Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8Rv0AWEYbi_FKmuAy2Y1zsgD2FI.roa
File:                     8Rv0AWEYbi_FKmuAy2Y1zsgD2FI.roa (raw, json)
Hash identifier:          67Cvjd74mMwOV5AvILrxuEeAAl/5xEY6RMOJlUtw4Zs=
Subject key identifier:   F1:1B:F4:01:61:18:6E:2F:C5:2A:6B:80:CB:66:35:CE:C8:03:D8:52
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018E7941E47141066AC62C71B0E1AABBFCE8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8Rv0AWEYbi_FKmuAy2Y1zsgD2FI.roa
Signing time:             Tue 26 Mar 2024 05:35:45 +0000
ROA not before:           Tue 26 Mar 2024 05:35:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57043
IP address blocks:        45.87.120.0/24 maxlen: 24
                          45.88.12.0/24 maxlen: 24
                          45.88.14.0/24 maxlen: 24
                          45.88.15.0/24 maxlen: 24
                          62.192.152.0/24 maxlen: 24
                          77.81.100.0/24 maxlen: 24
                          79.110.227.0/24 maxlen: 24
                          89.40.36.0/24 maxlen: 24
                          89.45.35.0/24 maxlen: 24
                          93.115.104.0/24 maxlen: 24
                          93.115.105.0/24 maxlen: 24
                          93.115.106.0/24 maxlen: 24
                          93.115.107.0/24 maxlen: 24
                          93.118.36.0/24 maxlen: 24
                          93.119.154.0/24 maxlen: 24
                          176.223.188.0/24 maxlen: 24
                          185.212.119.0/24 maxlen: 24
                          188.215.31.0/24 maxlen: 24
                          188.241.221.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 26 Mar 2024 05:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:79:41:e4:71:41:06:6a:c6:2c:71:b0:e1:aa:bb:fc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Mar 26 05:35:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f11bf40161186e2fc52a6b80cb6635cec803d852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:6a:10:57:41:6a:55:19:4d:6c:73:da:f4:
                    42:2e:14:f3:6b:a2:e2:e4:0d:29:cc:7a:eb:e7:7a:
                    9f:06:8f:ae:8e:94:a7:2d:9b:00:4e:c0:ad:1a:d9:
                    ca:f0:a7:fb:90:e5:a5:18:71:32:6d:61:05:c8:d3:
                    e1:61:25:39:8d:50:0d:59:aa:cd:8a:36:83:34:51:
                    2f:a6:75:44:37:f1:5f:7d:80:74:9e:f2:ea:77:60:
                    4e:06:35:26:a9:e5:03:24:6a:aa:f4:48:c7:b3:5f:
                    72:fb:af:95:0c:d8:81:64:c9:44:8c:11:6e:b1:9f:
                    55:ea:aa:50:4e:32:b4:54:71:9f:e7:ba:e6:d6:7d:
                    6c:4a:8c:8a:23:c9:60:8e:00:87:34:1b:70:78:c5:
                    f4:97:56:c4:f8:4d:e4:8b:26:d5:e4:b3:6b:19:d5:
                    71:0d:5f:99:7c:44:1b:c8:e8:03:01:65:26:49:83:
                    e5:76:8f:ea:52:47:b9:0d:7d:e2:0d:c3:d7:81:48:
                    be:69:d6:29:98:e5:fe:b2:1d:b8:d3:a3:f2:8c:62:
                    13:7e:6c:d6:41:0e:53:d0:39:3c:5a:fa:5f:71:3b:
                    95:7e:e3:e2:98:37:89:1a:1d:02:7d:ab:7e:05:f4:
                    e3:be:57:5e:31:8c:37:3c:6a:aa:4c:eb:77:79:84:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1B:F4:01:61:18:6E:2F:C5:2A:6B:80:CB:66:35:CE:C8:03:D8:52
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8Rv0AWEYbi_FKmuAy2Y1zsgD2FI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.120.0/24
                  45.88.12.0/24
                  45.88.14.0/23
                  62.192.152.0/24
                  77.81.100.0/24
                  79.110.227.0/24
                  89.40.36.0/24
                  89.45.35.0/24
                  93.115.104.0/22
                  93.118.36.0/24
                  93.119.154.0/24
                  176.223.188.0/24
                  185.212.119.0/24
                  188.215.31.0/24
                  188.241.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:fd:d0:7f:39:01:a1:23:d2:5d:57:7c:22:9a:c0:bb:d0:
         a6:d3:a0:36:7a:5f:9a:32:8f:6b:f2:1e:05:7d:c3:26:a7:5c:
         7e:f1:b3:90:e6:14:e6:db:fa:2a:be:b9:03:f2:12:dd:05:b0:
         99:02:c3:05:a2:b6:41:b0:4e:4e:45:21:bd:49:b6:79:f5:4d:
         30:29:fc:72:60:55:ee:48:62:5f:a8:a4:60:66:0a:b1:7c:0b:
         2b:f9:55:e1:0e:c0:cd:96:3b:2f:6a:15:07:ba:02:ff:6f:a5:
         78:01:ee:3a:62:50:45:25:ed:14:da:0e:3a:87:4b:7c:78:14:
         87:d8:c4:5c:c9:57:56:e1:e5:a5:cc:b9:1f:c3:4c:3d:2a:be:
         aa:88:c5:06:ce:6d:5e:f7:9c:09:e3:0a:2f:ba:17:25:eb:11:
         56:80:6f:d5:4c:a1:51:58:f5:3f:ca:56:79:3e:8b:d5:2e:24:
         4c:69:5a:b1:ce:52:73:83:1b:39:62:66:1c:a6:4e:4e:6d:9f:
         63:9f:e3:65:ad:5a:b7:d7:f5:17:2d:40:44:8b:05:2e:2d:51:
         a0:5e:63:26:6c:f4:56:5c:ef:cd:19:f6:d5:27:96:18:c8:31:
         11:20:b2:0c:00:a2:42:4d:0c:08:06:20:c5:e5:75:b3:5b:d1:
         01:80:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:15 2025 by rpki-client