Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6xgXDKX5pOyKNwNPaqiKl2XPu9g.roa
File:                     6xgXDKX5pOyKNwNPaqiKl2XPu9g.roa (raw, json)
Hash identifier:          V3B03ZwBWeRsddCsMsr4sws09DbBwlHHTwIs+aMiP/Y=
Subject key identifier:   EB:18:17:0C:A5:F9:A4:EC:8A:37:03:4F:6A:A8:8A:97:65:CF:BB:D8
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F62744AB551081D84ADE80AFDD620A0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6xgXDKX5pOyKNwNPaqiKl2XPu9g.roa
Signing time:             Tue 25 Jun 2024 12:32:50 +0000
ROA not before:           Tue 25 Jun 2024 12:32:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397209
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:74:4a:b5:51:08:1d:84:ad:e8:0a:fd:d6:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb18170ca5f9a4ec8a37034f6aa88a9765cfbbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:93:e8:da:9d:89:46:24:83:30:d4:86:b3:
                    97:c9:9c:45:41:40:ca:62:ff:fa:e0:f3:8b:0d:b9:
                    0c:3a:04:05:89:b5:a8:e3:da:2a:3c:d8:0f:12:9c:
                    00:79:20:7e:d1:69:1f:ef:59:1e:01:62:0e:fb:22:
                    b2:27:07:53:66:b7:a7:b1:9f:f1:db:6e:40:fb:1b:
                    86:26:e2:5e:94:24:ae:88:5a:8a:eb:67:9f:b5:9a:
                    7b:4a:4b:ef:90:c4:f1:f5:11:cc:09:b6:b9:0f:46:
                    13:61:c3:07:a1:c4:dc:6b:2b:d2:f6:e2:e8:04:6a:
                    28:a0:a7:83:f8:0d:e4:ef:ef:06:34:38:e5:55:80:
                    78:b8:0c:54:39:25:e7:07:e1:31:81:87:b9:21:05:
                    47:53:0c:6a:7b:fc:fc:38:6d:f4:11:e0:18:3a:42:
                    30:48:52:fc:96:f1:07:04:46:9f:68:26:5f:af:2d:
                    7c:12:a0:67:b4:90:f0:49:7a:27:20:a0:f9:c7:ee:
                    42:8a:f5:a9:63:86:f1:97:cc:a9:5e:6d:77:9e:1a:
                    58:d8:32:49:e7:a3:e0:25:b5:a4:30:fd:19:75:12:
                    ff:36:7d:26:de:b1:ed:f3:83:e1:c9:5c:85:db:31:
                    66:30:da:05:87:18:b4:e6:eb:2a:8b:aa:50:4b:20:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:18:17:0C:A5:F9:A4:EC:8A:37:03:4F:6A:A8:8A:97:65:CF:BB:D8
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6xgXDKX5pOyKNwNPaqiKl2XPu9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         96:56:82:df:41:db:eb:81:98:c7:f3:2e:7b:fa:72:02:71:47:
         ce:b7:1e:27:f9:a2:01:1b:0c:e4:08:3b:c9:9a:0c:53:d8:ba:
         bc:2f:7c:a3:6b:e9:15:3b:05:02:1a:18:01:55:77:17:73:4a:
         a3:6e:ed:dd:41:5f:4e:82:c4:f7:3b:fa:3e:8c:0d:bc:de:2b:
         3e:bc:aa:c0:0b:84:6c:e8:85:a7:44:03:91:9b:b4:19:42:aa:
         3d:c7:a2:ef:ff:c7:29:15:17:1e:c1:f9:80:c6:4d:49:1f:4e:
         92:64:df:29:59:46:41:3c:14:48:fa:bc:b6:b7:35:74:fe:96:
         5a:c4:b2:21:58:b0:f5:d8:49:62:4e:47:eb:c5:86:bc:54:3b:
         b0:a7:c0:09:21:ea:5e:d3:be:d8:8d:7d:db:3f:77:d8:d0:a6:
         a6:ec:9d:28:c7:a0:d7:fd:b1:15:ee:7f:df:a3:85:6e:a3:a8:
         d6:33:62:4c:4d:a8:ac:64:66:e6:51:c1:a8:b3:f0:44:d8:23:
         ed:98:13:2f:5c:cc:a8:dc:83:07:a7:4f:7c:1e:82:c2:25:67:
         37:f9:c5:bd:ea:aa:a2:31:e2:ff:91:08:b0:49:49:03:ad:8a:
         f5:b9:cf:18:5f:0e:d7:54:74:b0:fd:09:b4:95:b5:8a:ef:df:
         8f:60:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:00 2025 by rpki-client