Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/g06w_FA0Vzp5ygggmbeVArgiMHQ.roa
File:                     g06w_FA0Vzp5ygggmbeVArgiMHQ.roa (raw, json)
Hash identifier:          WNkgceh2kGntpOLSbC6zyM7jcLTJVLKgC/bc5vdaLUw=
Subject key identifier:   83:4E:B0:FC:50:34:57:3A:79:CA:08:20:99:B7:95:02:B8:22:30:74
Certificate issuer:       /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial:       018CC500D95B0F4DBC1033107A8CB2CC3F56
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/g06w_FA0Vzp5ygggmbeVArgiMHQ.roa
Signing time:             Mon 01 Jan 2024 12:30:16 +0000
ROA not before:           Mon 01 Jan 2024 12:30:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205800
IP address blocks:        188.72.41.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 07 Mar 2024 14:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:d9:5b:0f:4d:bc:10:33:10:7a:8c:b2:cc:3f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
        Validity
            Not Before: Jan  1 12:30:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=834eb0fc5034573a79ca082099b79502b8223074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:10:7f:5d:58:b2:e8:fa:7e:38:19:ec:2c:06:
                    d7:57:fc:a2:1e:2d:ac:29:bd:28:b4:51:20:ac:a9:
                    81:1c:77:00:c1:cc:12:30:9a:9f:fe:cc:16:6c:cb:
                    d0:e1:a4:05:55:e1:27:01:a2:1e:95:5b:c2:25:0e:
                    64:39:70:50:0d:78:ed:67:61:67:33:db:fb:ee:c8:
                    a3:42:90:a7:c5:50:d3:1f:72:35:9d:d8:66:ea:f3:
                    43:76:4a:38:1c:7f:85:04:3c:ef:42:4f:5e:f4:cd:
                    a5:69:4a:8b:c2:f9:db:a5:b6:e9:27:27:6c:af:0c:
                    1a:8b:5e:91:73:7e:5f:b8:b4:3e:90:2a:59:f3:8e:
                    b5:f0:36:a7:9b:df:d4:ce:00:49:93:cc:c4:c3:7f:
                    b0:34:b5:da:fa:d8:29:61:48:71:97:83:07:fa:cf:
                    a6:2e:7f:29:82:c1:e6:ce:e1:57:eb:71:21:97:aa:
                    b9:b1:2f:ab:37:06:9a:ce:62:1c:13:fb:5b:a2:8c:
                    24:73:df:86:dd:6a:ef:5a:7f:52:bd:03:2a:00:35:
                    64:27:f4:86:93:ef:c2:10:75:27:5c:f1:35:4f:fd:
                    5e:49:f9:d3:62:84:42:77:89:41:af:30:0b:98:c8:
                    ad:bc:fb:1b:e9:14:e6:9e:80:b6:fe:df:f3:ff:74:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4E:B0:FC:50:34:57:3A:79:CA:08:20:99:B7:95:02:B8:22:30:74
            X509v3 Authority Key Identifier:
                keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/g06w_FA0Vzp5ygggmbeVArgiMHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:39:c4:f4:0e:3d:20:68:a6:87:48:35:7c:58:30:4c:13:
         f6:ed:48:e4:da:49:50:f4:d6:2e:31:59:3f:0a:f8:fa:e9:09:
         dd:58:24:c5:36:73:a1:8a:c5:06:6d:48:87:13:68:c9:a8:d8:
         71:14:bb:0b:f6:d4:56:ba:1c:41:7b:b7:46:90:32:2d:bf:b4:
         fd:40:02:8a:df:d2:69:00:f9:e3:a5:c0:f3:e3:f0:9c:72:04:
         ad:4a:bc:d6:43:59:4c:01:fb:01:b1:d7:03:13:e0:9c:03:ad:
         d9:3d:cb:b4:16:5f:f9:1e:34:ca:2e:0f:69:3b:52:f0:13:ea:
         8a:56:78:d0:18:f2:d1:3c:7d:53:82:cf:78:e8:9e:6d:f8:97:
         ee:31:4b:2d:92:b5:11:0c:cd:a8:3c:4a:78:ca:9f:ff:a1:7f:
         ac:2e:18:b2:72:21:21:0c:e1:ed:b8:9c:a8:0e:4b:e9:d2:9b:
         a1:ee:a8:b1:0e:7c:b3:16:c9:aa:ce:bd:bf:66:09:dc:0b:ec:
         1e:9d:46:21:7b:c4:c8:35:f4:1e:a6:43:d5:bc:68:11:5d:d3:
         a7:ba:5f:08:ce:ed:65:1e:1a:36:69:57:32:fe:57:08:f8:7d:
         02:df:b0:1f:ec:36:39:fa:ee:d5:b9:29:24:82:2b:d6:6b:65:
         87:bb:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:30:15 2025 by rpki-client