:e5:8c:be:fe:7c:3b:82:0f:fd:9a:
         88:42:d5:1d:88:f3:54:5d:1e:5d:32:35:20:c8:0c:de:2f:8e:
         87:4e:61:02:d1:58:73:0f:e5:f6:03:6c:fd:1c:2b:6e:bc:aa:
         f4:b3:77:a7:5d:af:d6:95:40:90:a4:66:a7:a1:c0:e3:a5:fe:
         b8:27:1a:a6:00:af:36:61:22:c7:26:72:d6:f0:4f:a5:60:68:
         24:3e:4f:ac:64:6d:aa:66:55:58:41:e9:53:d0:2e:53:00:61:
         12:03:b9:55:db:5b:8a:db:f2:30:7f:a1:e0:22:d5:d0:83:ad:
         fd:cd:bd:02:a4:58:5e:71:f1:fd:ce:df:d6:64:d7:37:85:2c:
         a3:15:86:13:f0:d7:12:e7:c8:94:8c:6c:6b:74:d0:21:bd:18:
         87:47:cb:5f:b6:d4:5a:f3:c9:fd:de:b1:5c:38:ac:6c:54:2b:
         98:9f:7f:86:88:7d:5a:1b:8e:9c:e9:7f:ef:68:c7:fe:47:24:
         39:95:ca:20:f5:ad:41:69:24:14:6a:74:b9:04:f5:a6:9e:c8:
         e7:17:64:cd:21:ff:57:04:3c:81:ac:f6:80:72:69:1e:76:3c:
         d8:d5:8d:92:98:1f:3f:09:f6:29:27:45:df:d4:11:6f:39:e6:
         f1:19:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:43 2025 by rpki-client