Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hJT_yeEDPJDfUrI9rghX8jo5ThA.roa
File:                     hJT_yeEDPJDfUrI9rghX8jo5ThA.roa (raw, json)
Hash identifier:          xdZ3fVgJC3HqIVOVs3BR+KhTTr9umGZ/jCnjYsl7vIY=
Subject key identifier:   84:94:FF:C9:E1:03:3C:90:DF:52:B2:3D:AE:08:57:F2:3A:39:4E:10
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01983687DFAAAFB19AAE76E0FFA7726D97F8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hJT_yeEDPJDfUrI9rghX8jo5ThA.roa
Signing time:             Wed 23 Jul 2025 09:05:30 +0000
ROA not before:           Wed 23 Jul 2025 09:05:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     7029
IP address blocks:        2a06:1181:2::/48 maxlen: 48
                          2a09:17c0:22::/48 maxlen: 48
                          2a09:17c2::/32 maxlen: 32
                          2a0a:2940::/29 maxlen: 29
                          2a0a:2d07:9a::/48 maxlen: 48
                          2a0c:7884::/32 maxlen: 32
                          2a0c:7886:22::/48 maxlen: 48
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0e:1a80:1::/48 maxlen: 48
                          2a0e:1a80:1312::/48 maxlen: 48
                          2a0e:2240::/29 maxlen: 29
                          2a0e:c785:1::/48 maxlen: 48
                          2a0e:c785:273::/48 maxlen: 48
                          2a0e:f200::/48 maxlen: 48
                          2a0e:f604:10::/48 maxlen: 48
                          2a0f:1200:2::/48 maxlen: 48
                          2a0f:1203::/32 maxlen: 32
                          2a0f:1580::/32 maxlen: 32
                          2a0f:1587:100::/48 maxlen: 48
                          2a0f:1e80:d9a8::/48 maxlen: 48
                          2a0f:1e84:3f::/48 maxlen: 48
                          2a0f:1e86:100::/48 maxlen: 48
                          2a0f:3043::/32 maxlen: 32
                          2a0f:3047:fc1d::/48 maxlen: 48
                          2a0f:31c2::/32 maxlen: 32
                          2a0f:3d80:bac::/48 maxlen: 48
                          2a0f:3d86:77::/48 maxlen: 48
                          2a0f:7d06:102::/48 maxlen: 48
                          2a0f:7d06:9c8a::/48 maxlen: 48
                          2a0f:bc00:100::/48 maxlen: 48
                          2a0f:df45:fc78::/48 maxlen: 48
                          2a0f:df47:200::/48 maxlen: 48
                          2a0f:e202:55::/48 maxlen: 48
                          2a0f:e6c6:5532::/48 maxlen: 48
                          2a0f:e7c5:f8f9::/48 maxlen: 48
                          2a0f:e847:77::/48 maxlen: 48
                          2a0f:e847:acab::/48 maxlen: 48
                          2a10:33c0::/29 maxlen: 29
                          2a10:5c00::/29 maxlen: 29
                          2a10:67c2:3::/48 maxlen: 48
                          2a11:b200::/29 maxlen: 29
                          2a12:ac43:1::/48 maxlen: 48
                          2a12:ac44:1312::/48 maxlen: 48
                          2a12:ecc3:2::/48 maxlen: 48
                          2a13:18c0:2::/48 maxlen: 48
                          2a13:18c0:22::/48 maxlen: 48
                          2a13:8c82:1::/48 maxlen: 48
                          2a13:9281:100::/48 maxlen: 48
                          2a13:c900:fd1a::/48 maxlen: 48
                          2a13:e103::/32 maxlen: 32
                          2a13:e107:99::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 24 Jul 2025 19:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:87:df:aa:af:b1:9a:ae:76:e0:ff:a7:72:6d:97:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jul 23 09:05:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8494ffc9e1033c90df52b23dae0857f23a394e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:be:ce:17:2d:0f:31:14:fe:b1:57:a6:61:
                    aa:ca:d2:c7:39:12:18:7a:e9:f5:61:1a:53:41:03:
                    d2:a4:a1:82:55:a5:39:6e:16:62:bd:69:60:e2:e3:
