Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Lrde6IElP0CSEoisBkdbFRn1Kvg.roa
File:                     Lrde6IElP0CSEoisBkdbFRn1Kvg.roa (raw, json)
Hash identifier:          S1Ejvu5mUx3O2HNLevwYbMtSa47JSlrxSb9nKBIq43Q=
Subject key identifier:   2E:B7:5E:E8:81:25:3F:40:92:12:88:AC:06:47:5B:15:19:F5:2A:F8
Certificate issuer:       /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial:       01971C723079EAA8B5464AFA786C049A4C4B
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Lrde6IElP0CSEoisBkdbFRn1Kvg.roa
Signing time:             Thu 29 May 2025 14:28:54 +0000
ROA not before:           Thu 29 May 2025 14:28:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8241
IP address blocks:        195.146.64.0/19 maxlen: 19
                          213.181.16.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 29 May 2025 14:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:1c:72:30:79:ea:a8:b5:46:4a:fa:78:6c:04:9a:4c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
        Validity
            Not Before: May 29 14:28:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2eb75ee881253f40921288ac06475b1519f52af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:8c:f2:6e:6b:57:19:85:d3:9a:a8:ce:15:
                    ea:6e:50:5b:2a:e8:b5:a6:67:95:3e:c3:80:11:60:
                    cf:35:60:b3:77:47:ad:a5:93:d6:48:0c:cc:30:5c:
                    c6:f3:32:6d:f8:8e:75:3d:8b:16:56:cd:1e:0b:dd:
                    b5:37:4e:3e:11:4b:9c:3f:04:89:92:3c:8b:4f:49:
                    0e:a5:3d:4c:5f:3f:fa:d2:a0:63:56:03:c8:dd:3d:
                    18:a7:8b:68:8e:53:27:49:8f:1c:b0:4d:2d:f0:5c:
                    e1:b3:e3:94:21:eb:38:80:2b:af:79:28:c3:67:49:
                    68:03:ed:fa:74:bb:7b:0f:1b:56:f1:f4:fc:b4:95:
                    91:5c:be:f1:af:28:84:24:82:9a:b7:e0:1a:d1:86:
                    f8:ff:df:df:df:47:95:ae:3d:ec:3d:35:6d:6f:95:
                    d0:52:d2:4e:f8:ff:d7:b6:f9:ed:c5:9e:47:7e:0d:
                    b8:18:56:a1:ff:6b:0b:8a:55:bf:1b:22:7e:53:8c:
                    5f:f0:c8:67:b4:e2:9b:ce:95:63:f0:81:ef:f4:34:
                    c8:bf:4f:47:5f:73:42:c0:2b:18:3d:3c:db:e9:86:
                    fe:7e:fc:e4:9f:f0:01:8d:96:26:e3:74:22:f0:16:
                    59:b7:b0:23:4b:2c:31:56:17:73:9a:4f:eb:0a:d4:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B7:5E:E8:81:25:3F:40:92:12:88:AC:06:47:5B:15:19:F5:2A:F8
            X509v3 Authority Key Identifier:
                keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Lrde6IElP0CSEoisBkdbFRn1Kvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.146.64.0/19
                  213.181.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:fd:95:05:91:27:e1:11:1f:29:2d:74:df:87:17:23:ca:
         19:98:33:bf:c4:5d:3e:97:f4:64:9b:5f:b8:4b:b5:2f:b0:68:
         51:fb:e1:84:ad:e6:33:e8:3d:c4:8f:f5:dd:e5:0c:32:2c:a6:
         4f:f8:10:04:09:5f:97:6f:15:b4:cf:50:e2:27:36:f7:8f:d0:
         df:b8:d2:b0:3c:d2:70:c1:c4:6a:ca:ff:78:f8:12:39:ae:67:
         53:76:21:ed:ae:1c:c9:f7:9e:96:2f:02:7d:10:75:b2:88:9f:
         c9:57:f1:70:70:c3:53:ac:25:b5:f0:a4:96:a8:eb:44:36:ba:
         06:25:b2:3b:e5:ac:39:61:78:db:51:a1:df:ce:ce:df:30:01:
         10:33:a1:8e:08:60:26:83:ab:0c:04:b1:8b:2d:0f:68:b7:e7:
         24:ce:a2:e9:4c:ab:17:2a:76:0c:b7:5c:44:c2:fd:c6:f6:f9:
         df:de:f2:10:28:75:44:19:d0:69:52:fd:76:ec:07:64:dd:ea:
         68:c3:91:ed:96:0d:56:80:b6:e7:af:b7:db:51:4f:98:7a:67:
         77:bc:db:c8:76:b8:d0:1e:34:a8:3f:62:70:7a:9a:2d:d0:e8:
         ed:26:d6:54:48:c0:a0:f6:59:12:79:8b:6f:81:11:b2:ba:58:
         ea:25:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:29:12 2025 by rpki-client