Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/dzK6F67VkgzKARInEhA1wKlFqSM.roa
File:                     dzK6F67VkgzKARInEhA1wKlFqSM.roa (raw, json)
Hash identifier:          3QMAEoLsrI88TxRFXa88ISpZe+Dlb2ioIDBrUKfc1cQ=
Subject key identifier:   77:32:BA:17:AE:D5:92:0C:CA:01:12:27:12:10:35:C0:A9:45:A9:23
Certificate issuer:       /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial:       01953C461C9DB60226B5F542657951D68DF2
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/dzK6F67VkgzKARInEhA1wKlFqSM.roa
Signing time:             Tue 25 Feb 2025 08:43:02 +0000
ROA not before:           Tue 25 Feb 2025 08:43:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39798
IP address blocks:        5.181.156.0/22 maxlen: 24
                          5.252.176.0/22 maxlen: 24
                          94.158.244.0/22 maxlen: 24
                          185.163.44.0/22 maxlen: 24
                          185.225.16.0/22 maxlen: 24
                          194.180.157.0/24 maxlen: 24
                          194.180.174.0/24 maxlen: 24
                          194.180.191.0/24 maxlen: 24
                          2001:67c:2db8::/48 maxlen: 48
                          2a0a:c800::/29 maxlen: 48
Validation:               Failed, certificate revoked on Wed 26 Feb 2025 11:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3c:46:1c:9d:b6:02:26:b5:f5:42:65:79:51:d6:8d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
        Validity
            Not Before: Feb 25 08:43:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7732ba17aed5920cca011227121035c0a945a923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:38:42:7f:8d:e6:d3:21:b1:ab:d7:ee:b8:
                    0c:70:cb:f1:c6:79:4e:30:c9:f3:db:fe:49:91:4a:
                    04:35:58:0f:c4:9d:2a:a7:bc:68:8e:dd:21:09:90:
                    9e:04:3a:59:fa:8c:4c:c0:a8:cf:ab:4c:01:b3:42:
                    25:8e:53:23:87:39:e6:bc:ff:bc:2a:3d:fd:ee:85:
                    04:7e:75:a2:1f:30:db:65:3b:5c:49:74:c8:26:e0:
                    e2:a5:17:82:88:6d:fc:d6:c3:d3:c5:16:57:db:5d:
                    fe:93:18:5b:cf:79:6f:ad:6a:10:77:a7:0e:6d:49:
                    55:0e:e3:20:5e:12:7a:c9:3c:25:6a:66:85:3c:19:
                    20:96:a6:03:b3:54:4f:92:d4:93:91:b8:d1:42:75:
                    01:ef:92:a4:d4:16:19:de:21:0d:7a:5a:e1:7a:9e:
                    ea:77:0e:6b:70:2a:cb:d3:86:d5:23:8d:60:22:f9:
                    83:f5:94:b8:b6:eb:ec:16:7c:11:51:1e:29:53:31:
                    37:45:6e:63:84:a9:9f:e7:1e:e5:c2:24:2b:45:dd:
                    3c:26:52:73:21:85:64:50:36:74:01:80:9e:8f:b5:
                    b2:6a:58:81:ff:c8:c0:ac:cb:d2:48:b8:a9:9b:fd:
                    9d:1b:aa:66:c2:c4:b5:a4:b0:f4:91:43:5f:de:8d:
                    4f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:32:BA:17:AE:D5:92:0C:CA:01:12:27:12:10:35:C0:A9:45:A9:23
            X509v3 Authority Key Identifier:
                keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/dzK6F67VkgzKARInEhA1wKlFqSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.156.0/22
                  5.252.176.0/22
                  94.158.244.0/22
                  185.163.44.0/22
                  185.225.16.0/22
                  194.180.157.0/24
                  194.180.174.0/24
                  194.180.191.0/24
                IPv6:
                  2001:67c:2db8::/48
                  2a0a:c800::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:52:ad:81:08:30:14:98:36:a4:11:f5:c1:26:90:c4:f5:6a:
         ab:3c:06:8b:50:28:a2:f1:a7:22:86:31:4c:86:d7:6d:64:5d:
         39:5f:bf:54:19:31:86:03:52:6e:ed:8f:03:f5:47:0e:7d:05:
         d3:8a:13:25:f3:96:cf:8c:d8:a2:42:dd:41:3d:c1:62:8e:f3:
         22:66:a6:42:d3:4b:eb:36:4c:28:08:63:39:fc:1a:36:58:07:
         f6:2e:8f:1c:4d:6f:ad:97:6d:98:27:d9:f9:eb:20:fc:e2:3e:
         57:eb:80:17:4f:ff:19:f8:c7:63:45:25:a5:c6:ac:be:7a:60:
         19:c9:d5:c4:15:fc:68:56:1a:c8:85:ef:f2:bd:61:2d:6e:73:
         af:e2:c9:2c:e6:b4:0c:20:cb:7f:c2:1a:b7:a0:5f:04:59:2a:
         c1:af:67:01:5d:12:95:5b:56:4f:2f:95:36:79:03:f2:75:30:
         98:7c:1e:7e:b4:94:49:dd:14:06:88:9c:d1:9e:a9:14:55:75:
         56:4d:e8:c4:8b:ff:36:83:0a:7e:4e:0a:48:7a:56:ba:b8:18:
         fe:ae:cd:21:d0:9e:a5:0b:dd:28:12:57:4e:cc:09:91:f1:d2:
         3e:cd:39:c9:d8:f0:fd:46:27:7e:52:50:05:45:d3:f9:77:09:
         fd:9c:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:21:07 2025 by rpki-client