Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rWBAQIU3NFltV3ve2kKJj4p2c-0.roa
File:                     rWBAQIU3NFltV3ve2kKJj4p2c-0.roa (raw, json)
Hash identifier:          IGPR3v/wPgPKOE8T/8Qhv20o3RT/+8hmeFImHq2rfmI=
Subject key identifier:   AD:60:40:40:85:37:34:59:6D:57:7B:DE:DA:42:89:8F:8A:76:73:ED
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       0195C6C935247DCEB6300BDFE886957E2FAC
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rWBAQIU3NFltV3ve2kKJj4p2c-0.roa
Signing time:             Mon 24 Mar 2025 06:13:49 +0000
ROA not before:           Mon 24 Mar 2025 06:13:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212987
IP address blocks:        81.15.196.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Mar 2025 08:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c6:c9:35:24:7d:ce:b6:30:0b:df:e8:86:95:7e:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Mar 24 06:13:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ad604040853734596d577bdeda42898f8a7673ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:73:ad:2d:e5:45:30:36:2e:cf:68:33:2f:
                    80:bd:09:16:46:48:2b:a1:87:42:50:91:e1:a6:39:
                    3f:df:ef:a5:ea:7f:95:95:12:93:b6:71:a4:e8:12:
                    f5:33:73:19:c7:5b:ac:f5:2a:c5:ab:e3:26:4c:14:
                    e6:ed:b2:1c:7b:c4:4d:c2:90:d2:b5:61:2c:8d:f7:
                    f0:ae:53:4e:72:13:c3:05:ae:ff:32:87:00:80:46:
                    9b:3a:44:3f:83:09:3f:8f:6d:40:1f:08:fe:b2:ec:
                    73:0c:90:ea:df:84:a9:4d:26:12:a8:73:00:f0:13:
                    a8:02:3e:87:a5:72:cc:84:50:be:f7:99:dc:cf:77:
                    b1:a9:bd:48:a6:cf:15:d1:2e:db:f6:2d:cb:f0:54:
                    3e:3c:ec:8a:fa:97:e9:9a:97:37:79:a0:ea:98:b6:
                    aa:34:7d:87:5d:99:49:f5:f5:ef:a8:98:61:9d:7a:
                    dd:02:5a:69:3d:b3:8f:27:dc:99:5a:d9:b8:d5:c5:
                    3b:00:cf:bc:c3:96:de:a6:a5:b7:c4:44:38:ff:6f:
                    76:dc:29:9c:0c:ee:c0:4f:01:21:5b:4a:6a:d2:65:
                    36:38:e1:3b:69:50:b9:ab:7f:35:1f:fc:32:b4:48:
                    ae:4f:fb:da:21:72:29:fc:93:e1:5b:f2:9e:4f:68:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:60:40:40:85:37:34:59:6D:57:7B:DE:DA:42:89:8F:8A:76:73:ED
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rWBAQIU3NFltV3ve2kKJj4p2c-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:87:53:02:fb:c3:69:26:ed:f2:55:31:5e:f7:53:9a:1a:
         57:86:d7:a0:ba:4b:83:02:16:b2:25:1b:74:3e:0e:09:a1:b0:
         e9:2c:eb:2e:cb:b6:e2:14:91:04:68:86:65:78:25:c0:58:19:
         19:ec:6c:77:ba:f4:9d:9c:70:15:20:58:bc:17:5c:00:95:35:
         e0:3c:a2:9b:fa:10:21:50:9b:6f:b1:d1:36:2c:2a:9b:a2:8c:
         cb:81:f8:0e:00:17:04:3a:4b:1c:d2:5f:4a:e6:0f:26:7f:6c:
         cc:d8:b8:55:0d:9c:4c:56:67:55:ce:ef:10:fe:a3:ad:96:cd:
         84:59:a1:88:04:cb:4c:f4:3c:9b:74:f1:95:07:ae:59:d9:9a:
         d0:6f:f5:16:c4:51:36:f4:68:bf:55:db:03:6f:0a:c8:53:29:
         78:58:3a:8d:25:32:cc:26:d4:c4:6b:35:c8:5c:6a:19:1b:85:
         37:a9:14:29:9c:68:8d:b2:82:b0:2f:d7:98:b3:43:37:ee:d7:
         b0:40:51:50:3a:f1:e2:da:c3:16:16:8c:2d:e7:30:54:81:95:
         0d:5c:72:ff:9c:ab:a4:50:fd:14:6e:fc:e3:60:e1:5c:97:5e:
         24:11:56:36:f2:4e:8b:a3:70:a5:8c:be:ae:49:c3:3f:b7:10:
         c5:26:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:28:37 2025 by rpki-client