Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/2m-FhGZi2youQjJLjhtSgfdU0Bg.roa
File:                     2m-FhGZi2youQjJLjhtSgfdU0Bg.roa (raw, json)
Hash identifier:          Pe7t+640cTKATZVCSoBfedJxYpm+1XL9Im7MtvQmaqs=
Subject key identifier:   DA:6F:85:84:66:62:DB:2A:2E:42:32:4B:8E:1B:52:81:F7:54:D0:18
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       018CCA2A73CE4EE4B3F145E6D06C886DE120
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/2m-FhGZi2youQjJLjhtSgfdU0Bg.roa
Signing time:             Tue 02 Jan 2024 12:33:48 +0000
ROA not before:           Tue 02 Jan 2024 12:33:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149457
IP address blocks:        103.25.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 03:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:73:ce:4e:e4:b3:f1:45:e6:d0:6c:88:6d:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  2 12:33:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da6f85846662db2a2e42324b8e1b5281f754d018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:c8:1b:be:56:65:ee:df:25:62:e7:26:a1:
                    58:29:4d:7e:63:76:28:83:65:e8:e3:7e:33:67:9d:
                    9f:d4:55:c8:ba:9e:23:5c:f5:21:18:d1:68:e2:d9:
                    52:40:c5:98:8c:49:62:37:1c:2e:b8:09:be:66:a1:
                    d7:55:18:76:15:d8:e2:22:9a:ec:8e:a3:ee:f5:97:
                    f4:02:84:57:71:ea:d2:13:9d:c9:b4:4e:d9:9b:37:
                    cb:3a:2b:0a:f3:06:88:a3:ea:29:6a:18:12:5d:8b:
                    85:c7:c8:9e:28:b4:e0:52:d2:4b:da:0c:0b:c2:6d:
                    41:db:86:51:60:6d:11:85:9c:14:5e:31:d3:da:c2:
                    4f:cd:ab:99:97:b9:98:d7:d0:dd:9e:1d:82:d2:c6:
                    54:f2:3b:2f:49:e3:da:dc:10:34:e5:a0:e5:b9:e8:
                    32:d4:5a:11:2c:79:82:82:57:83:bd:16:26:46:16:
                    db:bd:a6:e7:4b:ed:81:6a:95:83:5e:0c:06:ac:be:
                    59:c9:e4:74:44:dc:65:5f:5c:e6:6a:3f:ba:f3:e9:
                    9e:94:68:3c:9c:96:c9:b3:17:d3:59:e6:6e:05:f9:
                    4d:9a:86:5a:7c:aa:07:0c:15:ff:35:4e:43:9d:14:
                    b9:05:e3:e8:b1:0d:67:cb:0b:e7:ab:0a:8f:cb:64:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:85:84:66:62:DB:2A:2E:42:32:4B:8E:1B:52:81:F7:54:D0:18
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/2m-FhGZi2youQjJLjhtSgfdU0Bg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:24:51:e9:c5:6a:11:86:43:d1:f7:bc:10:6d:b1:fc:45:dc:
         10:41:f2:80:e8:05:ec:c3:09:c5:f8:07:a4:76:fc:de:da:c1:
         b0:88:f5:86:31:18:b4:8d:df:bc:6f:71:7e:c7:67:54:b4:ff:
         71:f7:2a:90:9f:0a:a1:57:63:42:8d:dd:f2:e8:78:5c:66:a7:
         68:a6:cc:65:72:fc:60:bd:74:2b:a9:3f:d4:04:9b:ca:87:c5:
         b2:fd:bc:a2:05:cd:b3:91:e6:c5:28:b7:0c:d9:74:a8:77:4d:
         e8:26:2a:1a:ea:21:83:87:64:54:78:b0:20:0d:83:f9:bc:58:
         47:db:4a:43:06:63:55:17:bf:17:04:a1:76:38:c5:3a:4d:f1:
         8e:15:d3:c8:6e:71:3a:97:24:b1:2a:e1:c3:ad:90:6a:4d:c4:
         7b:ef:cf:c1:fd:46:1c:36:ed:78:4e:df:86:3a:69:93:cb:57:
         ba:0e:06:07:71:ac:c0:27:eb:c0:28:51:3c:8a:f8:0a:f8:f0:
         f0:03:ae:23:3e:72:e9:62:fd:29:6c:15:6a:65:94:98:60:48:
         85:d1:86:19:0f:5f:b8:25:c1:e7:ee:73:c1:10:22:8b:ef:ac:
         0b:da:8a:82:c3:1c:ac:fd:98:47:82:b4:ad:d2:02:fd:38:47:
         7a:6c:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org