Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9UZrhaVj89okYL1dvR9ToccUQkk.roa
File:                     9UZrhaVj89okYL1dvR9ToccUQkk.roa (raw, json)
Hash identifier:          NI/up15h9fWdM3DFF8c07fPKNKmDO30dAw8iZ+Z0cF8=
Subject key identifier:   F5:46:6B:85:A5:63:F3:DA:24:60:BD:5D:BD:1F:53:A1:C7:14:42:49
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018DA8D49A93A3535B907F5884CB45A984A6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9UZrhaVj89okYL1dvR9ToccUQkk.roa
Signing time:             Wed 14 Feb 2024 18:15:21 +0000
ROA not before:           Wed 14 Feb 2024 18:15:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        37.140.247.0/24 maxlen: 24
                          89.34.106.0/24 maxlen: 24
                          89.35.129.0/24 maxlen: 24
                          89.35.131.0/24 maxlen: 24
                          89.40.215.0/24 maxlen: 24
                          91.132.51.0/24 maxlen: 24
                          93.114.183.0/24 maxlen: 24
                          128.0.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a8:d4:9a:93:a3:53:5b:90:7f:58:84:cb:45:a9:84:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Feb 14 18:15:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5466b85a563f3da2460bd5dbd1f53a1c7144249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:90:cc:cd:d3:d1:6e:2e:ff:ba:d2:78:20:
                    c9:b8:ba:79:72:59:3a:18:82:e2:d5:9e:98:38:7a:
                    9d:e1:3c:e4:00:af:06:d7:0e:af:76:30:1e:9f:8a:
                    41:0c:a6:68:70:3d:fb:7d:e9:1e:84:c3:5c:f5:9e:
                    c3:4e:0e:04:b4:23:c4:07:00:8a:72:80:99:0e:52:
                    36:dd:1d:e4:b1:f8:2f:f6:1e:d6:5a:54:31:a1:9b:
                    3e:7b:91:cf:3f:4a:2e:21:8d:03:cc:1f:aa:8c:de:
                    b2:da:b2:da:68:9e:1f:1e:db:c1:fd:8e:11:45:95:
                    92:3f:a4:81:63:e9:7b:6d:f8:40:0a:23:c2:b9:21:
                    4c:43:66:9b:43:4d:24:a9:e8:d4:8d:64:0e:1e:4a:
                    52:14:5c:3e:2e:5c:12:a6:8c:8a:84:09:38:a3:a6:
                    03:43:3d:63:d1:b1:03:bd:76:be:8c:0c:23:c9:d9:
                    43:1f:ba:fe:8b:49:a3:d5:26:51:89:4d:fa:9d:4c:
                    3e:51:b4:ab:8b:16:48:41:b6:20:1c:49:b6:26:50:
                    a9:45:a2:55:40:63:96:dd:11:45:8b:dd:0f:ef:27:
                    61:c3:d3:94:4f:25:54:ee:1f:2d:09:15:7f:87:60:
                    12:50:4a:8e:54:91:76:69:db:1f:24:24:c3:17:a6:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:46:6B:85:A5:63:F3:DA:24:60:BD:5D:BD:1F:53:A1:C7:14:42:49
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9UZrhaVj89okYL1dvR9ToccUQkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.247.0/24
                  89.34.106.0/24
                  89.35.129.0/24
                  89.35.131.0/24
                  89.40.215.0/24
                  91.132.51.0/24
                  93.114.183.0/24
                  128.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:da:e4:4f:55:44:bb:d5:45:d6:91:7c:44:96:6e:ce:f4:8a:
         b1:9a:49:a2:c9:d4:ad:48:98:21:71:c7:af:1f:a9:08:7a:ef:
         63:f2:18:fe:3a:8f:0a:e4:4e:55:21:d2:08:38:d3:19:88:65:
         0a:1e:28:4f:7f:a5:e6:19:46:56:f0:77:d3:18:af:db:3e:46:
         7f:37:68:ba:be:20:bb:e8:5c:b1:7f:18:a1:ae:af:3d:bf:d5:
         5c:ca:5f:48:a2:ce:33:ec:28:17:8e:c1:d6:dd:51:46:f6:94:
         fe:4b:29:6a:bd:f4:41:05:e7:aa:da:db:1f:4a:db:6c:bc:6c:
         4d:d8:aa:7d:8e:ce:52:5b:b1:d1:5c:98:7d:c2:68:1a:ae:3e:
         29:ef:6e:c2:13:60:62:10:c0:51:0c:51:03:c4:11:6c:18:37:
         83:ef:ed:1c:f6:a1:c0:b6:6d:c2:4f:30:a8:53:22:dd:08:d6:
         65:09:ff:37:12:49:fb:64:9d:3c:7a:b3:43:cc:30:4e:33:89:
         89:8d:f2:45:0f:77:a2:2e:93:cc:f5:81:5b:31:c3:51:b8:1d:
         de:fb:7d:fc:54:8b:1e:d6:9a:9e:11:7c:f1:91:c1:90:d4:5c:
         d6:f8:2a:c4:9b:b1:d9:ce:07:dc:7a:f9:0d:06:e8:f8:e4:57:
         1f:76:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org