Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A7JS65WLsidzwUgvRgMFEJGZxC8.roa
File:                     A7JS65WLsidzwUgvRgMFEJGZxC8.roa (raw, json)
Hash identifier:          JN4Jc5EWzu34cLVpiD3daszYYEfCw0htU3ZM4vm1HpI=
Subject key identifier:   03:B2:52:EB:95:8B:B2:27:73:C1:48:2F:46:03:05:10:91:99:C4:2F
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019427481C71C709E8F40EEBC917E057E74A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A7JS65WLsidzwUgvRgMFEJGZxC8.roa
Signing time:             Thu 02 Jan 2025 13:50:24 +0000
ROA not before:           Thu 02 Jan 2025 13:50:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     28753
IP address blocks:        2a04:9f40::/29 maxlen: 29
                          2a06:1184:101::/48 maxlen: 48
                          2a06:3bc0::/29 maxlen: 29
                          2a07:8a40::/29 maxlen: 29
                          2a09:17c1:66::/48 maxlen: 48
                          2a09:17c1:77::/48 maxlen: 48
                          2a0a:2d06:102::/48 maxlen: 48
                          2a0a:2d06:103::/48 maxlen: 48
                          2a0c:7886:99::/48 maxlen: 48
                          2a0c:7886:100::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:15c7:99::/48 maxlen: 48
                          2a0e:1a83:77::/48 maxlen: 48
                          2a0e:f603:66::/48 maxlen: 48
                          2a0f:1206:55::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:2500::/29 maxlen: 29
                          2a0f:3d86:88::/48 maxlen: 48
                          2a0f:3d86:99::/48 maxlen: 48
                          2a0f:7d06:88::/48 maxlen: 48
                          2a0f:7d06:99::/48 maxlen: 48
                          2a0f:d200::/29 maxlen: 29
                          2a0f:e1c1:22::/48 maxlen: 48
                          2a0f:e202:44::/48 maxlen: 48
                          2a0f:e202:55::/48 maxlen: 48
                          2a0f:e202:100::/48 maxlen: 48
                          2a0f:e6c6:100::/48 maxlen: 48
                          2a0f:e6c6:101::/48 maxlen: 48
                          2a0f:e7c6:66::/48 maxlen: 48
                          2a0f:e7c6:77::/48 maxlen: 48
                          2a0f:e7c6:88::/48 maxlen: 48
                          2a0f:e844:22::/48 maxlen: 48
                          2a0f:e844:33::/48 maxlen: 48
                          2a0f:ea44:66::/48 maxlen: 48
                          2a0f:ea44:77::/48 maxlen: 48
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ecc0:168::/48 maxlen: 48
                          2a12:ecc0:178::/48 maxlen: 48
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:18c6:77::/48 maxlen: 48
                          2a13:18c6:88::/48 maxlen: 48
                          2a13:7d80::/29 maxlen: 29
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:8c86:120::/48 maxlen: 48
                          2a13:8c86:130::/48 maxlen: 48
                          2a13:c900:88::/48 maxlen: 48
                          2a13:c900:99::/48 maxlen: 48
                          2a13:e107:99::/48 maxlen: 48
                          2a13:e107:9c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 15 Jan 2025 22:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:1c:71:c7:09:e8:f4:0e:eb:c9:17:e0:57:e7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  2 13:50:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03b252eb958bb22773c1482f460305109199c42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:14:2d:22:98:ee:6a:a1:b9:42:d5:01:ba:
                    3a:e1:ae:51:25:62:a5:73:dd:26:c6:40:62:16:8f:
                    ed:45:be:23:11:3d:71:07:4c:89:6f:fd:74:91:38:
                    ea:76:90:eb:21:92:37:e0:8e:1e:fe:fc:35:1a:65:
