Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/7TgJFZ_MYodQxTPT2E17_Vns2wM.roa
File:                     7TgJFZ_MYodQxTPT2E17_Vns2wM.roa (raw, json)
Hash identifier:          Ecbuf57CHXCL+VgbJN/gqM8duKsUsEGNF3c4ob5hxlE=
Subject key identifier:   ED:38:09:15:9F:CC:62:87:50:C5:33:D3:D8:4D:7B:FD:59:EC:DB:03
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       0191581901CB42BB8B66AAAB4D4EC95C9EDA
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/7TgJFZ_MYodQxTPT2E17_Vns2wM.roa
Signing time:             Thu 15 Aug 2024 22:11:59 +0000
ROA not before:           Thu 15 Aug 2024 22:11:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64289
IP address blocks:        185.225.24.0/24 maxlen: 24
                          185.225.26.0/24 maxlen: 24
                          192.189.157.0/24 maxlen: 24
                          2a14:3f80:8::/45 maxlen: 45
                          2a14:3f80:10::/45 maxlen: 45
                          2a14:3f80:18::/45 maxlen: 45
                          2a14:3f80:20::/45 maxlen: 45
                          2a14:3f80:28::/45 maxlen: 45
                          2a14:3f80:80::/45 maxlen: 45
                          2a14:3f80:88::/45 maxlen: 45
                          2a14:3f80:100::/45 maxlen: 45
                          2a14:3f80:108::/45 maxlen: 45
                          2a14:3f80:800::/38 maxlen: 38
                          2a14:3f80:c00::/38 maxlen: 38
                          2a14:3f80:1000::/38 maxlen: 38
                          2a14:3f80:1400::/38 maxlen: 38
                          2a14:3f80:1800::/38 maxlen: 38
                          2a14:3f80:2000::/38 maxlen: 38
                          2a14:3f80:2400::/38 maxlen: 38
                          2a14:3f80:2800::/38 maxlen: 38
                          2a14:3f80:3000::/38 maxlen: 38
                          2a14:3f80:3400::/38 maxlen: 38
                          2a14:3f80:3800::/38 maxlen: 38
                          2a14:3f80:3c00::/38 maxlen: 38
                          2a14:3f80:4000::/38 maxlen: 38
                          2a14:3f80:4400::/38 maxlen: 38
                          2a14:3f80:5000::/38 maxlen: 38
                          2a14:3f80:6000::/38 maxlen: 38
                          2a14:3f80:7000::/38 maxlen: 38
                          2a14:3f80:8800::/38 maxlen: 38
                          2a14:3f80:af38::/45 maxlen: 45
                          2a14:3f81:5800::/38 maxlen: 38
                          2a14:3f82:4000::/38 maxlen: 38
                          2a14:3f82:6000::/38 maxlen: 38
                          2a14:3f82:7000::/38 maxlen: 38
                          2a14:3f82:8800::/38 maxlen: 38
                          2a14:3f87:6800::/38 maxlen: 38

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 03:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:58:19:01:cb:42:bb:8b:66:aa:ab:4d:4e:c9:5c:9e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Aug 15 22:11:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ed3809159fcc628750c533d3d84d7bfd59ecdb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:3d:71:9b:7f:6d:26:cd:49:c3:4f:95:65:
                    ac:8e:51:6b:97:eb:3b:8f:b8:da:22:71:90:5b:8a:
                    1a:9d:5d:80:d3:0c:54:d1:ec:2e:82:0f:e1:77:ac:
                    2b:9a:3f:65:a3:24:a1:eb:f6:65:99:13:71:8a:1e:
                    dd:71:0e:da:31:7e:c8:76:2e:f9:98:dd:7a:33:66:
                    ef:7f:5a:a1:7a:c1:1c:8b:c4:74:95:e6:2a:a4:65:
                    90:cf:2e:67:93:8d:1c:e4:29:8e:d7:18:f2:d1:e0:
                    c8:d2:fd:29:cc:e4:82:4c:07:93:f2:00:69:8e:17:
                    ae:7b:b9:62:23:70:58:91:42:7d:f4:b6:6e:20:8c:
                    31:bc:e0:2b:c4:60:1a:34:c8:b0:06:8d:e5:54:75:
                    63:3c:de:c5:85:7e:62:2b:32:ee:67:58:98:54:7b:
                    31:a1:57:94:89:8e:a3:77:ed:e6:1d:72:07:45:e7:
                    ef:24:b5:49:6f:5e:0e:14:d7:d3:cb:5e:b9:98:be:
