Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/j19sw2_Mbi-6pfRMXN48BxipkuA.roa
File:                     j19sw2_Mbi-6pfRMXN48BxipkuA.roa (raw, json)
Hash identifier:          wbKe1L54tsgMqciiUNkKC51FK8tWRRpiln8MoHMQUYs=
Subject key identifier:   8F:5F:6C:C3:6F:CC:6E:2F:BA:A5:F4:4C:5C:DE:3C:07:18:A9:92:E0
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       01974231EE8FF16FAD28360CB9316EE9D31A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/j19sw2_Mbi-6pfRMXN48BxipkuA.roa
Signing time:             Thu 05 Jun 2025 22:24:18 +0000
ROA not before:           Thu 05 Jun 2025 22:24:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        14.102.226.0/23 maxlen: 24
                          14.102.227.0/24 maxlen: 24
                          77.111.96.0/22 maxlen: 22
                          77.111.102.0/23 maxlen: 24
                          89.106.15.0/24 maxlen: 24
                          94.229.212.0/24 maxlen: 24
                          94.229.220.0/24 maxlen: 24
                          94.229.222.0/24 maxlen: 24
                          94.229.223.0/24 maxlen: 24
                          103.47.59.0/24 maxlen: 24
                          194.36.34.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 09 Jun 2025 15:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:42:31:ee:8f:f1:6f:ad:28:36:0c:b9:31:6e:e9:d3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jun  5 22:24:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f5f6cc36fcc6e2fbaa5f44c5cde3c0718a992e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3c:29:01:89:eb:0c:0b:e2:47:76:d0:61:c3:
                    4d:2d:d7:7d:78:09:19:e9:03:35:fc:96:01:b6:78:
                    66:d2:37:9a:01:63:ad:29:59:8f:aa:21:23:10:32:
                    a7:95:ad:b7:27:95:3d:48:33:88:5d:f9:8e:e3:5a:
                    83:60:4b:66:17:b5:01:ab:b8:88:ce:9c:6f:d8:6c:
                    9a:b7:92:16:6a:eb:bf:10:6c:69:36:13:22:2e:ef:
                    67:63:ab:d7:fd:9c:dc:36:6a:ae:ae:88:27:65:0f:
                    a8:ab:0c:82:c5:c0:2b:e1:b6:d1:21:49:5a:62:fa:
                    b9:8d:98:1e:c3:b0:45:05:6e:51:26:8a:87:1f:ee:
                    c0:59:db:89:43:67:19:1d:bf:f4:ff:04:b6:1d:53:
                    ed:14:28:13:72:dc:b5:24:d2:a8:02:10:7d:ac:43:
                    66:d4:c9:cc:51:9b:46:53:1e:8c:83:e6:ea:b0:eb:
                    a6:93:fd:5b:d5:d0:ac:b2:19:e3:66:7d:77:4c:1b:
                    04:2b:79:a0:63:d6:a1:75:e6:38:4d:5b:c5:02:da:
                    2c:0c:89:d5:37:b2:cd:95:7e:e3:03:54:76:38:6e:
                    e2:90:ef:b0:3c:73:7a:66:e0:ec:a8:5f:5e:3a:4c:
                    0a:cc:a5:e1:f4:ff:24:36:14:c4:17:68:d9:8a:1f:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:6C:C3:6F:CC:6E:2F:BA:A5:F4:4C:5C:DE:3C:07:18:A9:92:E0
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/j19sw2_Mbi-6pfRMXN48BxipkuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.226.0/23
                  77.111.96.0/22
                  77.111.102.0/23
                  89.106.15.0/24
                  94.229.212.0/24
                  94.229.220.0/24
                  94.229.222.0/23
                  103.47.59.0/24
                  194.36.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:95:9f:a5:f4:dc:18:eb:f1:61:f9:c6:28:2e:ad:64:ea:
         6f:71:42:20:83:04:ee:ae:dc:64:7d:3a:1f:d1:e1:15:1f:02:
         82:14:5a:9a:51:c5:6e:d2:d4:01:65:ec:85:6f:21:1e:5d:38:
         8a:27:68:28:0f:4e:53:de:92:14:52:1d:d4:4a:9a:86:d2:d2:
         e3:28:70:70:b0:19:ae:34:8a:7d:85:7e:16:30:15:58:95:f9:
         2f:0e:3e:91:c5:9f:0d:15:14:d6:c4:40:06:39:1d:43:38:73:
         14:9b:65:d0:b1:b8:3d:d9:ff:32:1f:03:2c:7e:72:63:b7:8e:
         e5:59:a6:37:86:a6:9a:37:ac:20:cd:d9:42:a9:22:09:2d:5a:
         c6:27:70:e2:ad:e6:e5:64:33:d8:8a:29:7a:1f:08:9d:2b:05:
         96:e6:2c:df:32:06:d2:13:ac:29:96:07:3f:42:13:f2:29:e6:
         55:f9:e6:bb:7b:93:e6:ec:7f:c0:15:f7:db:b2:1e:99:9e:ad:
         e9:f6:9a:2d:db:e6:43:2b:29:8e:ab:42:74:4c:34:ef:82:66:
         97:e1:30:99:64:80:4f:31:42:f3:8c:f6:37:0d:8b:88:fc:09:
         eb:1d:8f:0a:ca:03:84:fe:35:96:6b:c4:76:40:b0:1a:9a:c5:
         7c:8f:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:39 2025 by rpki-client