Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Kojun_JhM4776ZSiOJDF4VO8gQI.roa
File:                     Kojun_JhM4776ZSiOJDF4VO8gQI.roa (raw, json)
Hash identifier:          C2Hx9huUcs0/5OjVrisVFhA7dXfyV/RRPpwA64MGe0M=
Subject key identifier:   2A:88:EE:9F:F2:61:33:8E:FB:E9:94:A2:38:90:C5:E1:53:BC:81:02
Certificate issuer:       /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial:       018D45859853B5C33088C8F614C16DE65AF4
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Kojun_JhM4776ZSiOJDF4VO8gQI.roa
Signing time:             Fri 26 Jan 2024 11:26:39 +0000
ROA not before:           Fri 26 Jan 2024 11:26:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25198
IP address blocks:        46.229.243.0/24 maxlen: 24
                          46.229.251.0/24 maxlen: 24
                          46.229.253.0/24 maxlen: 24
                          77.74.123.0/24 maxlen: 24
                          83.229.61.0/24 maxlen: 24
                          85.204.107.0/24 maxlen: 24
                          92.42.100.0/24 maxlen: 24
                          103.112.171.0/24 maxlen: 24
                          103.244.144.0/24 maxlen: 24
                          103.246.248.0/24 maxlen: 24
                          185.104.63.0/24 maxlen: 24
                          195.74.93.0/24 maxlen: 24
                          2a12:3200::/36 maxlen: 36
                          2a12:3200:1000::/36 maxlen: 36
                          2a12:3200:2000::/36 maxlen: 36
                          2a12:3200:3000::/36 maxlen: 36
                          2a12:3200:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 22:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:45:85:98:53:b5:c3:30:88:c8:f6:14:c1:6d:e6:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
        Validity
            Not Before: Jan 26 11:26:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2a88ee9ff261338efbe994a23890c5e153bc8102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5c:be:00:27:98:ae:8f:b4:dd:1a:91:a4:1a:
                    bc:39:f3:63:4c:df:c5:40:d7:0d:3d:75:64:56:ae:
                    f9:ad:f7:1d:cb:4e:4b:d9:72:f5:3a:32:d5:ac:8a:
                    dd:ac:3e:0a:0f:31:97:34:be:7a:64:f2:2a:ea:ba:
                    a2:5a:20:43:f8:52:ee:bb:17:4d:fe:63:2b:3e:99:
                    16:1c:29:57:48:62:c4:9b:f5:72:47:49:0f:e4:fb:
                    4a:96:0b:ac:9d:c2:bb:6c:c9:41:67:05:b8:4c:b7:
                    05:e8:8a:2c:96:ec:f7:23:75:64:61:6f:23:1d:b2:
                    d1:12:5e:89:f3:83:0e:cc:57:cc:ac:76:5a:a8:8e:
                    39:e7:ff:ae:22:a2:12:05:23:86:a0:11:5a:60:09:
                    91:1d:b1:5f:78:e3:9f:19:f6:26:7a:1f:00:13:80:
                    ba:53:41:29:99:4f:3f:6c:cc:f6:5b:26:e7:85:10:
                    68:b3:87:09:98:4e:06:e1:f0:71:64:ad:a2:f1:12:
                    be:5c:3a:91:6c:34:f3:22:68:ed:e2:c2:51:1a:79:
                    72:a8:61:61:fa:d2:e7:09:f8:64:3d:96:16:61:88:
                    b6:0e:3a:df:73:eb:e8:6f:41:28:b4:ac:e0:16:7c:
                    06:34:7e:5f:54:60:41:1e:52:34:39:67:4e:47:98:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:EE:9F:F2:61:33:8E:FB:E9:94:A2:38:90:C5:E1:53:BC:81:02
            X509v3 Authority Key Identifier:
                keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Kojun_JhM4776ZSiOJDF4VO8gQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.243.0/24
                  46.229.251.0/24
                  46.229.253.0/24
                  77.74.123.0/24
                  83.229.61.0/24
                  85.204.107.0/24
                  92.42.100.0/24
                  103.112.171.0/24
                  103.244.144.0/24
                  103.246.248.0/24
                  185.104.63.0/24
                  195.74.93.0/24
                IPv6:
                  2a12:3200::-2a12:3200:4fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         03:27:d9:a2:57:77:7c:ba:1d:7a:d5:44:fb:be:b9:98:a8:22:
         89:ec:54:25:06:3f:cd:f1:db:39:5e:f3:cb:81:f3:11:53:7c:
         e2:52:4a:df:9a:fc:3b:52:3c:29:53:55:49:c2:6a:23:1d:8d:
         f8:b7:c1:0e:b3:e6:3b:e8:90:3c:e2:0f:75:e7:02:22:be:4a:
         e8:8e:e1:b1:02:a0:05:84:41:62:f4:14:e6:a1:59:fa:72:34:
         99:1c:27:1b:ce:d4:7b:32:92:f6:19:09:b3:44:62:42:34:2d:
         3e:14:d5:71:7a:b4:ce:56:73:dd:81:c0:b0:7a:9c:83:d3:5b:
         df:c5:90:2b:be:b3:e9:c6:8d:d8:29:37:4b:72:81:d5:4c:9f:
         9d:57:f7:4d:9e:27:0d:02:6c:dd:d0:05:2c:17:de:1b:1c:15:
         bd:2d:4a:b9:d7:08:00:b1:0e:9d:ae:61:ca:3d:0c:2c:41:da:
         db:a1:67:04:4e:f7:88:99:12:84:6f:d2:94:06:19:dd:3d:8d:
         e2:97:3b:92:ee:1e:51:2d:80:af:ab:19:27:7b:99:aa:e1:f4:
         fd:dc:73:d3:d5:7a:1f:41:bc:6c:ca:8a:4e:b6:5a:0c:bd:d5:
         bb:3d:16:54:53:25:9a:34:b3:39:2b:46:98:76:53:f0:ee:42:
         43:26:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:15 2024 by rpki-client on console-ams.rpki-client.org