Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yE74zl35i2s_a9g0bevFeurFdbM.roa
File:                     yE74zl35i2s_a9g0bevFeurFdbM.roa (raw, json)
Hash identifier:          MHjV4EVdRw6MkH9VGsRMspz/BbaAPRO7Xk62/mEFXOo=
Subject key identifier:   C8:4E:F8:CE:5D:F9:8B:6B:3F:6B:D8:34:6D:EB:C5:7A:EA:C5:75:B3
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01907F095E1CBDF2D33B998CC25A916E9157
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yE74zl35i2s_a9g0bevFeurFdbM.roa
Signing time:             Thu 04 Jul 2024 18:37:18 +0000
ROA not before:           Thu 04 Jul 2024 18:37:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61164
IP address blocks:        2a01:5f20::/29 maxlen: 29
                          2a04:ee80::/29 maxlen: 29
                          2a07:1f00::/29 maxlen: 29
                          2a07:5c00::/29 maxlen: 29
                          2a07:98c0::/29 maxlen: 29
                          2a09:600::/29 maxlen: 29
                          2a09:1080::/29 maxlen: 29
                          2a09:1e00::/29 maxlen: 29
                          2a09:2480::/29 maxlen: 29
                          2a09:3380::/29 maxlen: 29
                          2a09:4700::/29 maxlen: 29
                          2a09:4780::/29 maxlen: 29
                          2a09:4b80::/29 maxlen: 29
                          2a09:4d80::/29 maxlen: 29
                          2a09:6400::/29 maxlen: 29
                          2a09:6580::/29 maxlen: 29
                          2a09:6780::/29 maxlen: 29
                          2a09:7a00::/29 maxlen: 29
                          2a09:8000::/29 maxlen: 29
                          2a09:8440::/29 maxlen: 29
                          2a09:8bc0::/29 maxlen: 29
                          2a09:9a80::/29 maxlen: 29
                          2a09:a100::/29 maxlen: 29
                          2a09:a980::/29 maxlen: 29
                          2a09:c000::/29 maxlen: 29
                          2a09:db00::/29 maxlen: 29
                          2a09:e3c0::/29 maxlen: 29
                          2a09:eb00::/29 maxlen: 29
                          2a09:f300::/29 maxlen: 29
                          2a0a:c1c0::/29 maxlen: 29
                          2a0d:29c0::/29 maxlen: 29
                          2a0d:8bc0::/29 maxlen: 29
                          2a0d:e140::/29 maxlen: 29
                          2a0d:f940::/29 maxlen: 29
                          2a0e:2180::/29 maxlen: 29
                          2a0e:8c40::/29 maxlen: 29
                          2a0e:9240::/29 maxlen: 29
                          2a0e:9440::/29 maxlen: 29
                          2a0e:b0c0::/29 maxlen: 29
                          2a0e:c040::/29 maxlen: 29
                          2a0e:d740::/29 maxlen: 29
                          2a0e:e440::/29 maxlen: 29
                          2a0e:e840::/29 maxlen: 29
                          2a0e:f040::/29 maxlen: 29
                          2a0f:1c00::/29 maxlen: 29
                          2a0f:2780::/29 maxlen: 29
                          2a0f:2c00::/29 maxlen: 29
                          2a0f:5d80::/29 maxlen: 29
                          2a0f:6340::/29 maxlen: 29
                          2a0f:71c0::/29 maxlen: 29
                          2a0f:7440::/29 maxlen: 29
                          2a0f:9500::/29 maxlen: 29
                          2a0f:d400::/29 maxlen: 29
                          2a0f:dc00::/29 maxlen: 29
                          2a12:4c40::/29 maxlen: 29
                          2a12:53c0::/29 maxlen: 29
                          2a12:8c80::/29 maxlen: 29
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7f:09:5e:1c:bd:f2:d3:3b:99:8c:c2:5a:91:6e:91:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jul  4 18:37:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c84ef8ce5df98b6b3f6bd8346debc57aeac575b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:05:b9:36:3a:19:77:d0:bb:bb:1c:25:a1:
                    6b:56:3e:eb:79:77:a3:9c:29:f0:d9:3f:2f:aa:67:
                    e3:f1:c7:e2:d2:3c:83:90:9f:c7:e2:1b:98:e8:75:
