Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/E_mIJtmRLZ_8zelU-9SzV0A3Dh8.roa
File:                     E_mIJtmRLZ_8zelU-9SzV0A3Dh8.roa (raw, json)
Hash identifier:          G0uTyZTjIQLULGIc+Io/A2Ye29SvK9g0LVLByDetF+4=
Subject key identifier:   13:F9:88:26:D9:91:2D:9F:FC:CD:E9:54:FB:D4:B3:57:40:37:0E:1F
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019710BE95792662A69EA3E06108D74AE07E
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/E_mIJtmRLZ_8zelU-9SzV0A3Dh8.roa
Signing time:             Tue 27 May 2025 07:56:54 +0000
ROA not before:           Tue 27 May 2025 07:56:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        188.209.132.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 29 May 2025 07:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:10:be:95:79:26:62:a6:9e:a3:e0:61:08:d7:4a:e0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: May 27 07:56:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13f98826d9912d9ffccde954fbd4b35740370e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:03:32:0c:b4:d6:4f:d4:59:b4:42:4f:a5:
                    d2:9b:d6:09:9e:0f:22:ea:8b:96:b1:6b:dd:28:e1:
                    94:e6:0f:d4:ed:3f:d5:ba:a9:81:f8:d8:4a:04:d8:
                    c1:0a:11:1f:4b:7b:9f:8f:9c:e4:b9:e3:e1:cc:3c:
                    ea:6d:ac:7e:6a:24:c4:1b:e8:8e:90:40:d6:be:62:
                    76:38:3b:08:bf:4b:c0:8c:5e:b7:48:6e:f9:69:4b:
                    3d:ff:35:5e:b8:e4:33:d4:b0:bb:64:76:30:66:cd:
                    70:05:65:45:da:0a:6f:f6:39:c1:f3:50:8d:a7:18:
                    9b:39:0e:01:92:3d:c4:35:7e:d7:7c:f6:e2:51:b0:
                    7a:8c:97:a4:58:ba:bc:93:3d:9f:61:fd:f3:b1:b6:
                    2f:8d:7d:c5:24:61:18:f3:83:20:b9:6b:19:90:92:
                    dc:49:97:33:3a:7e:89:a7:72:44:f9:2d:71:fe:3e:
                    65:94:fe:c0:ad:7a:41:85:86:ca:79:06:5f:ca:10:
                    ec:af:dd:6d:62:ec:33:7a:c6:d8:de:68:55:4a:a9:
                    94:a7:6b:99:f9:22:c6:94:8f:35:f3:cf:06:9b:70:
                    48:76:97:28:74:b1:71:9d:38:e1:6b:8a:5b:06:be:
                    78:44:a4:ca:a5:85:dc:95:6d:65:ac:07:38:94:cb:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F9:88:26:D9:91:2D:9F:FC:CD:E9:54:FB:D4:B3:57:40:37:0E:1F
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/E_mIJtmRLZ_8zelU-9SzV0A3Dh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:17:0d:1d:5c:f6:a7:f0:41:ae:fa:21:87:f7:7f:0b:64:
         a9:74:44:32:7c:73:7b:4c:c2:91:02:b7:c0:e2:03:f3:74:13:
         f4:3d:9e:ce:18:1d:5f:a3:26:ed:2d:b8:54:48:5f:4a:47:fb:
         d1:cd:9a:1d:ed:7f:80:ce:ca:9d:42:81:31:7d:b9:f6:05:1d:
         1b:d2:bc:03:9f:a8:1d:96:9e:d1:d4:f2:7d:16:fe:00:96:17:
         04:b0:12:a7:d4:01:af:76:16:c2:31:92:d7:34:86:cb:98:79:
         c4:64:2a:03:5c:be:a9:df:4e:c5:1d:b5:ae:c7:dc:99:29:3b:
         a6:ad:e2:73:d5:b7:be:9c:ea:fe:e0:09:11:9c:d5:72:5c:1c:
         4a:b0:7f:8f:07:b4:ef:75:67:47:89:01:9b:35:0c:4c:43:21:
         92:33:c9:6b:bf:4f:36:c5:0f:f9:2d:37:60:7d:04:f8:0d:b8:
         c7:ac:e7:fa:eb:b5:85:e1:2f:3d:c9:82:2b:1b:a7:b7:d5:bb:
         d7:24:35:49:e4:6e:e3:b3:6d:1d:69:46:d4:9f:27:c3:62:92:
         fb:b7:54:0b:36:ca:3c:a5:26:94:5d:92:64:fe:fc:3d:cc:63:
         94:e2:08:cf:ff:23:d1:93:df:5c:2b:8d:23:f6:dd:fe:2c:2f:
         a5:50:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:12 2025 by rpki-client