Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/URfkcnUR2D1GtOXiMlMKWtlPyRM.roa
File:                     URfkcnUR2D1GtOXiMlMKWtlPyRM.roa (raw, json)
Hash identifier:          SRx7J/VyfXAODWAEjqL6lNUyqOzm0k5lGEoG+T1bwvg=
Subject key identifier:   51:17:E4:72:75:11:D8:3D:46:B4:E5:E2:32:53:0A:5A:D9:4F:C9:13
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01971C40C018724CCF5DF2A291684DAADFC8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/URfkcnUR2D1GtOXiMlMKWtlPyRM.roa
Signing time:             Thu 29 May 2025 13:34:54 +0000
ROA not before:           Thu 29 May 2025 13:34:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        45.9.2.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 31 May 2025 18:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:1c:40:c0:18:72:4c:cf:5d:f2:a2:91:68:4d:aa:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: May 29 13:34:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5117e4727511d83d46b4e5e232530a5ad94fc913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:6a:c2:cd:3e:08:9c:03:85:e0:5f:a0:ed:
                    a7:7b:87:69:7f:7b:45:06:a6:2a:4d:23:84:81:7e:
                    70:c9:79:b4:93:28:ae:00:81:2c:90:65:81:94:2f:
                    66:6b:4c:cb:eb:ec:1d:98:b6:25:88:7c:f8:8d:7e:
                    c3:3f:94:3d:6f:94:7b:94:39:3d:87:1c:f1:8e:c4:
                    6c:45:13:bf:4b:d0:e4:26:99:2e:25:69:b3:01:79:
                    5d:b1:64:66:0d:31:1e:d8:93:7a:b4:bd:5b:f2:7a:
                    41:6e:62:fa:53:0b:eb:53:8a:d6:bf:84:4a:91:48:
                    da:46:d5:10:d0:78:e1:f3:01:cf:b9:22:37:39:ac:
                    e5:fe:f0:a3:47:bc:d4:e8:2c:07:23:9d:de:84:fa:
                    65:d5:7c:7e:ae:cb:a1:f6:95:e6:57:0d:ea:f4:fd:
                    32:43:3a:ea:82:cb:5b:3f:1d:81:c8:22:df:cc:20:
                    ed:87:04:62:85:ae:54:14:18:9a:71:f6:da:b2:a7:
                    96:1b:d0:62:0e:1a:34:23:ca:19:09:5b:f2:8d:b0:
                    6a:0b:94:9f:4c:12:db:4c:f3:83:2c:d3:78:4a:9e:
                    67:5a:9a:a3:30:b1:02:89:73:5b:70:ba:bb:e1:c3:
                    82:7d:1b:f4:dc:06:52:06:ea:10:c9:6b:97:60:de:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:E4:72:75:11:D8:3D:46:B4:E5:E2:32:53:0A:5A:D9:4F:C9:13
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/URfkcnUR2D1GtOXiMlMKWtlPyRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:bb:ea:10:61:8b:a9:66:f2:1d:3f:5b:bb:8b:0e:40:e2:ea:
         6b:41:42:e5:ab:c2:db:13:c6:61:48:16:a4:21:a0:5b:26:48:
         f5:ef:42:36:ed:d1:65:30:09:29:51:fd:d8:ca:d5:e1:db:e7:
         9b:f1:c1:c6:ae:b7:db:51:eb:f4:7d:67:dc:02:f4:db:48:20:
         3c:9c:a9:3d:c7:ab:09:73:65:1c:c7:ad:0e:9b:1f:d9:74:89:
         50:07:91:ec:3c:51:74:fd:13:ad:81:cb:3d:97:e2:31:b9:10:
         d5:0e:f8:00:95:18:da:aa:f5:65:01:f3:b8:3d:91:bc:ca:88:
         bb:4d:27:fc:99:ff:f5:4d:0e:55:94:57:0f:56:bb:29:a2:29:
         18:e0:7d:7e:7e:4b:82:cb:a6:51:9f:96:b5:71:f5:4b:88:2c:
         06:3b:1e:f6:58:15:63:ac:18:3a:e3:bc:ae:35:36:84:51:31:
         42:1e:2d:d5:70:00:86:50:bc:d0:49:87:5f:8a:db:02:ed:53:
         a8:1f:4a:45:df:14:8e:fe:4c:55:ae:ec:b7:b1:f2:27:80:fb:
         a7:5c:a3:df:4c:04:ef:32:df:c7:2c:b5:6f:bf:c4:5b:88:78:
         de:07:a6:f5:7b:ec:69:bd:90:40:f3:82:1d:9e:3c:90:67:b2:
         98:e9:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:00:02 2025 by rpki-client