Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SM6y4geZiYdmzMnk0CD7sZaYuwE.roa
File:                     SM6y4geZiYdmzMnk0CD7sZaYuwE.roa (raw, json)
Hash identifier:          G/VB77RFnp/zIOo+jtk8NMvfsJ007CNrqmmTxnYYKJA=
Subject key identifier:   48:CE:B2:E2:07:99:89:87:66:CC:C9:E4:D0:20:FB:B1:96:98:BB:01
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018CC493414CD3F89178BF566B27C7DD7775
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SM6y4geZiYdmzMnk0CD7sZaYuwE.roa
Signing time:             Mon 01 Jan 2024 10:30:33 +0000
ROA not before:           Mon 01 Jan 2024 10:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212815
IP address blocks:        89.35.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 11:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:41:4c:d3:f8:91:78:bf:56:6b:27:c7:dd:77:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 10:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48ceb2e20799898766ccc9e4d020fbb19698bb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:74:2b:db:b5:31:e1:aa:cf:77:a2:58:56:75:
                    3c:5c:82:e4:ea:e1:68:00:12:16:c8:b8:b0:98:2a:
                    7c:b8:85:e7:65:83:f5:1c:f1:58:0f:2d:61:bf:2d:
                    19:92:84:97:27:ed:fb:b2:57:e3:73:d8:7f:40:99:
                    25:cd:c2:c2:3c:8a:53:11:e7:d0:66:2a:5a:c3:92:
                    3a:ce:8b:b6:73:f0:94:1f:3c:cd:87:54:9c:ef:48:
                    a8:b8:24:4a:db:cf:84:8e:de:b9:cc:52:a4:40:13:
                    6d:cc:d0:1c:4d:9b:5f:34:82:82:72:e1:fe:5b:06:
                    64:7d:f4:29:86:b2:51:2a:8d:ae:66:57:56:9c:1f:
                    24:07:2c:ca:a9:de:51:94:52:86:7e:90:e1:60:4c:
                    28:ad:af:ff:9b:6e:72:a4:d3:e4:88:47:39:27:61:
                    1a:4f:27:f7:31:d1:43:69:6a:1f:fa:88:d4:fc:8f:
                    be:59:ba:bc:62:e9:fc:43:6e:c0:48:09:ff:2d:b5:
                    06:31:9e:01:42:2d:61:a2:7c:f7:99:ea:ac:b0:83:
                    38:c8:39:df:1a:0f:df:7b:d1:fa:4c:8b:12:4c:ad:
                    5e:cf:4c:d1:4b:b3:e3:07:b7:f4:17:1c:e4:26:dd:
                    9e:01:71:52:15:0b:39:c0:24:0b:e9:ea:78:4f:55:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:B2:E2:07:99:89:87:66:CC:C9:E4:D0:20:FB:B1:96:98:BB:01
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SM6y4geZiYdmzMnk0CD7sZaYuwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:95:72:68:c7:ea:97:7d:7a:8e:99:85:bf:18:ad:44:b8:6c:
         37:3c:2f:77:3e:f4:87:18:e5:97:38:b6:70:8a:38:8c:49:ac:
         c2:22:ad:71:d7:db:dd:45:7f:e5:17:06:da:ad:d5:cd:d3:f0:
         fe:19:7b:08:88:93:07:89:26:8b:57:b4:61:76:b3:bd:04:28:
         02:38:d4:a0:8c:8b:62:89:4d:4f:b2:fd:d0:a8:9d:d8:18:6e:
         48:af:f2:bf:6a:bf:53:68:7c:f2:67:c6:16:ba:ca:c5:ca:eb:
         36:e5:b1:e8:87:1a:75:4c:84:0b:5f:91:72:4a:38:4f:6b:9d:
         ba:dd:6a:9f:84:b6:19:32:3c:3c:3d:e6:b4:2c:5b:f4:07:48:
         21:d2:6b:07:56:3c:e5:44:a5:70:25:30:92:a2:85:db:81:6a:
         60:da:a5:d9:9a:0d:86:55:f9:9d:85:86:22:a0:f0:8a:ae:d0:
         27:c1:1a:9a:a0:2a:97:3c:9d:97:4d:63:18:02:ae:b5:5b:64:
         fc:8e:d9:57:93:e1:13:b1:8e:ab:10:9b:07:64:66:7f:87:2f:
         6f:9a:d4:33:6d:fe:de:b6:a2:c6:29:9d:a4:38:a4:ea:f5:aa:
         78:f0:49:5e:7e:af:11:0e:13:75:33:f1:5f:1c:eb:df:18:d9:
         4a:35:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org