                    c0:c6:71:21:34:4c:9b:85:f7:48:dd:05:f9:46:31:
                    7e:a7:5e:03:6a:2b:ed:cb:a9:b8:5d:d9:83:92:7f:
                    77:45:0d:a2:63:a6:fd:e7:ba:68:26:8f:bc:25:38:
                    37:55:4e:58:a9:06:fe:4c:86:80:d5:c0:3a:07:67:
                    88:43:bf:f3:83:d9:51:4e:db:32:f0:07:38:68:f1:
                    e2:3b:7b:9c:59:32:f2:19:1a:20:63:b6:9a:5f:10:
                    57:2e:1a:15:40:be:4f:0b:89:67:fb:6d:b6:f2:8e:
                    8e:d3:ed:fa:7f:b8:49:85:d5:92:42:97:84:7a:83:
                    46:b2:62:61:3f:33:d8:f6:cb:11:d8:be:e5:14:55:
                    4e:31:ee:13:e6:b1:56:0d:b8:e3:95:2d:d9:60:c0:
                    5b:8d:34:8e:8b:a1:16:4c:bd:10:9f:b8:c8:1b:d0:
                    d0:e1:57:ae:5e:ac:8e:ed:cc:50:b7:31:30:7a:2e:
                    55:60:91:da:a2:9b:8c:58:39:a6:f4:d6:7b:64:9b:
                    16:8b:6b:d7:73:64:25:f5:7b:70:da:87:65:7f:8c:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:F8:CE:5D:F9:8B:6B:3F:6B:D8:34:6D:EB:C5:7A:EA:C5:75:B3
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yE74zl35i2s_a9g0bevFeurFdbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:5f20::/29
                  2a04:ee80::/29
                  2a07:1f00::/29
                  2a07:5c00::/29
                  2a07:98c0::/29
                  2a09:600::/29
                  2a09:1080::/29
                  2a09:1e00::/29
                  2a09:2480::/29
                  2a09:3380::/29
                  2a09:4700::/29
                  2a09:4780::/29
                  2a09:4b80::/29
                  2a09:4d80::/29
                  2a09:6400::/29
                  2a09:6580::/29
                  2a09:6780::/29
                  2a09:7a00::/29
                  2a09:8000::/29
                  2a09:8440::/29
                  2a09:8bc0::/29
                  2a09:9a80::/29
                  2a09:a100::/29
                  2a09:a980::/29
                  2a09:c000::/29
                  2a09:db00::/29
                  2a09:e3c0::/29
                  2a09:eb00::/29
                  2a09:f300::/29
                  2a0a:c1c0::/29
                  2a0d:29c0::/29
                  2a0d:8bc0::/29
                  2a0d:e140::/29
                  2a0d:f940::/29
                  2a0e:2180::/29
                  2a0e:8c40::/29
                  2a0e:9240::/29
                  2a0e:9440::/29
                  2a0e:b0c0::/29
                  2a0e:c040::/29
                  2a0e:d740::/29
                  2a0e:e440::/29
                  2a0e:e840::/29
                  2a0e:f040::/29
                  2a0f:1c00::/29
                  2a0f:2780::/29
                  2a0f:2c00::/29
                  2a0f:5d80::/29
                  2a0f:6340::/29
                  2a0f:71c0::/29
                  2a0f:7440::/29
                  2a0f:9500::/29
                  2a0f:d400::/29
                  2a0f:dc00::/29
                  2a12:4c40::/29
                  2a12:53c0::/29
                  2a12:8c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:27:f5:1e:ae:eb:bf:57:ab:e5:ac:98:f0:5b:68:b0:6f:21:
         2b:08:2d:d5:c0:48:19:95:3b:e9:41:02:90:19:1e:0d:07:17:
         51:19:eb:a3:2e:7a:59:23:26:76:4d:ee:9d:1a:b3:2e:24:9c:
         96:8c:da:9f:58:d7:61:54:49:2b:80:54:ea:3c:64:10:22:ac:
         49:a8:47:df:ed:37:32:66:80:ce:59:62:5e:4e:bd:8f:89:1d:
         8f:f5:c8:5a:d3:cc:6d:2e:ce:67:92:0a:48:1c:cf:1f:5c:08:
         ce:38:1b:13:75:81:03:03:53:bc:b4:df:7a:24:ef:94:8b:0d:
         1c:ef:ca:ea:1c:48:54:fc:54:c7:b2:7f:23:ef:71:78:14:a4:
         71:93:7d:e9:4b:7a:0d:c8:33:75:de:3d:af:91:d6:05:f1:63:
         ac:28:bd:0f:3f:4a:29:c8:e1:53:37:86:5f:ec:d1:f6:ae:8d:
         bb:57:69:b0:a5:61:ee:8a:3f:c7:d7:87:f0:f3:7a:26:a4:67:
         64:5a:ae:51:32:be:ae:42:b1:d5:2d:30:42:03:8b:9e:de:8d:
         68:4e:50:8f:12:ef:36:55:78:7a:a7:1e:e0:1b:14:2e:c2:17:
         1b:38:02:5f:e7:fe:2e:a1:e0:a7:89:88:cd:a5:2d:bf:74:5b:
         f6:a0:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:15 2025 by rpki-client