Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YcxfJRq_xWB_R48RW_hgydDwHsA.roa
File:                     YcxfJRq_xWB_R48RW_hgydDwHsA.roa (raw, json)
Hash identifier:          DqPHUO1ziXhFynNeLgt8GYpRfZDdGLOvWj3unfLtA6U=
Subject key identifier:   61:CC:5F:25:1A:BF:C5:60:7F:47:8F:11:5B:F8:60:C9:D0:F0:1E:C0
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0197323CD9977D344F51A48268F01CDD5196
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YcxfJRq_xWB_R48RW_hgydDwHsA.roa
Signing time:             Mon 02 Jun 2025 20:02:18 +0000
ROA not before:           Mon 02 Jun 2025 20:02:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58212
IP address blocks:        5.231.70.0/24 maxlen: 24
                          5.231.203.0/24 maxlen: 24
                          5.231.234.0/24 maxlen: 24
                          77.90.22.0/24 maxlen: 24
                          77.90.41.0/24 maxlen: 24
                          77.90.52.0/24 maxlen: 24
                          77.90.58.0/24 maxlen: 24
                          85.93.1.0/24 maxlen: 24
                          85.93.6.0/24 maxlen: 24
                          85.93.22.0/24 maxlen: 24
                          89.144.14.0/24 maxlen: 24
                          89.144.16.0/24 maxlen: 24
                          89.144.17.0/24 maxlen: 24
                          89.144.18.0/24 maxlen: 24
                          89.144.25.0/24 maxlen: 24
                          89.144.35.0/24 maxlen: 24
                          94.103.168.0/24 maxlen: 24
                          94.249.153.0/24 maxlen: 24
                          94.249.158.0/24 maxlen: 24
                          178.18.147.0/24 maxlen: 24
                          185.13.159.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 06 Jun 2025 04:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:32:3c:d9:97:7d:34:4f:51:a4:82:68:f0:1c:dd:51:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun  2 20:02:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=61cc5f251abfc5607f478f115bf860c9d0f01ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:84:59:23:82:dc:3e:ab:23:f9:2b:7b:b0:
                    37:a8:47:52:d6:ae:a0:a2:ce:1e:fa:d1:e0:51:c7:
                    c2:22:c2:ba:53:1f:e9:32:1d:db:6a:4f:5d:d9:0e:
                    bb:1a:06:98:c4:55:b9:2d:16:ff:6f:ff:f7:33:e0:
                    d0:27:2d:5d:2b:f8:82:25:4d:52:1e:e1:29:25:55:
                    df:c3:a9:99:8b:d0:e9:dc:cd:51:1b:03:e9:8d:bc:
                    6b:7e:76:52:57:27:c3:8a:05:8b:80:6a:a6:49:b9:
                    cb:f9:65:52:2e:cf:06:ae:4b:65:18:d4:79:15:0d:
                    41:ca:2c:87:eb:e8:48:67:07:1d:57:f8:7d:08:b2:
                    31:00:5c:b1:dc:75:8e:18:71:27:6e:a8:3c:e5:57:
                    67:59:f0:be:24:96:0f:91:a7:3e:8e:36:c6:e9:85:
                    31:f7:bd:50:40:79:e6:9f:6a:85:85:6a:b3:f4:ca:
                    83:ad:fe:f9:28:cf:25:02:30:ee:c8:03:f1:7c:86:
                    0e:c8:7d:a8:57:82:ea:e8:76:cf:f2:39:d4:cb:27:
                    4f:05:b9:9f:b3:29:c0:a2:fa:50:eb:09:fa:ba:28:
                    b1:0b:f1:72:ae:a6:0a:ea:aa:d9:50:d2:2f:26:10:
                    f2:c3:96:57:a6:5b:30:c5:6d:2c:4b:04:90:33:36:
                    be:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:5F:25:1A:BF:C5:60:7F:47:8F:11:5B:F8:60:C9:D0:F0:1E:C0
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YcxfJRq_xWB_R48RW_hgydDwHsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.231.70.0/24
                  5.231.203.0/24
                  5.231.234.0/24
                  77.90.22.0/24
                  77.90.41.0/24
                  77.90.52.0/24
                  77.90.58.0/24
                  85.93.1.0/24
                  85.93.6.0/24
                  85.93.22.0/24
                  89.144.14.0/24
                  89.144.16.0-89.144.18.255
                  89.144.25.0/24
                  89.144.35.0/24
                  94.103.168.0/24
                  94.249.153.0/24
                  94.249.158.0/24
                  178.18.147.0/24
                  185.13.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:ae:fb:4a:b5:10:62:c6:01:69:37:04:4e:87:cf:c7:29:
         a1:8b:32:29:d8:1d:a3:a7:2b:1d:64:b5:b2:b9:6a:7b:4c:95:
         0d:85:84:33:5b:98:12:d0:81:aa:59:5a:bc:37:26:e1:09:f0:
         18:af:ab:6d:21:62:e4:b3:65:ef:fd:f6:3c:08:f3:61:d2:10:
         d2:97:f6:ff:1e:bc:9c:bf:8f:f8:6e:10:ae:fc:a5:02:34:4c:
         47:32:73:3f:10:a6:d4:6e:78:a5:58:e8:d4:af:20:e9:ea:70:
         bf:d9:62:7b:ea:bc:67:c3:3e:8e:34:37:6c:de:68:0b:d3:d5:
         31:8e:00:c1:6e:56:11:2f:c6:27:4b:a4:82:24:1f:b0:70:94:
         47:7c:e6:b6:d2:31:26:02:e8:2f:03:b3:1d:a3:7c:ee:7a:da:
         56:7d:54:58:d5:65:bd:90:41:49:f6:e6:76:00:e0:1a:58:3e:
         24:83:1f:6d:2d:4c:f7:ea:14:03:79:95:6b:b7:1e:11:44:a7:
         76:02:1b:3c:68:e8:a0:5a:be:b8:4a:56:74:b5:f5:14:64:a3:
         6e:fb:16:46:78:2a:d9:19:ea:1b:db:8d:b6:81:f8:ac:71:48:
         01:ae:81:49:ec:69:cb:c4:8c:2e:e4:32:2d:f4:1d:da:b4:35:
         d1:7e:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:42:36 2025 by rpki-client