Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/W27pM6LE3L1cN6p2Udr_Q1UzRAU.roa
File:                     W27pM6LE3L1cN6p2Udr_Q1UzRAU.roa (raw, json)
Hash identifier:          YQJolYVSUWaDFlOFm/ls9LuvxN+vqKn5ekbaQR7AaPo=
Subject key identifier:   5B:6E:E9:33:A2:C4:DC:BD:5C:37:AA:76:51:DA:FF:43:55:33:44:05
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       01902D0D2523754B7CAFA51826081A0ABC9D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/W27pM6LE3L1cN6p2Udr_Q1UzRAU.roa
Signing time:             Tue 18 Jun 2024 20:32:34 +0000
ROA not before:           Tue 18 Jun 2024 20:32:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        77.111.117.0/24 maxlen: 24
                          77.111.118.0/24 maxlen: 24
                          77.111.123.0/24 maxlen: 24
                          92.61.106.0/24 maxlen: 24
                          92.61.109.0/24 maxlen: 24
                          185.112.240.0/24 maxlen: 24
                          185.112.241.0/24 maxlen: 24
                          185.112.242.0/24 maxlen: 24
                          185.112.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 06:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2d:0d:25:23:75:4b:7c:af:a5:18:26:08:1a:0a:bc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jun 18 20:32:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5b6ee933a2c4dcbd5c37aa7651daff4355334405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:fb:43:60:01:7b:6f:ea:39:0b:e4:a6:f6:
                    d6:a5:2c:08:88:6b:25:4c:b6:9f:32:a0:cc:0e:ef:
                    7e:ce:b1:ee:91:36:ac:d8:f2:9a:a4:5b:8e:d8:02:
                    f1:cb:e9:6f:57:d4:5b:1a:5f:36:0a:10:10:10:45:
                    7d:7c:6a:c5:14:ce:9d:42:5f:cd:d6:f3:ac:47:45:
                    24:b0:e5:f7:f0:9d:52:eb:1b:ec:24:e9:31:22:66:
                    1b:a2:ed:fb:0e:f1:e1:a7:95:ea:2c:6d:18:7d:73:
                    7b:28:89:d5:e8:37:4b:65:6a:1f:b8:7c:35:a7:88:
                    68:0f:34:0f:0c:aa:bf:97:e8:4e:65:c0:13:57:a0:
                    93:25:f3:5d:d6:68:4b:66:58:64:bc:42:60:1e:55:
                    a7:fa:e8:80:f6:42:78:f4:99:23:fb:de:6b:74:eb:
                    ee:9d:9b:e3:af:54:17:f1:c5:ca:a1:3e:14:ce:a4:
                    f4:32:c9:4d:87:8e:64:4a:63:a2:d1:ec:c3:85:9f:
                    f5:fd:4d:85:1b:7c:28:b1:ef:66:3f:30:33:1c:22:
                    7c:60:7f:15:3e:ba:f2:d2:da:89:49:e0:d5:ce:ac:
                    2b:02:7d:11:7b:af:ac:e0:d0:ac:3c:39:e9:2d:9a:
                    40:38:51:90:22:03:f1:8b:cf:8f:59:98:cc:42:79:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6E:E9:33:A2:C4:DC:BD:5C:37:AA:76:51:DA:FF:43:55:33:44:05
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/W27pM6LE3L1cN6p2Udr_Q1UzRAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.117.0-77.111.118.255
                  77.111.123.0/24
                  92.61.106.0/24
                  92.61.109.0/24
                  185.112.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:f7:dd:60:5f:9f:2e:8e:e6:17:97:ef:f2:c1:7f:e0:ee:
         ac:24:56:32:b8:04:bc:8d:f8:49:12:0a:19:4c:6d:f0:09:18:
         38:76:27:ae:7c:d4:1d:71:45:72:6b:f2:ff:bd:31:73:b5:ec:
         a3:e0:93:8f:d8:1a:62:f6:e8:a1:96:98:34:3b:73:73:4b:38:
         85:e9:4b:f7:0a:3c:fd:5d:44:08:af:b7:34:f9:0b:c9:63:75:
         c0:ea:a2:dd:67:f3:04:49:67:7f:47:ba:12:02:57:40:1c:84:
         98:b4:4e:c1:2c:c7:be:86:dc:30:40:4a:ee:f0:a4:e1:8e:06:
         89:f5:40:82:f2:ac:a0:f1:08:27:21:bd:63:a7:94:fb:8d:7a:
         81:94:0c:0b:6c:e4:58:39:64:7b:63:d2:6b:f7:22:44:df:ad:
         ac:a1:da:e8:63:48:88:65:3d:47:c2:5e:d3:3e:99:98:3c:04:
         d5:67:06:82:64:70:74:b8:90:4d:82:c0:28:0f:7b:29:b0:c2:
         2f:98:de:0b:45:d6:e4:24:63:47:78:56:bb:a3:46:c6:bd:85:
         29:02:80:22:5b:d7:08:33:d4:b1:e3:17:50:d9:be:63:66:4e:
         bc:40:54:4b:f8:66:18:60:99:52:ee:2d:f4:ce:82:77:51:ca:
         3e:77:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 09:54:34 2024 by rpki-client on console-ams.rpki-client.org