Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/Ei750iY6kE8MCDRRkEKa7wyy04g.roa
File:                     Ei750iY6kE8MCDRRkEKa7wyy04g.roa (raw, json)
Hash identifier:          yRiO1aG5druu5YTi5gLvLtSTfZy7qymXnqviv28cNg4=
Subject key identifier:   12:2E:F9:D2:26:3A:90:4F:0C:08:34:51:90:42:9A:EF:0C:B2:D3:88
Certificate issuer:       /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial:       019424B3BCF762EA65855A5C9EB684792561
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/Ei750iY6kE8MCDRRkEKa7wyy04g.roa
Signing time:             Thu 02 Jan 2025 01:49:06 +0000
ROA not before:           Thu 02 Jan 2025 01:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3303
IP address blocks:        194.56.234.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 09 Jan 2025 13:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:bc:f7:62:ea:65:85:5a:5c:9e:b6:84:79:25:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
        Validity
            Not Before: Jan  2 01:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=122ef9d2263a904f0c08345190429aef0cb2d388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:5f:59:30:1b:75:ac:93:15:42:ac:a4:99:
                    c5:b0:18:25:d3:4a:1f:34:c4:97:35:03:17:1d:a3:
                    c0:1a:a4:bb:3b:e8:bb:2c:d0:ff:e5:9c:3b:92:60:
                    ce:c1:a6:ac:83:63:24:10:31:bb:57:02:2f:0b:38:
                    97:04:8e:c6:ab:e7:15:d7:02:55:02:9a:bb:fd:b4:
                    42:41:85:fb:62:1f:f4:68:3b:8c:75:33:02:de:4e:
                    93:ad:97:36:70:37:23:62:29:fb:15:88:65:6c:f9:
                    64:4b:9b:59:b3:e9:94:f4:db:8b:f3:cf:2f:be:8f:
                    96:76:5e:a2:2e:eb:25:8f:ef:45:e4:d9:24:a3:62:
                    81:6c:c6:a3:5e:08:cb:f4:1e:7b:60:80:7b:fb:9f:
                    c6:28:16:d1:ee:58:13:23:b6:98:b4:84:fb:72:76:
                    74:76:32:27:1a:32:4c:35:f6:74:03:79:99:36:65:
                    8b:cb:e3:2b:e8:b9:97:4e:16:89:28:5e:4e:ec:e4:
                    98:89:d0:d7:ba:ca:bb:53:2f:00:be:cf:82:a7:89:
                    7d:fb:8b:61:fc:00:9d:6e:d0:8b:e7:f2:06:ed:97:
                    1e:60:b7:30:9d:e7:90:32:df:22:2a:58:2c:c4:19:
                    5c:55:a2:e1:d2:4a:b4:d0:ca:c3:a4:b5:73:ae:f0:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:F9:D2:26:3A:90:4F:0C:08:34:51:90:42:9A:EF:0C:B2:D3:88
            X509v3 Authority Key Identifier:
                keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/Ei750iY6kE8MCDRRkEKa7wyy04g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:43:40:50:4e:a2:3c:c7:38:77:2b:b5:28:1d:d8:a3:88:
         0d:21:90:aa:af:4d:8c:e5:98:67:c1:02:3c:5f:54:d8:d7:81:
         13:00:be:bd:a0:58:bb:26:5c:b1:b5:26:10:40:52:92:6b:02:
         6d:08:df:b1:ae:08:a1:d3:c6:9b:0f:dc:69:82:75:25:b3:7d:
         3a:55:60:6b:2b:71:5b:73:a0:88:98:7b:06:fe:51:0c:a4:59:
         86:71:4b:93:c9:21:20:e3:83:14:75:f7:df:7b:ea:86:16:e6:
         74:75:8a:d9:ed:79:c6:97:51:e8:ad:a4:cd:33:7f:f4:e6:15:
         60:31:70:03:10:01:61:a7:f0:05:39:13:c4:e9:14:af:36:01:
         9f:d2:94:95:eb:8a:a9:02:c2:39:ab:d4:2a:8c:90:c2:af:92:
         7a:ad:4c:95:44:4c:22:dd:8c:e5:89:c2:8c:72:2e:93:f3:be:
         ef:e8:ea:c0:10:ce:93:3e:d3:f2:2e:6d:a5:1b:25:ef:68:85:
         5c:04:8a:c5:77:85:69:e1:59:01:05:18:c3:35:98:ec:3a:64:
         f8:6b:ba:d2:52:f0:02:1c:2a:07:c9:6b:7f:8a:e5:52:3f:38:
         4a:e7:4f:a7:e3:dd:00:02:66:36:3a:d0:ef:ac:82:9c:88:6f:
         58:c4:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:12:31 2025 by rpki-client