                    a0:95:fb:c4:63:7f:9a:8e:86:eb:07:10:cf:bc:0c:
                    04:af:a3:a5:c6:ae:3d:de:85:fd:60:0c:06:13:c4:
                    91:da:06:a9:b8:98:af:36:69:66:47:7e:fd:c7:03:
                    2a:e1:fa:2e:50:b0:89:18:7f:6c:3e:61:9c:c6:dc:
                    38:2a:e0:e5:96:2e:dd:23:9a:18:42:e6:01:b8:88:
                    76:9a:89:9f:17:0d:d7:d7:98:8d:57:85:5e:65:71:
                    d2:42:2d:af:9a:82:1a:0e:78:aa:5a:f5:18:eb:02:
                    81:cf:23:30:f1:c8:78:bb:53:10:25:66:d5:6c:cf:
                    f8:b9:2a:79:7a:6f:f5:74:51:b2:58:eb:23:cd:bc:
                    b3:19:47:e8:0c:0d:5f:f0:63:63:20:3e:4e:2f:d9:
                    ec:88:b0:5c:df:f2:11:a1:fd:78:df:a5:97:7f:ae:
                    9b:b7:b7:5e:ff:e8:ac:f3:c8:7b:a7:25:c6:00:7d:
                    95:a8:6e:f9:f2:39:e2:ff:44:86:d0:15:cb:14:ca:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:52:EB:95:8B:B2:27:73:C1:48:2F:46:03:05:10:91:99:C4:2F
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A7JS65WLsidzwUgvRgMFEJGZxC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:9f40::/29
                  2a06:1184:101::/48
                  2a06:3bc0::/29
                  2a07:8a40::/29
                  2a09:17c1:66::/48
                  2a09:17c1:77::/48
                  2a0a:2d06:102::/47
                  2a0c:7886:99::/48
                  2a0c:7886:100::/48
                  2a0e:15c7:88::/48
                  2a0e:15c7:99::/48
                  2a0e:1a83:77::/48
                  2a0e:f603:66::/48
                  2a0f:1206:55::/48
                  2a0f:1206:66::/48
                  2a0f:2500::/29
                  2a0f:3d86:88::/48
                  2a0f:3d86:99::/48
                  2a0f:7d06:88::/48
                  2a0f:7d06:99::/48
                  2a0f:d200::/29
                  2a0f:e1c1:22::/48
                  2a0f:e202:44::/48
                  2a0f:e202:55::/48
                  2a0f:e202:100::/48
                  2a0f:e6c6:100::/47
                  2a0f:e7c6:66::/48
                  2a0f:e7c6:77::/48
                  2a0f:e7c6:88::/48
                  2a0f:e844:22::/48
                  2a0f:e844:33::/48
                  2a0f:ea44:66::/48
                  2a0f:ea44:77::/48
                  2a12:ac46:77::/48
                  2a12:ecc0:168::/48
                  2a12:ecc0:178::/48
                  2a13:18c6:55::/48
                  2a13:18c6:77::/48
                  2a13:18c6:88::/48
                  2a13:7d80::/29
                  2a13:8c86:10a::/48
                  2a13:8c86:120::/48
                  2a13:8c86:130::/48
                  2a13:c900:88::/48
                  2a13:c900:99::/48
                  2a13:e107:99::/48
                  2a13:e107:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:5a:9c:5a:9b:ec:11:0f:03:e3:19:f8:c2:40:96:ec:bd:
         ec:3e:11:ad:27:b7:b1:36:d3:23:4b:2c:d1:7f:43:6d:e7:6e:
         aa:6b:df:1f:a7:12:f5:7b:d9:eb:b7:b3:78:29:20:8d:5f:04:
         d8:19:f6:4c:53:2f:f9:79:d6:ac:33:fb:5a:6d:7f:a8:85:3a:
         84:6b:60:3e:a4:63:6c:e0:9d:c9:40:9d:fc:fd:dd:75:7a:1a:
         bb:3c:64:ff:66:25:6a:80:ca:b0:cd:a4:af:d5:25:d7:ae:4e:
         ec:b5:a9:10:73:d0:99:66:bf:bc:48:19:b5:7b:18:80:f0:b5:
         df:d0:d9:5e:80:c2:dd:40:34:32:86:f7:d6:ea:95:6d:83:7b:
         ce:42:8d:c8:d6:57:0c:80:ef:8c:60:d5:45:31:f3:a2:8c:47:
         f0:a2:bd:ea:b0:1f:92:f4:ed:97:af:d6:5e:d1:f3:55:58:4d:
         6b:fe:10:31:0e:68:63:69:2b:66:0c:25:fa:c5:08:20:0a:92:
         46:92:bc:f3:60:8e:1a:34:13:2c:cc:0d:9e:b3:23:05:2c:80:
         a0:18:db:29:aa:ee:c9:8f:20:a8:63:85:c2:9e:95:e6:64:fc:
         f0:22:d8:66:d7:73:29:5f:8e:56:62:e2:d7:bd:30:fa:eb:3c:
         79:eb:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:08 2025 by rpki-client