                    70:fe:f2:be:26:e9:80:52:24:8d:2c:f6:84:e0:f3:
                    f1:9a:a2:4a:3c:22:ad:6c:32:86:c8:6c:c4:0f:27:
                    47:45:e5:fd:f4:f4:00:82:f6:d1:76:19:82:59:f3:
                    53:c4:d6:a9:1c:70:7b:05:f3:d0:22:be:9f:18:c0:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:38:09:15:9F:CC:62:87:50:C5:33:D3:D8:4D:7B:FD:59:EC:DB:03
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/7TgJFZ_MYodQxTPT2E17_Vns2wM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.24.0/24
                  185.225.26.0/24
                  192.189.157.0/24
                IPv6:
                  2a14:3f80:8::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
                  2a14:3f80:80::/44
                  2a14:3f80:100::/44
                  2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
                  2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
                  2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
                  2a14:3f80:5000::/38
                  2a14:3f80:6000::/38
                  2a14:3f80:7000::/38
                  2a14:3f80:8800::/38
                  2a14:3f80:af38::/45
                  2a14:3f81:5800::/38
                  2a14:3f82:4000::/38
                  2a14:3f82:6000::/38
                  2a14:3f82:7000::/38
                  2a14:3f82:8800::/38
                  2a14:3f87:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:4f:c0:c8:54:88:48:7e:80:2e:a3:89:99:75:74:0e:2a:
         75:7a:65:c0:1f:5a:3c:6d:1b:70:af:0c:09:00:4b:aa:16:9c:
         d2:98:a8:c9:0d:be:08:8e:60:c4:a9:ff:f8:9c:df:16:a4:96:
         5b:23:3f:c1:36:75:eb:45:8f:21:71:7e:62:b8:85:0b:2b:d2:
         2f:24:c0:b2:3b:54:dc:8b:98:d7:ea:26:c7:79:30:e0:69:40:
         77:d5:bb:5a:13:0d:65:43:dc:75:da:0f:03:6c:ac:68:0d:c5:
         38:a0:55:d6:cb:7f:ee:e7:80:ce:97:7d:33:cd:b4:e7:77:a8:
         98:dd:f2:70:79:b2:36:a1:93:fb:ff:4d:6c:9f:89:0f:27:e3:
         3a:f0:ad:3f:ad:72:df:03:35:06:92:ac:e0:a4:bb:f7:33:c9:
         96:8a:9b:5d:aa:70:27:31:e5:94:fe:dc:23:12:ed:96:09:d1:
         7f:17:2f:ae:3b:08:0e:71:9a:91:a7:52:b3:4d:f3:21:de:a8:
         6d:17:0a:6d:ef:29:92:0c:67:0a:35:6b:94:92:ea:1f:a2:4d:
         86:39:29:80:75:60:f2:f7:be:2a:03:09:34:b0:64:3c:01:93:
         a5:c8:15:65:08:ab:1b:f2:77:a6:73:2a:86:b6:9e:83:89:93:
         71:de:2b:54
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgISAZFYGQHLQruLZqqrTU7JXJ7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjQwODE1MjIxMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDM4MDkxNTlmY2M2Mjg3NTBjNTMzZDNkODRkN2JmZDU5ZWNkYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01A9cZt/bSbNScNPlWWsjlFrl+s7
j7jaInGQW4oanV2A0wxU0ewugg/hd6wrmj9loySh6/ZlmRNxih7dcQ7aMX7Idi75
mN16M2bvf1qhesEci8R0leYqpGWQzy5nk40c5CmO1xjy0eDI0v0pzOSCTAeT8gBp
jheue7liI3BYkUJ99LZuIIwxvOArxGAaNMiwBo3lVHVjPN7FhX5iKzLuZ1iYVHsx
oVeUiY6jd+3mHXIHRefvJLVJb14OFNfTy165mL5w/vK+JumAUiSNLPaE4PPxmqJK
PCKtbDKGyGzEDydHReX99PQAgvbRdhmCWfNTxNapHHB7BfPQIr6fGMB/oQIDAQAB
o4IC1zCCAtMwHQYDVR0OBBYEFO04CRWfzGKHUMUz09hNe/1Z7NsDMB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvN1RnSkZaX01Zb2RReFRQVDJFMTdfVm5zMndNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TAYBAIAATASAwQAueEY
AwQAueEaAwQAwL2dMIG8BAIAAjCBtTASAwcDKhQ/gAAIAwcEKhQ/gAAgAwcEKhQ/
gACAAwcEKhQ/gAEAMBADBgMqFD+ACAMGAioUP4AYMBADBgUqFD+AIAMGAioUP4Ao
MBADBgQqFD+AMAMGAyoUP4BAAwYCKhQ/gFADBgIqFD+AYAMGAioUP4BwAwYCKhQ/
gIgDBwMqFD+ArzgDBgIqFD+BWAMGAioUP4JAAwYCKhQ/gmADBgIqFD+CcAMGAioU
P4KIAwYCKhQ/h2gwDQYJKoZIhvcNAQELBQADggEBAJTCT8DIVIhIfoAuo4mZdXQO
KnV6ZcAfWjxtG3CvDAkAS6oWnNKYqMkNvgiOYMSp//ic3xakllsjP8E2detFjyFx
fmK4hQsr0i8kwLI7VNyLmNfqJsd5MOBpQHfVu1oTDWVD3HXaDwNsrGgNxTigVdbL
f+7ngM6XfTPNtOd3qJjd8nB5sjahk/v/TWyfiQ8n4zrwrT+tct8DNQaSrOCku/cz
yZaKm12qcCcx5ZT+3CMS7ZYJ0X8XL647CA5xmpGnUrNN8yHeqG0XCm3vKZIMZwo1
a5SS6h+iTYY5KYB1YPL3vioDCTSwZDwBk6XIFWUIqxvyd6ZzKoa2noOJk3HeK1Q=
-----END CERTIFICATE-----
Generated at Fri Aug 16 05:45:31 2024 by rpki-client on console-ams.rpki-client.org