Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ed2bcZTIYljejz9OtW8sVohgJjI.roa
File:                     ed2bcZTIYljejz9OtW8sVohgJjI.roa (raw, json)
Hash identifier:          PTGdOTYND8Dh/hA9ioenRUzqBqMMB1hMQD7VRPjTGP4=
Subject key identifier:   79:DD:9B:71:94:C8:62:58:DE:8F:3F:4E:B5:6F:2C:56:88:60:26:32
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0190C05F60CB0278C041C29F87071378966E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ed2bcZTIYljejz9OtW8sVohgJjI.roa
Signing time:             Wed 17 Jul 2024 11:06:34 +0000
ROA not before:           Wed 17 Jul 2024 11:06:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211014
IP address blocks:        45.144.173.0/24 maxlen: 24
                          89.40.70.0/24 maxlen: 24
                          89.45.44.0/24 maxlen: 24
                          93.113.255.0/24 maxlen: 24
                          185.141.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 11:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c0:5f:60:cb:02:78:c0:41:c2:9f:87:07:13:78:96:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jul 17 11:06:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79dd9b7194c86258de8f3f4eb56f2c5688602632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:7d:f8:23:25:cc:41:e9:0c:b7:3a:64:bc:
                    c9:81:51:ac:62:41:48:d6:b5:d0:d4:7c:aa:43:a4:
                    00:70:48:3f:88:99:69:ce:eb:82:fa:51:d2:15:59:
                    53:0e:5f:d1:c8:8b:2a:fc:38:9c:e2:56:2d:f8:36:
                    b8:53:29:23:e3:e9:dc:df:9a:8c:ff:92:10:62:b7:
                    28:b8:cd:38:57:84:87:11:bb:56:5d:89:8c:ca:7c:
                    e8:5b:fb:f8:76:ce:e1:71:60:36:b7:b3:29:2f:01:
                    13:47:ae:bb:a4:82:ba:0e:7c:5e:3a:0f:e5:c1:45:
                    3d:c8:79:e3:48:b8:dc:5f:38:bb:a5:a0:bd:0f:69:
                    ff:47:7f:4a:1f:f8:d6:60:53:e9:41:28:e0:db:8d:
                    49:26:d8:2b:99:98:7b:5e:81:5a:5b:15:8f:08:7d:
                    eb:a6:8a:77:76:9c:08:9b:53:44:c5:9a:5a:2c:19:
                    1c:4d:a8:50:ae:fd:07:6d:8d:6d:14:96:1c:b4:a8:
                    83:74:89:dd:ea:c0:f0:1b:1f:53:ca:f3:3c:0f:ae:
                    0b:3b:7a:f3:40:a0:f3:bf:8d:5c:6a:46:41:ff:45:
                    97:00:a2:98:de:a7:a4:f4:e2:47:2c:2d:1a:b6:c1:
                    ae:e1:bf:d7:71:f3:55:16:c2:95:97:4f:cc:71:75:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DD:9B:71:94:C8:62:58:DE:8F:3F:4E:B5:6F:2C:56:88:60:26:32
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ed2bcZTIYljejz9OtW8sVohgJjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.173.0/24
                  89.40.70.0/24
                  89.45.44.0/24
                  93.113.255.0/24
                  185.141.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:6a:6f:40:f1:22:db:68:6e:35:26:5f:c1:23:3e:68:3b:4d:
         43:b8:cf:db:bc:59:d4:a6:aa:17:eb:4e:f9:1a:46:ad:7d:4e:
         7c:b7:42:94:6a:46:ef:ca:26:e8:58:80:d3:5f:0d:b1:df:39:
         81:dc:05:97:02:49:48:61:86:3d:a1:f0:26:68:3c:8a:5e:cc:
         c6:ab:b1:24:d8:3f:b2:7f:0f:20:70:22:db:10:d7:dd:3a:08:
         74:49:3b:e1:e8:2c:6d:ff:a8:4d:1c:5f:cc:20:62:eb:aa:fb:
         da:ad:0e:7e:51:0d:68:68:e3:19:1d:07:72:62:67:05:55:db:
         05:27:43:40:fd:77:84:1f:4d:7e:f0:8a:c9:60:9f:df:78:5c:
         50:1c:01:6a:a7:59:d8:46:77:48:d5:eb:48:54:3a:f0:08:15:
         e4:7c:37:35:3a:03:e1:05:fc:89:3a:8d:3f:b9:e0:ec:d5:5a:
         55:d3:8c:a7:d0:34:e7:27:d0:45:e5:34:dd:25:b1:7c:17:fb:
         1d:41:de:c1:cb:1f:fe:3c:ab:77:14:fa:d9:8b:08:c7:68:77:
         ce:bd:1c:2e:f0:d4:5f:5c:9f:8b:d0:9e:89:90:ae:34:07:81:
         10:14:0d:0d:91:b6:7e:8e:3d:79:87:59:19:7f:5d:9d:f6:16:
         6f:a8:83:ee
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZDAX2DLAnjAQcKfhwcTeJZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNzE3MTEwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRkOWI3MTk0Yzg2MjU4ZGU4ZjNmNGViNTZmMmM1Njg4NjAyNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8p9+CMlzEHpDLc6ZLzJgVGsYkFI
1rXQ1HyqQ6QAcEg/iJlpzuuC+lHSFVlTDl/RyIsq/Dic4lYt+Da4Uykj4+nc35qM
/5IQYrcouM04V4SHEbtWXYmMynzoW/v4ds7hcWA2t7MpLwETR667pIK6DnxeOg/l
wUU9yHnjSLjcXzi7paC9D2n/R39KH/jWYFPpQSjg241JJtgrmZh7XoFaWxWPCH3r
pop3dpwIm1NExZpaLBkcTahQrv0HbY1tFJYctKiDdInd6sDwGx9TyvM8D64LO3rz
QKDzv41cakZB/0WXAKKY3qek9OJHLC0atsGu4b/XcfNVFsKVl0/McXWtHwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHndm3GUyGJY3o8/TrVvLFaIYCYyMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZWQyYmNaVElZbGplano5T3RXOHNWb2hnSmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZCtAwQA
WShGAwQAWS0sAwQAXXH/AwQAuY3ZMA0GCSqGSIb3DQEBCwUAA4IBAQAKam9A8SLb
aG41Jl/BIz5oO01DuM/bvFnUpqoX6075GkatfU58t0KUakbvyiboWIDTXw2x3zmB
3AWXAklIYYY9ofAmaDyKXszGq7Ek2D+yfw8gcCLbENfdOgh0STvh6Cxt/6hNHF/M
IGLrqvvarQ5+UQ1oaOMZHQdyYmcFVdsFJ0NA/XeEH01+8IrJYJ/feFxQHAFqp1nY
RndI1etIVDrwCBXkfDc1OgPhBfyJOo0/ueDs1VpV04yn0DTnJ9BF5TTdJbF8F/sd
Qd7Byx/+PKt3FPrZiwjHaHfOvRwu8NRfXJ+L0J6JkK40B4EQFA0NkbZ+jj15h1kZ
f12d9hZvqIPu
-----END CERTIFICATE-----
Generated at Thu Aug 8 15:19:00 2024 by rpki-client on console-ams.rpki-client.org