Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa
File:                     p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa (raw, json)
Hash identifier:          6dgnJK9SU+/HxowICyEimdgzsAKElOId4xwQ/8xZInM=
Subject key identifier:   A7:DF:C4:3E:D3:E7:D1:67:FC:18:8F:CA:74:7E:17:84:21:08:77:61
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       018D3EBB7F31963F2A8A0A281FDB1E69CD80
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa
Signing time:             Thu 25 Jan 2024 03:48:11 +0000
ROA not before:           Thu 25 Jan 2024 03:48:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64289
IP address blocks:        185.225.26.0/24 maxlen: 24
                          192.189.157.0/24 maxlen: 24
                          2a14:3f80:8::/45 maxlen: 45
                          2a14:3f80:10::/45 maxlen: 45
                          2a14:3f80:18::/45 maxlen: 45

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 01:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3e:bb:7f:31:96:3f:2a:8a:0a:28:1f:db:1e:69:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Jan 25 03:48:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a7dfc43ed3e7d167fc188fca747e178421087761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:f9:a5:0c:7f:2c:c7:18:3f:77:39:b1:e7:
                    84:1f:6e:11:58:18:9f:d1:05:9e:81:ca:4a:6d:8d:
                    41:5b:4e:ea:bd:0a:a9:55:ee:9e:53:20:58:ef:5a:
                    2e:29:db:7f:5d:a8:a0:4b:44:27:c6:d6:71:92:74:
                    74:65:e5:eb:4d:8b:c4:95:8e:30:67:e7:8b:e6:5c:
                    55:53:a1:ea:a1:58:b7:71:df:c6:85:23:d7:2c:d2:
                    64:7b:02:9f:58:ce:4d:96:1a:2e:57:96:60:f1:8a:
                    b6:f1:3b:3a:d6:e4:a1:11:ab:f0:49:8f:f7:df:bb:
                    1f:cc:8f:4a:cf:32:69:14:6f:04:b5:12:05:9d:98:
                    ce:57:09:1b:25:d4:13:cb:73:af:51:f4:27:3f:04:
                    99:fd:42:be:7e:1c:b9:e0:14:39:9d:6d:c4:7b:ce:
                    58:fc:ea:70:1d:e1:88:54:cf:d6:59:33:79:4d:96:
                    fa:ef:54:2a:06:da:0c:2c:cf:5e:05:3e:76:b7:43:
                    0e:e0:1c:85:f6:53:fc:51:b2:91:77:c2:3e:e2:8d:
                    df:e8:a6:21:8e:a6:9c:e3:58:59:8f:00:0b:28:60:
                    3b:8f:d6:d0:66:8b:1c:f4:4c:53:9f:bd:2c:25:b5:
                    a3:0a:ad:b7:f6:13:2a:0c:b0:22:59:35:52:18:fa:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DF:C4:3E:D3:E7:D1:67:FC:18:8F:CA:74:7E:17:84:21:08:77:61
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.26.0/24
                  192.189.157.0/24
                IPv6:
                  2a14:3f80:8::-2a14:3f80:1f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:69:66:01:da:c7:19:be:4b:69:28:4d:3c:84:76:b6:28:
         5d:11:65:2f:0e:16:8e:28:a1:49:1a:09:56:d5:0e:b1:3d:f9:
         d4:36:e7:3e:8c:04:b4:87:5f:65:fc:d1:86:c3:9f:83:47:08:
         7e:e1:a2:6d:7a:3b:07:0b:0f:94:a7:ee:85:a2:ea:33:14:05:
         75:3f:83:e6:25:d0:51:e9:b5:e4:c5:c4:c0:f9:73:1e:8d:c2:
         3e:aa:3f:5d:a1:97:ec:15:72:c7:c7:3e:3e:7c:86:0d:a3:f3:
         cd:a3:f4:53:a8:3e:ef:96:c8:eb:26:7f:2b:b2:d3:91:33:f6:
         a3:4b:7b:ce:11:6b:2b:b1:ff:65:e5:72:87:a8:b2:88:89:19:
         74:5b:90:34:a7:85:32:6f:cb:58:51:fb:47:b9:2d:f6:07:57:
         79:c2:01:3d:d9:59:0d:9b:4e:48:1d:56:14:aa:7b:a6:e5:cd:
         d9:c2:3c:99:83:cf:70:70:26:83:ac:be:d7:c0:ba:f8:a3:d5:
         a2:16:df:a7:6a:ab:65:37:ef:79:21:e5:bf:03:e6:4b:a6:4b:
         aa:49:22:64:d7:03:63:10:c8:13:d3:9e:30:c4:fc:9b:32:59:
         87:58:30:e0:44:cf:f2:34:69:6f:cf:be:ed:92:f8:81:0d:c6:
         1a:a5:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:36 2024 by rpki-client on console-ams.rpki-client.org