Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/V755-HqncgwAEc7ooPfbM2URRxM.roa
File:                     V755-HqncgwAEc7ooPfbM2URRxM.roa (raw, json)
Hash identifier:          yxQvsKCnJJ6zoCd09I8L/mdpWJWtXVuPrKILga0zm3A=
Subject key identifier:   57:BE:79:F8:7A:A7:72:0C:00:11:CE:E8:A0:F7:DB:33:65:11:47:13
Certificate issuer:       /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial:       0194252040446A0CD9BE24809B778521D75C
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/V755-HqncgwAEc7ooPfbM2URRxM.roa
Signing time:             Thu 02 Jan 2025 03:47:38 +0000
ROA not before:           Thu 02 Jan 2025 03:47:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        94.231.215.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 13 Jan 2025 19:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:20:40:44:6a:0c:d9:be:24:80:9b:77:85:21:d7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
        Validity
            Not Before: Jan  2 03:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57be79f87aa7720c0011cee8a0f7db3365114713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:27:d6:d7:25:75:48:e9:d2:cf:c7:16:af:
                    b2:9c:3d:e6:5e:81:73:9e:89:6b:21:0e:99:12:01:
                    a2:37:9d:85:71:29:89:4d:5a:66:a6:d3:55:6a:04:
                    3f:e7:dd:7b:bf:3b:5b:b2:79:9e:72:bf:6b:4e:d4:
                    a9:67:47:8c:2e:39:54:33:67:7a:43:28:0d:43:6b:
                    d7:c5:63:a4:dd:bc:f6:c4:c0:8d:0e:46:96:f6:ac:
                    b4:2c:f7:15:e7:ed:13:39:83:e5:cf:0c:da:7d:29:
                    37:21:22:1b:a5:56:3b:a6:a0:bd:b5:8e:04:7d:74:
                    5a:e9:14:37:9e:25:ba:10:a0:ed:20:6f:1b:ea:c3:
                    03:2b:4a:0e:2a:f9:14:6e:91:20:8f:7f:78:ad:f4:
                    34:d5:de:dc:35:b0:a0:0b:bf:f2:63:da:c0:b4:94:
                    22:ac:81:32:60:97:0f:5d:60:3a:03:6f:5c:00:18:
                    0d:1c:8b:11:61:17:75:ce:36:46:20:10:f1:ba:9e:
                    6f:be:f6:63:66:7e:ce:33:b3:b9:fd:15:27:f9:56:
                    17:6a:bf:34:f2:b6:91:d7:8c:b0:b9:7b:dc:12:2f:
                    60:9a:15:a2:58:0e:af:04:36:95:d4:fc:01:59:8d:
                    38:03:9e:ac:06:37:0a:c5:6a:a0:6b:2c:9a:6f:6d:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:79:F8:7A:A7:72:0C:00:11:CE:E8:A0:F7:DB:33:65:11:47:13
            X509v3 Authority Key Identifier:
                keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/V755-HqncgwAEc7ooPfbM2URRxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.231.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a5:57:8b:57:6a:ff:52:dc:a7:6e:4b:bf:81:79:f7:4e:b8:
         26:0e:c6:7d:f2:2b:96:9c:b5:e5:36:7b:54:90:31:6a:5e:f5:
         35:31:88:06:3f:99:4b:02:af:bd:79:95:0d:36:b6:20:6d:7f:
         d1:c4:93:c4:2a:a9:89:72:5b:b9:8c:ac:d4:68:f5:2c:1a:1d:
         30:6a:09:03:8d:66:1b:31:96:95:eb:56:2b:55:fc:fe:13:28:
         42:13:22:54:7f:f3:25:d2:91:cc:4e:8a:4b:83:00:91:3c:5a:
         65:04:90:ea:26:7d:11:40:b7:e2:73:37:c3:d4:2c:8b:47:2f:
         57:13:74:0f:13:fa:51:f4:f7:4c:b9:2a:15:4e:b6:f3:29:6d:
         43:1b:8e:6a:99:27:17:40:f7:e9:32:a2:8e:e9:f1:a5:b7:e1:
         d4:c8:45:7a:18:f2:54:38:98:45:d3:90:18:bc:69:75:8b:cd:
         09:96:dc:ef:ff:e7:18:c1:57:e7:21:a3:30:30:37:64:0b:ce:
         f3:c7:85:dd:a9:ed:f8:1c:d6:f6:a2:de:d8:0c:fe:de:c3:47:
         ab:96:c7:e2:0a:23:56:d3:46:a9:15:f8:c4:a5:6c:86:e1:a7:
         76:b2:4a:f3:9c:bf:f8:25:b2:6d:43:9a:9f:25:f0:b3:6f:c4:
         3b:18:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:31:30 2025 by rpki-client