Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/48qzsDxaV21vbulblL5cxT8fP7g.roa
File:                     48qzsDxaV21vbulblL5cxT8fP7g.roa (raw, json)
Hash identifier:          cvh3YkhdzwgfvVTAszwL+Qj65100Lz+E7e3aIoIN+Is=
Subject key identifier:   E3:CA:B3:B0:3C:5A:57:6D:6F:6E:E9:5B:94:BE:5C:C5:3F:1F:3F:B8
Certificate issuer:       /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial:       0197B03A562B9B21435E17EC9AE5FFB42435
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/48qzsDxaV21vbulblL5cxT8fP7g.roa
Signing time:             Fri 27 Jun 2025 07:11:42 +0000
ROA not before:           Fri 27 Jun 2025 07:11:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation:               Failed, certificate revoked on Fri 27 Jun 2025 08:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b0:3a:56:2b:9b:21:43:5e:17:ec:9a:e5:ff:b4:24:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
        Validity
            Not Before: Jun 27 07:11:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3cab3b03c5a576d6f6ee95b94be5cc53f1f3fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:a4:c6:7f:5b:c9:0c:5f:ad:dd:46:9c:3f:
                    91:95:0f:1d:e1:1a:c9:cb:dd:b0:aa:e5:fc:67:38:
                    d7:b6:05:22:fe:99:b2:4a:9c:a8:83:69:e0:5b:4a:
                    02:fc:99:99:80:0f:b6:d7:3c:78:67:40:1a:fe:fd:
                    1a:ec:1e:cb:94:30:b9:1e:e8:38:c8:0e:56:90:c1:
                    05:c4:ec:22:af:16:0c:f8:8e:a2:c2:69:54:c1:86:
                    24:25:e4:d7:bf:e4:49:01:4c:5e:c5:ce:8f:47:83:
                    64:f9:1f:9b:e2:65:76:1d:c3:10:21:65:f5:bf:5e:
                    2e:5b:48:76:63:fe:a7:a3:a3:c8:6d:6b:b0:72:49:
                    c6:90:aa:75:fa:f5:22:4f:7c:5c:c5:17:23:be:d5:
                    da:b2:27:46:7e:0a:99:0a:5c:42:1c:fb:9f:64:70:
                    c0:16:6c:4e:02:91:9f:76:e7:b8:dd:d9:4b:b0:5e:
                    d3:9f:c0:27:86:ca:a8:e0:4d:67:5d:59:c7:7a:b6:
                    94:83:a7:09:a3:ab:04:a5:6d:e2:ab:94:68:47:56:
                    a5:a6:39:bd:12:66:b5:39:85:fc:d8:4f:31:c9:86:
                    b8:39:02:a8:9d:39:b4:19:0a:38:a5:a7:7c:b7:4e:
                    ad:aa:f5:ae:a5:d0:7b:14:c8:2a:c7:35:08:f0:04:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:B3:B0:3C:5A:57:6D:6F:6E:E9:5B:94:BE:5C:C5:3F:1F:3F:B8
            X509v3 Authority Key Identifier:
                keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/48qzsDxaV21vbulblL5cxT8fP7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:197:6851:789c/128

    Signature Algorithm: sha256WithRSAEncryption
         07:12:2b:94:5b:a3:b3:e4:68:df:63:2e:6e:04:0b:bf:8f:39:
         0b:f2:4b:cd:e9:3c:55:38:59:c5:d9:7c:4d:72:69:79:50:04:
         a9:f0:b1:29:67:cc:4d:4e:16:4a:8e:cf:10:8b:7d:6d:73:11:
         a1:47:04:f6:f3:8f:60:84:08:83:95:bb:c7:58:fb:4e:a1:1d:
         f0:12:bc:58:e6:0f:8c:1d:87:9c:bc:0a:49:68:c3:df:f9:99:
         8e:23:e2:01:6c:d0:f8:d3:53:73:21:ed:dc:e1:c6:55:13:d5:
         23:cc:50:b8:87:fa:d9:fa:97:10:be:f0:29:a5:4e:ec:8c:a0:
         13:9a:83:ab:fb:34:5a:b6:2f:8c:81:d7:fd:e4:42:22:8a:70:
         51:1b:4a:9d:db:92:61:c9:cf:e6:ef:04:24:7a:6e:f9:91:80:
         87:20:cb:ea:07:b8:da:53:49:ce:5a:2d:2d:47:1c:23:da:93:
         dd:e9:9c:33:e6:bb:c3:5e:6f:87:62:78:c1:8c:4f:d0:0f:bd:
         70:40:ea:f2:ac:d9:5e:e7:c0:1d:a8:12:cc:96:96:83:0c:13:
         b2:78:31:be:99:59:90:ff:10:39:ab:ed:8e:f9:6d:d1:09:13:
         77:92:33:6f:27:67:ad:4b:33:44:b9:3f:86:cf:72:15:d1:8c:
         19:e2:3c:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:45:21 2025 by rpki-client