Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EO474zAdmdSk1kISNQmC53ZAYVA.roa
File:                     EO474zAdmdSk1kISNQmC53ZAYVA.roa (raw, json)
Hash identifier:          j8zmSbHQfCt3O525Wbdfyq0qjmxJLlyaEpp0SUMCcZ0=
Subject key identifier:   10:EE:3B:E3:30:1D:99:D4:A4:D6:42:12:35:09:82:E7:76:40:61:50
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0196E501022BAB70DB6A7E5234EE03F008E5
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EO474zAdmdSk1kISNQmC53ZAYVA.roa
Signing time:             Sun 18 May 2025 20:06:10 +0000
ROA not before:           Sun 18 May 2025 20:06:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216344
IP address blocks:        37.32.46.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 10:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e5:01:02:2b:ab:70:db:6a:7e:52:34:ee:03:f0:08:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: May 18 20:06:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=10ee3be3301d99d4a4d64212350982e776406150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:3f:49:08:ef:28:a7:a5:01:e5:ac:5e:98:
                    11:f7:e3:ab:cd:c9:34:2d:f2:4a:b1:7d:d7:7a:ed:
                    f0:c1:58:e1:8e:78:b2:a1:ce:9c:61:f4:95:b8:98:
                    e4:12:30:89:46:08:f9:15:9f:aa:cc:c4:05:cc:f1:
                    bd:90:ff:64:86:c0:8e:ac:b6:79:94:89:2b:96:b7:
                    ec:73:f4:7a:a9:56:12:49:08:2b:41:96:f5:1d:e3:
                    a1:39:99:46:27:1b:71:df:86:db:14:42:5e:91:de:
                    39:ec:86:5a:5b:08:77:cc:f4:a0:f6:16:c6:c7:59:
                    42:5d:88:01:07:81:d1:66:5d:7e:f7:5b:f3:4c:07:
                    70:2f:bc:db:4f:48:f4:47:88:b1:2a:2e:32:e1:21:
                    49:36:e4:7d:0c:f2:eb:63:a5:eb:8d:8f:65:17:e1:
                    9b:53:dc:3a:fc:1a:5c:8d:44:6e:53:6c:97:74:08:
                    0e:49:9c:41:16:8b:89:6f:fd:4f:ba:e5:8c:8f:f7:
                    a3:84:84:b2:a7:5f:c5:78:5e:bf:d9:33:50:43:54:
                    77:0f:22:2a:1d:f0:24:3f:b3:9f:47:1d:0e:89:34:
                    33:0f:a7:9e:ca:76:df:82:c7:64:01:a8:27:54:49:
                    9d:6e:cf:26:a1:60:f4:cd:47:c6:c7:ec:e6:55:e6:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:3B:E3:30:1D:99:D4:A4:D6:42:12:35:09:82:E7:76:40:61:50
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EO474zAdmdSk1kISNQmC53ZAYVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:b1:6a:14:4b:28:f9:50:d2:fb:c5:c4:b4:46:f8:b3:76:
         02:11:2e:57:fd:6f:80:ea:fe:b5:93:34:b6:c1:8d:fc:e7:63:
         c0:17:a7:64:a3:11:d7:a7:b4:d9:c8:65:07:f4:eb:02:e1:f2:
         29:20:11:81:8f:86:a6:8b:37:c1:86:d2:34:a9:5f:bd:6c:04:
         9a:9e:fd:2d:d1:25:24:b5:31:99:67:ea:14:38:7f:09:6e:85:
         1d:4e:af:62:4a:a5:92:b5:e6:7d:89:55:33:10:4e:c2:3f:f1:
         3d:87:27:c0:be:4d:13:44:e2:47:09:3d:c3:48:28:b3:18:17:
         9e:8c:b1:4f:28:07:19:87:2d:41:74:d2:54:23:e9:d0:4f:28:
         46:5a:6b:c9:e2:ef:d3:26:1e:b1:d7:33:53:23:c9:13:24:5a:
         0b:96:21:17:b0:cc:87:15:60:d2:67:24:29:c8:91:fe:96:c3:
         98:87:34:ec:f7:80:53:f5:bf:db:ba:8e:cf:e6:63:4e:e5:83:
         b1:c5:45:b2:bf:4d:f4:19:02:d3:60:b6:2d:19:40:92:4f:26:
         05:98:c4:51:fa:e2:ec:1d:24:3b:03:8a:13:b9:5a:8a:9f:42:
         f7:13:e4:14:b2:6f:23:5c:dd:56:0c:46:8a:d9:45:8d:ab:d0:
         03:ee:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:50:39 2025 by rpki-client