Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/VOmwH7US5hPZMFtpmE8fi1Z62Cs.roa
File:                     VOmwH7US5hPZMFtpmE8fi1Z62Cs.roa (raw, json)
Hash identifier:          QkjCwOzMWXEfJyk3Hb9lQa+zBW3DsgxlYB/7LqfSGcQ=
Subject key identifier:   54:E9:B0:1F:B5:12:E6:13:D9:30:5B:69:98:4F:1F:8B:56:7A:D8:2B
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       0190A712EFE1A177A26AAA171CB51359D251
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/VOmwH7US5hPZMFtpmE8fi1Z62Cs.roa
Signing time:             Fri 12 Jul 2024 13:12:34 +0000
ROA not before:           Fri 12 Jul 2024 13:12:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212027
IP address blocks:        37.230.138.0/24 maxlen: 24
                          45.143.196.0/22 maxlen: 24
                          81.16.176.0/24 maxlen: 24
                          81.16.177.0/24 maxlen: 24
                          91.208.92.0/24 maxlen: 24
                          185.206.148.0/24 maxlen: 24
                          185.206.149.0/24 maxlen: 24
                          185.206.150.0/24 maxlen: 24
                          185.206.151.0/24 maxlen: 24
                          188.64.33.0/24 maxlen: 24
                          194.164.96.0/24 maxlen: 24
                          194.213.3.0/24 maxlen: 24
                          213.170.135.0/24 maxlen: 24
                          2a10:e780::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 14:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a7:12:ef:e1:a1:77:a2:6a:aa:17:1c:b5:13:59:d2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: Jul 12 13:12:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=54e9b01fb512e613d9305b69984f1f8b567ad82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:cc:1b:28:62:74:2d:4f:23:be:ee:d3:7a:
                    44:17:ae:c9:d5:ba:f1:ca:a9:c8:51:42:32:d1:f9:
                    1e:31:30:ef:76:17:8a:ab:1e:ba:6c:b5:af:19:04:
                    41:f6:60:75:e0:52:87:9b:45:4e:4e:e2:82:65:08:
                    48:ac:a0:58:91:f3:77:25:1c:d0:de:f2:24:01:25:
                    de:b2:23:45:b7:9a:23:77:ce:04:f0:9f:cd:50:2b:
                    44:f5:99:f1:f7:3f:d6:f9:80:9f:53:42:a3:c4:33:
                    e2:54:28:e0:0d:8a:79:06:62:08:d2:ad:86:f1:da:
                    ed:50:d8:71:a0:bd:43:43:20:1c:31:4e:fd:25:9a:
                    6c:08:6b:54:4c:92:7b:82:13:0d:50:5d:e6:19:42:
                    9d:68:53:fe:14:b7:61:2c:e0:e2:41:a2:2c:8a:8d:
                    31:1d:22:e8:5d:cc:0c:ca:2d:8d:7e:83:f2:b8:68:
                    11:c5:52:13:28:b7:92:4e:22:5c:ba:b6:d6:89:4a:
                    b0:fe:8b:9e:01:4b:7c:8a:d5:bc:26:2d:2a:df:a7:
                    cf:84:77:60:2a:95:d9:dd:c9:a0:11:6d:1c:f2:61:
                    cd:42:15:b9:a0:1e:55:a6:d1:52:b8:5a:46:11:37:
                    9e:e1:3c:f1:4d:eb:fb:67:3b:c8:ab:ae:00:05:0d:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:B0:1F:B5:12:E6:13:D9:30:5B:69:98:4F:1F:8B:56:7A:D8:2B
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/VOmwH7US5hPZMFtpmE8fi1Z62Cs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.138.0/24
                  45.143.196.0/22
                  81.16.176.0/23
                  91.208.92.0/24
                  185.206.148.0/22
                  188.64.33.0/24
                  194.164.96.0/24
                  194.213.3.0/24
                  213.170.135.0/24
                IPv6:
                  2a10:e780::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:c3:ed:cf:f5:e9:76:5f:44:ca:50:4e:31:eb:ac:bf:1c:61:
         62:40:fc:fc:88:26:d4:5b:de:1f:06:01:22:12:81:8a:9d:ec:
         07:98:5f:4b:89:f2:2f:2e:04:8e:33:79:ed:ed:1c:3e:df:46:
         eb:31:b9:bb:af:0e:ce:d5:b4:2a:d5:f7:c3:a8:69:20:ad:03:
         4a:80:56:a4:b9:d5:16:e8:6d:8d:da:d8:d3:13:10:9f:c6:53:
         f6:75:bf:93:e1:3a:12:58:4a:eb:3c:65:a7:35:c7:b4:93:fc:
         d6:ad:00:21:f3:62:39:34:1c:d5:30:34:f8:f2:f2:0a:75:b4:
         95:a8:93:99:ed:e0:1c:50:a9:12:6c:12:92:6b:da:aa:bb:4c:
         b3:b3:16:8d:98:04:fe:77:ba:52:6b:29:ad:9e:88:8f:f7:3f:
         a6:11:73:4f:d1:33:fd:2a:23:3a:72:7e:72:fb:ca:19:53:20:
         8f:b4:10:55:5a:fd:58:96:8e:4f:2a:61:f2:31:e7:17:e0:07:
         6a:63:2b:c9:29:66:61:d5:a3:29:0a:8e:ae:92:ac:71:a9:b9:
         e3:f8:eb:02:86:22:83:b0:4b:af:3d:e7:ec:dc:70:74:2b:37:
         03:6f:0d:f2:97:01:67:ee:2b:84:22:5b:1b:74:8a:21:2c:a6:
         cb:12:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:12 2024 by rpki-client on console-fra.rpki-client.org