Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa
File:                     9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa (raw, json)
Hash identifier:          z/Kk69l8JCwdu6+/Uwwu8wkpuAa1gcrI72zuv62BNvo=
Subject key identifier:   F4:41:CE:1E:74:DF:36:B5:EB:F4:F9:A9:C2:FA:10:64:71:07:D6:52
Certificate issuer:       /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial:       0197A76E1AE71E9D218B4C90DC796CBD32B1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa
Signing time:             Wed 25 Jun 2025 14:11:40 +0000
ROA not before:           Wed 25 Jun 2025 14:11:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation:               Failed, certificate revoked on Wed 25 Jun 2025 15:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:a7:6e:1a:e7:1e:9d:21:8b:4c:90:dc:79:6c:bd:32:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
        Validity
            Not Before: Jun 25 14:11:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f441ce1e74df36b5ebf4f9a9c2fa10647107d652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:c3:ba:f9:f4:c9:48:0e:0c:8c:9c:00:cc:
                    f0:79:c2:8d:6c:a6:ad:25:71:aa:25:e3:34:84:de:
                    a0:93:39:a6:d2:4b:7b:79:43:cf:92:06:e5:37:18:
                    3e:e3:46:18:11:b9:e3:8c:ba:ae:e0:bc:f1:ef:f5:
                    7b:e9:2c:89:45:a8:2c:b6:78:e2:64:2e:0d:78:e0:
                    2c:8d:9f:49:1d:8c:f7:ba:ad:ff:0d:b3:f8:34:50:
                    5b:b2:7a:f7:ad:10:fe:b4:ba:10:84:18:67:ac:4d:
                    65:ef:0c:dd:a3:b8:fe:7a:7b:8b:b2:1e:0a:b8:5f:
                    e7:8c:c5:e4:12:74:94:28:fd:ec:3d:ee:89:a0:31:
                    57:fe:a7:ef:c1:98:72:f8:87:8d:6f:f2:77:8c:e0:
                    2f:b9:bf:7c:8e:fb:e9:2c:23:de:46:af:59:42:4b:
                    f4:9e:26:50:f6:20:30:41:d2:84:38:23:94:96:6d:
                    f1:8e:fa:bf:5e:4c:70:7c:cd:76:d2:72:c9:38:8a:
                    32:b1:e8:7e:9a:7e:2a:88:50:34:4e:40:44:29:bb:
                    34:2e:09:ff:26:d3:02:58:d0:c9:77:c4:ef:a8:17:
                    68:e2:ae:33:4d:40:f8:ff:01:53:7e:15:83:26:bf:
                    43:70:98:81:b1:85:16:a0:98:8e:8f:1c:13:29:25:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:41:CE:1E:74:DF:36:B5:EB:F4:F9:A9:C2:FA:10:64:71:07:D6:52
            X509v3 Authority Key Identifier:
                keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:197:6851:789c/128

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:d5:76:53:53:37:56:52:06:67:f6:5c:06:b7:05:cb:a6:
         2a:d8:1d:85:49:2e:26:52:b4:7f:e4:43:4f:36:d4:7d:55:a3:
         6f:5d:7b:bc:ba:ce:ad:e0:4e:69:be:e9:49:08:fb:35:9f:e6:
         c7:6c:8b:9b:70:cb:c0:f4:8e:e6:a8:0c:fa:d9:08:8b:15:5a:
         c5:65:8c:2a:71:1f:d2:22:ef:8d:7e:36:d4:fb:c3:e6:ae:63:
         ab:21:e9:af:1d:48:27:2d:5e:8e:66:9d:70:99:e9:56:54:4c:
         79:ba:69:a9:5a:5f:dd:63:6f:91:24:ce:9c:c0:ee:c5:93:c8:
         37:17:08:2a:77:38:c3:c3:27:ff:d4:c7:21:21:54:88:38:c7:
         5a:9a:70:a3:93:84:a2:bf:c2:6b:54:94:1d:f0:a9:0a:e1:cc:
         fa:1d:17:c2:4b:4b:d8:cd:b3:38:f2:bd:90:18:3a:6f:b5:4a:
         83:f4:6a:2f:fe:04:e5:6d:74:74:99:a8:46:39:2f:ea:cf:98:
         0c:48:bc:81:b4:e2:da:35:f4:aa:5d:74:2e:1a:98:3e:38:79:
         e1:37:7e:66:a8:92:42:f3:18:3b:5f:c3:b2:2b:aa:f3:97:8e:
         fd:de:4e:d7:b3:d9:ec:ea:69:db:42:4e:f5:59:61:27:44:bf:
         62:af:31:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:23:47 2025 by rpki-client