Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/byT1w5B12qAXegsQ_Y7HcEoejBI.roa
File:                     byT1w5B12qAXegsQ_Y7HcEoejBI.roa (raw, json)
Hash identifier:          rWgVt86FGZEIt5k79EstNnHIQa0e63Y2DOCxoftvd7E=
Subject key identifier:   6F:24:F5:C3:90:75:DA:A0:17:7A:0B:10:FD:8E:C7:70:4A:1E:8C:12
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0188D21B2AB7B88CCE8E9DF68DBBF4F8C081
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/byT1w5B12qAXegsQ_Y7HcEoejBI.roa
Signing time:             Mon 19 Jun 2023 05:22:55 +0000
ROA not before:           Mon 19 Jun 2023 05:22:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        37.156.5.0/24 maxlen: 24
                          86.107.51.0/24 maxlen: 24
                          93.90.74.0/24 maxlen: 24
                          94.198.171.0/24 maxlen: 24
                          188.213.216.0/24 maxlen: 24
                          89.47.36.0/24 maxlen: 24
                          92.114.32.0/24 maxlen: 24
                          86.107.100.0/24 maxlen: 24
                          89.45.35.0/24 maxlen: 24
                          176.223.188.0/24 maxlen: 24
                          37.153.158.0/24 maxlen: 24
                          89.47.55.0/24 maxlen: 24
                          89.35.130.0/23 maxlen: 23
                          89.35.131.0/24 maxlen: 24
                          89.45.162.0/24 maxlen: 24
                          46.102.237.0/24 maxlen: 24
                          89.46.42.0/24 maxlen: 24
                          188.241.137.0/24 maxlen: 24
                          89.34.106.0/24 maxlen: 24
                          77.81.65.0/24 maxlen: 24
                          89.40.215.0/24 maxlen: 24
                          45.88.13.0/24 maxlen: 24
                          45.88.14.0/23 maxlen: 23
                          77.81.88.0/24 maxlen: 24
                          188.214.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 09:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d2:1b:2a:b7:b8:8c:ce:8e:9d:f6:8d:bb:f4:f8:c0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 19 05:22:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f24f5c39075daa0177a0b10fd8ec7704a1e8c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:48:e1:5d:fd:34:91:66:d5:23:65:72:3e:
                    3c:9c:2d:3a:68:6f:d1:83:33:b9:d9:aa:3d:e3:41:
                    db:2f:a1:42:1c:33:d8:d3:c6:a6:3b:90:2e:47:57:
                    88:e3:0c:36:66:c3:6f:53:58:d9:d3:72:33:60:3f:
                    02:9f:59:67:af:2c:97:b0:47:17:15:05:f7:79:1c:
                    18:e0:58:12:de:62:ff:d6:37:46:34:ab:72:07:a7:
                    6a:c5:e3:f9:a3:5a:b7:12:12:73:e3:d4:03:2d:11:
                    de:b3:de:ca:08:ce:35:b4:ac:0c:37:65:14:25:aa:
                    bf:32:a5:5a:24:8c:44:84:a9:35:ff:5a:d7:f8:66:
                    06:78:f5:c7:7d:c4:e0:fe:e2:e4:62:5b:e5:7c:b6:
                    7d:ab:cd:63:38:dc:e7:70:78:86:61:be:a1:ca:37:
                    ba:11:38:24:fa:00:7a:d9:b7:7e:f8:84:d1:1b:03:
                    ec:ab:fe:c1:40:76:71:4a:a1:95:b6:61:81:30:d8:
                    a3:4e:d5:1f:06:95:10:70:78:b3:36:ee:ce:2f:f4:
                    9c:53:db:e5:04:c3:83:05:04:c4:ea:a7:8d:60:0e:
                    c9:99:ae:5c:86:f3:df:78:5a:d9:97:97:de:b8:97:
                    58:0f:2f:c2:00:19:b0:09:36:fd:1f:ad:0a:cc:36:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:F5:C3:90:75:DA:A0:17:7A:0B:10:FD:8E:C7:70:4A:1E:8C:12
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/byT1w5B12qAXegsQ_Y7HcEoejBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.153.158.0/24
                  37.156.5.0/24
                  45.88.13.0-45.88.15.255
                  46.102.237.0/24
                  77.81.65.0/24
                  77.81.88.0/24
                  86.107.51.0/24
                  86.107.100.0/24
                  89.34.106.0/24
                  89.35.130.0/23
                  89.40.215.0/24
                  89.45.35.0/24
                  89.45.162.0/24
                  89.46.42.0/24
                  89.47.36.0/24
                  89.47.55.0/24
                  92.114.32.0/24
                  93.90.74.0/24
                  94.198.171.0/24
                  176.223.188.0/24
                  188.213.216.0/24
                  188.214.107.0/24
                  188.241.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:06:ca:e3:6f:83:f6:48:24:1d:26:5d:8f:d8:68:7a:cd:12:
         fa:5c:b1:88:88:34:17:7c:45:11:0f:92:bc:f7:2d:ae:8d:4f:
         da:48:91:5a:e8:bb:b5:75:86:97:81:8a:c4:d4:ba:fd:0c:42:
         e4:fa:c9:cb:97:01:db:3f:89:87:66:49:85:c8:80:1b:a7:19:
         eb:79:16:14:61:2d:f1:6c:d7:39:f5:89:ab:17:8e:5e:a8:17:
         31:32:0a:cc:39:af:99:b8:31:97:36:42:2c:7d:73:06:8b:7c:
         8a:12:ad:71:7f:33:02:18:ef:73:fa:f1:85:f8:cc:67:5c:eb:
         1a:00:26:fb:b3:41:58:d3:95:24:df:a5:58:20:63:10:88:9b:
         60:7f:0a:ca:3c:97:cd:cf:86:a4:a5:71:ca:e9:15:26:16:87:
         5e:4e:c6:9d:d5:2a:67:6d:a1:7a:c2:94:14:4e:f9:fc:99:ce:
         88:e7:c4:eb:28:8c:ed:12:5c:c8:b5:94:87:f0:a7:5c:a6:65:
         c3:00:05:65:c9:f0:a0:5b:95:88:c2:32:52:e2:f9:ee:ce:b9:
         9b:30:a1:b3:ce:2c:ab:dc:71:03:c1:94:97:71:e7:da:8f:4e:
         ed:63:eb:a9:26:fb:1b:2d:6d:32:3c:ec:f2:c4:ed:0d:1b:e0:
         99:e6:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org