                    c9:6f:dd:c6:7d:89:b0:c2:49:bd:d7:80:22:cf:8b:
                    36:60:a3:f2:f6:07:b2:1f:0b:1b:81:d9:c2:02:a7:
                    df:92:7d:88:6e:cb:80:5a:40:ce:26:2f:de:02:03:
                    29:cd:a5:72:de:37:15:33:9e:e0:8e:50:73:8f:b6:
                    40:db:cb:b0:26:5f:c7:97:f0:d0:f3:50:54:3f:12:
                    2d:dc:87:fd:df:2c:53:4b:2e:f0:55:79:e4:9a:5f:
                    64:b7:c1:c4:1f:a2:d1:f7:50:ee:09:0d:3b:a7:93:
                    c3:93:e7:ee:38:bf:2e:07:a1:e4:74:b0:d3:51:fd:
                    65:cf:30:82:5d:8e:03:b9:a8:32:5d:c4:61:47:99:
                    26:36:bc:bb:fc:d3:34:4e:d4:6d:ae:2c:bb:c3:e6:
                    f5:57:c4:d2:20:78:65:8c:ad:93:63:43:3d:17:33:
                    de:44:58:d6:d5:0b:c1:9b:25:a3:2a:5f:b3:6f:a0:
                    8e:c4:57:4c:17:d1:4e:25:c9:48:0b:e2:1d:29:e9:
                    50:b0:db:db:28:e8:c1:f5:7f:ee:40:bc:6d:f9:a5:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:94:FF:C9:E1:03:3C:90:DF:52:B2:3D:AE:08:57:F2:3A:39:4E:10
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hJT_yeEDPJDfUrI9rghX8jo5ThA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1181:2::/48
                  2a09:17c0:22::/48
                  2a09:17c2::/32
                  2a0a:2940::/29
                  2a0a:2d07:9a::/48
                  2a0c:7884::/32
                  2a0c:7886:22::/48
                  2a0e:15c0:4::/48
                  2a0e:1a80:1::/48
                  2a0e:1a80:1312::/48
                  2a0e:2240::/29
                  2a0e:c785:1::/48
                  2a0e:c785:273::/48
                  2a0e:f200::/48
                  2a0e:f604:10::/48
                  2a0f:1200:2::/48
                  2a0f:1203::/32
                  2a0f:1580::/32
                  2a0f:1587:100::/48
                  2a0f:1e80:d9a8::/48
                  2a0f:1e84:3f::/48
                  2a0f:1e86:100::/48
                  2a0f:3043::/32
                  2a0f:3047:fc1d::/48
                  2a0f:31c2::/32
                  2a0f:3d80:bac::/48
                  2a0f:3d86:77::/48
                  2a0f:7d06:102::/48
                  2a0f:7d06:9c8a::/48
                  2a0f:bc00:100::/48
                  2a0f:df45:fc78::/48
                  2a0f:df47:200::/48
                  2a0f:e202:55::/48
                  2a0f:e6c6:5532::/48
                  2a0f:e7c5:f8f9::/48
                  2a0f:e847:77::/48
                  2a0f:e847:acab::/48
                  2a10:33c0::/29
                  2a10:5c00::/29
                  2a10:67c2:3::/48
                  2a11:b200::/29
                  2a12:ac43:1::/48
                  2a12:ac44:1312::/48
                  2a12:ecc3:2::/48
                  2a13:18c0:2::/48
                  2a13:18c0:22::/48
                  2a13:8c82:1::/48
                  2a13:9281:100::/48
                  2a13:c900:fd1a::/48
                  2a13:e103::/32
                  2a13:e107:99::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:7e:f9:d0:1e:fa:ef:52:d2:56:1f:57:85:5a:bd:09:db:
         18:d5:c4:9b:a4:a0:cc:1e:87:ec:11:8a:59:8d:9c:25:d1:8c:
         84:06:e1:8b:f4:3f:69:20:ec:a7:8f:5b:86:67:3a:fd:a6:cd:
         82:3d:5b:5f:ed:83:42:89:07:da:5f:de:ee:69:63:58:a6:ca:
         31:4c:b4:c3:05:77:71:f5:9b:6e:6e:63:5d:92:ac:c0:90:d0:
         75:bf:21:01:4e:06:9a:b1:95:a2:9f:50:33:7f:f1:10:f3:7a:
         9c:47:a5:5b:4c:ea:7d:e2:c8:9b:3b:35:ad:d0:a3:04:12:75:
         a2:d6:22:f9:37:22:c6:9d:14:21:c2:36:1e:ed:d8:79:ba:28:
         67:86:8e:3a:a9:13:07:95:d2:36:fa:ce:c4:d9:fd:ae:b0:d3:
         6e:32:48:93:6a:82:fe:88:fb:86:05:0e:50:d7:9a:91:1d:2f:
         4a:cc:64:f7:55:a5:58:e1:aa:4d:63:a9:18:13:77:61:c8:f6:
         1b:cf:90:04:aa:9a:5f:5d:b9:dc:0e:4a:e1:4f:d8:4b:fc:a3:
         20:51:fa:77:2a:ac:ec:3e:c6:c3:df:ab:05:20:e2:7d:42:d5:
         ad:af:44:d5:b5:b0:d3:89:c1:a2:7b:b5:10:92:bf:47:0c:50:
         a2:6a:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:58 2025 by rpki-client