Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pllDEDp33t0X8udxzTSTMrFgI0g.roa
File:                     pllDEDp33t0X8udxzTSTMrFgI0g.roa (raw, json)
Hash identifier:          ZwtgsmajhPFgMqeTSL/re2mtAnfu+NFjyvJQzlxOEIU=
Subject key identifier:   A6:59:43:10:3A:77:DE:DD:17:F2:E7:71:CD:34:93:32:B1:60:23:48
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       01981CDEE3A1F76A5D37984446A6E2ACD06A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pllDEDp33t0X8udxzTSTMrFgI0g.roa
Signing time:             Fri 18 Jul 2025 09:30:25 +0000
ROA not before:           Fri 18 Jul 2025 09:30:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206443
IP address blocks:        94.183.174.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 21 Jul 2025 17:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:1c:de:e3:a1:f7:6a:5d:37:98:44:46:a6:e2:ac:d0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul 18 09:30:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a65943103a77dedd17f2e771cd349332b1602348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:ee:88:26:40:0b:8e:09:2a:a1:b1:26:76:
                    c4:1c:7c:2e:3f:89:22:7e:ca:84:c8:f6:90:a8:6a:
                    88:d6:47:7e:b8:ac:30:e9:b4:f1:81:c6:15:86:7d:
                    39:6a:ef:0b:c1:b4:0f:02:89:6c:23:77:7e:da:a8:
                    57:f5:5f:15:52:ea:d4:b1:75:f6:ac:12:21:ea:2e:
                    d5:a3:e7:20:18:86:a9:5f:2e:2a:eb:c9:c1:ba:3a:
                    25:60:2e:f5:f8:86:d2:b4:bb:06:34:ae:99:cc:60:
                    9c:d7:0f:aa:5e:ee:9d:8c:9d:61:1e:69:2f:56:62:
                    c4:d0:43:e5:67:31:b7:0c:66:c0:d9:80:73:b6:83:
                    55:9c:8f:e7:a3:80:f1:55:e2:c6:36:7d:02:fd:f3:
                    34:58:41:72:bb:9d:9e:0f:bb:ed:c5:fb:f0:c7:ce:
                    b2:4e:b2:57:45:d8:80:4a:03:8c:ad:c6:3a:4a:38:
                    7c:51:e6:f8:4c:55:43:0d:5e:03:0e:68:06:88:8a:
                    8c:18:07:6e:81:db:db:df:1c:b9:b2:7e:c1:a4:d1:
                    60:84:f8:e7:d8:23:bb:36:1d:13:98:7e:fd:3c:cb:
                    6f:d7:79:e2:fd:62:15:7c:02:70:ec:f6:d2:12:1d:
                    ac:93:e9:5e:ca:c2:08:06:f1:fc:9d:26:10:e7:fc:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:59:43:10:3A:77:DE:DD:17:F2:E7:71:CD:34:93:32:B1:60:23:48
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pllDEDp33t0X8udxzTSTMrFgI0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:a6:36:49:4c:a6:67:38:5f:7d:50:67:02:ac:4e:61:21:
         fd:02:40:9e:a2:8d:d2:61:31:06:4d:ab:8d:d1:ae:0e:d2:96:
         87:dd:4c:dd:b7:2c:51:f6:f7:e1:49:2d:f1:80:5e:ef:f1:55:
         24:18:02:5c:30:ee:f3:29:11:ec:3b:27:d3:07:64:74:d7:56:
         ec:6f:9a:a5:a3:20:5d:e3:83:84:37:aa:1c:31:10:ed:7d:21:
         e1:21:7b:60:60:bc:b4:8f:fa:35:95:e4:e6:7b:2a:6e:b0:8b:
         7a:a8:89:43:54:a7:14:e2:f7:6c:81:75:3f:07:3c:b2:40:4e:
         aa:89:65:1f:85:0c:46:39:07:18:5f:95:c3:d0:e6:e7:93:73:
         54:c6:0e:c9:12:c3:73:99:92:0a:3e:76:d6:39:f5:4a:b4:e2:
         3d:7d:31:79:9a:4d:76:f3:32:84:19:d4:f0:8c:b2:01:ea:29:
         f5:89:80:f9:a0:f5:1d:36:72:00:3e:63:e9:da:9e:21:61:6a:
         78:19:93:5c:d2:d6:68:f8:a8:51:f5:07:8f:5e:67:e3:5f:f3:
         87:85:72:73:a8:a9:12:6a:1d:ba:f5:78:f0:2b:96:22:65:3d:
         88:23:b1:69:d4:ed:38:b0:90:50:3e:4e:6d:81:24:ed:62:5b:
         e6:29:49:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgc3uOh92pdN5hERqbirNBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzE4MDkzMDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjU5NDMxMDNhNzdkZWRkMTdmMmU3NzFjZDM0OTMzMmIxNjAyMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC7uiCZAC44JKqGxJnbEHHwuP4ki
fsqEyPaQqGqI1kd+uKww6bTxgcYVhn05au8LwbQPAolsI3d+2qhX9V8VUurUsXX2
rBIh6i7Vo+cgGIapXy4q68nBujolYC71+IbStLsGNK6ZzGCc1w+qXu6djJ1hHmkv
VmLE0EPlZzG3DGbA2YBztoNVnI/no4DxVeLGNn0C/fM0WEFyu52eD7vtxfvwx86y
TrJXRdiASgOMrcY6Sjh8Ueb4TFVDDV4DDmgGiIqMGAdugdvb3xy5sn7BpNFghPjn
2CO7Nh0TmH79PMtv13ni/WIVfAJw7PbSEh2sk+leysIIBvH8nSYQ5/x8owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZZQxA6d97dF/Lncc00kzKxYCNIMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcGxsREVEcDMzdDBYOHVkeHpUU1RNckZnSTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXreuMA0G
CSqGSIb3DQEBCwUAA4IBAQBDK6Y2SUymZzhffVBnAqxOYSH9AkCeoo3SYTEGTauN
0a4O0paH3UzdtyxR9vfhSS3xgF7v8VUkGAJcMO7zKRHsOyfTB2R011bsb5qloyBd
44OEN6ocMRDtfSHhIXtgYLy0j/o1leTmeypusIt6qIlDVKcU4vdsgXU/BzyyQE6q
iWUfhQxGOQcYX5XD0Obnk3NUxg7JEsNzmZIKPnbWOfVKtOI9fTF5mk128zKEGdTw
jLIB6in1iYD5oPUdNnIAPmPp2p4hYWp4GZNc0tZo+KhR9QePXmfjX/OHhXJzqKkS
ah269XjwK5YiZT2II7Fp1O04sJBQPk5tgSTtYlvmKUlK
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:56 2025 by rpki-client