Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/ve7euixI--ENUSOTrBo0cjMutzw.roa
File:                     ve7euixI--ENUSOTrBo0cjMutzw.roa (raw, json)
Hash identifier:          OGJJYb5CgsRMMfpWWXyZhP9OFmlBrRwnxJDtv2fcLN8=
Subject key identifier:   BD:EE:DE:BA:2C:48:FB:E1:0D:51:23:93:AC:1A:34:72:33:2E:B7:3C
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       018CC5DC31DE7B941E2E6C2FAB5872840D68
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/ve7euixI--ENUSOTrBo0cjMutzw.roa
Signing time:             Mon 01 Jan 2024 16:29:51 +0000
ROA not before:           Mon 01 Jan 2024 16:29:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200019
IP address blocks:        37.221.65.0/24 maxlen: 24
                          37.221.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 08:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:31:de:7b:94:1e:2e:6c:2f:ab:58:72:84:0d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Jan  1 16:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bdeedeba2c48fbe10d512393ac1a3472332eb73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:34:ba:c1:5d:6d:b5:c5:8f:77:c1:a6:58:
                    32:72:26:06:01:2c:25:a6:6c:ed:b1:ac:bb:67:ca:
                    a8:18:6a:a5:75:e5:7d:d1:f2:04:0b:39:8b:69:24:
                    17:c1:18:46:79:31:b3:c4:29:58:f9:2b:a6:83:de:
                    5a:cd:16:e7:0d:98:20:67:91:8f:ba:57:c1:30:bb:
                    7e:4c:d5:6a:d7:af:4d:81:67:b3:96:59:37:14:0c:
                    bb:d1:86:d5:16:09:9f:fd:2a:65:69:bc:b9:3b:b1:
                    a9:ab:13:5d:ea:50:6c:d1:7d:53:e1:4c:b8:2b:4a:
                    be:d3:56:6f:0c:94:90:c3:61:1a:fb:fa:54:bc:4a:
                    a1:f4:da:be:82:5f:36:26:d5:64:5a:01:c9:a7:66:
                    a3:56:25:aa:a8:4b:c0:88:44:1f:3d:a9:e1:af:50:
                    3e:ae:65:7a:88:a7:eb:dc:c2:ea:8e:8b:50:ff:42:
                    34:d1:86:c2:e8:0d:0c:b7:0b:e2:e3:2a:37:af:5f:
                    1b:60:3b:ba:2c:60:23:b3:41:b4:55:47:1e:29:97:
                    df:03:7e:dd:08:1a:87:18:66:d4:cb:a7:33:5b:23:
                    5c:8f:05:e0:97:db:8f:ad:21:ba:38:df:06:c4:9e:
                    4b:8d:0a:ab:6e:e7:af:70:a0:55:b0:75:7f:44:b7:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:DE:BA:2C:48:FB:E1:0D:51:23:93:AC:1A:34:72:33:2E:B7:3C
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/ve7euixI--ENUSOTrBo0cjMutzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:dc:b4:eb:4c:73:6b:08:0f:ca:8b:30:a1:72:c3:f1:c9:
         eb:f1:aa:ba:f9:68:ea:ea:c5:db:78:50:35:95:5d:7a:c5:f1:
         e2:b0:c9:79:fa:66:a3:c1:85:e5:8a:28:1a:c9:41:e4:6f:20:
         d1:a3:0c:b0:ad:67:31:01:3d:18:b2:de:e8:8d:1c:0a:42:b5:
         08:1a:99:0f:c8:2a:0c:1e:cc:b8:ea:21:6e:32:ca:e0:ba:f5:
         3d:2d:aa:b6:c4:77:73:f8:6c:84:02:3c:4f:4d:6d:eb:01:71:
         14:aa:14:c8:69:c8:9f:4c:e2:29:a0:af:7c:03:59:94:67:b0:
         b1:bf:bb:d1:af:eb:a2:ee:e2:96:bb:11:28:db:be:10:9a:8a:
         7e:04:a7:46:10:8f:bd:83:55:af:b9:3f:33:a0:96:80:86:ba:
         df:e1:4d:5a:bf:cd:65:d6:68:cf:e7:54:cf:d0:4f:7b:74:63:
         9d:38:99:94:1a:5f:96:ea:7d:d6:cf:15:bd:ef:fc:f3:28:1c:
         0c:bc:80:3a:9d:3d:8c:bc:5c:d6:41:29:9e:e3:51:e9:56:e4:
         06:a7:2e:40:56:7f:21:24:37:65:3b:bf:22:16:ed:f4:af:c2:
         3e:93:81:19:d6:d1:8f:66:5d:f1:b2:dc:fc:7e:eb:26:6c:ea:
         37:e6:30:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3DHee5QeLmwvq1hyhA1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjQwMTAxMTYyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGVlZGViYTJjNDhmYmUxMGQ1MTIzOTNhYzFhMzQ3MjMzMmViNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6c0usFdbbXFj3fBplgyciYGASwl
pmztsay7Z8qoGGqldeV90fIECzmLaSQXwRhGeTGzxClY+Sumg95azRbnDZggZ5GP
ulfBMLt+TNVq169NgWezllk3FAy70YbVFgmf/Splaby5O7GpqxNd6lBs0X1T4Uy4
K0q+01ZvDJSQw2Ea+/pUvEqh9Nq+gl82JtVkWgHJp2ajViWqqEvAiEQfPanhr1A+
rmV6iKfr3MLqjotQ/0I00YbC6A0Mtwvi4yo3r18bYDu6LGAjs0G0VUceKZffA37d
CBqHGGbUy6czWyNcjwXgl9uPrSG6ON8GxJ5LjQqrbuevcKBVsHV/RLdb7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3u3rosSPvhDVEjk6waNHIzLrc8MB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvdmU3ZXVpeEktLUVOVVNPVHJCbzBjak11dHp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJd1AMA0G
CSqGSIb3DQEBCwUAA4IBAQBsSdy060xzawgPyoswoXLD8cnr8aq6+Wjq6sXbeFA1
lV16xfHisMl5+majwYXliigayUHkbyDRowywrWcxAT0Yst7ojRwKQrUIGpkPyCoM
Hsy46iFuMsrguvU9Laq2xHdz+GyEAjxPTW3rAXEUqhTIacifTOIpoK98A1mUZ7Cx
v7vRr+ui7uKWuxEo274Qmop+BKdGEI+9g1WvuT8zoJaAhrrf4U1av81l1mjP51TP
0E97dGOdOJmUGl+W6n3WzxW97/zzKBwMvIA6nT2MvFzWQSme41HpVuQGpy5AVn8h
JDdlO78iFu30r8I+k4EZ1tGPZl3xstz8fusmbOo35jD2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org