Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RPct9ynkBBvQblqUquhveEl0YdY.roa
File:                     RPct9ynkBBvQblqUquhveEl0YdY.roa (raw, json)
Hash identifier:          qmzZIro0KsXGXTUBh/cGLWe5RTKjV8UoM9ZtdzGXSnY=
Subject key identifier:   44:F7:2D:F7:29:E4:04:1B:D0:6E:5A:94:AA:E8:6F:78:49:74:61:D6
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F6271CA7D43CDFB4B8A67AEAB70C955
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RPct9ynkBBvQblqUquhveEl0YdY.roa
Signing time:             Tue 25 Jun 2024 12:32:50 +0000
ROA not before:           Tue 25 Jun 2024 12:32:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397203
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:71:ca:7d:43:cd:fb:4b:8a:67:ae:ab:70:c9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=44f72df729e4041bd06e5a94aae86f78497461d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:66:87:31:ae:98:36:3e:64:88:71:79:38:
                    7d:04:90:26:9d:d3:38:1c:42:d3:21:53:fe:74:99:
                    fb:e6:7a:42:4f:43:cc:30:20:d5:ba:e2:31:19:dc:
                    96:39:b8:71:7e:9a:6b:1f:fc:e6:1d:5c:1a:9c:bc:
                    6e:bb:e9:a5:d1:39:fe:0b:bf:6c:95:a1:0d:2e:1e:
                    4d:cb:92:75:42:09:a4:29:ff:e2:e5:3a:de:89:89:
                    ea:88:04:aa:b9:3d:9e:7a:fe:af:e3:81:43:5c:5a:
                    3d:88:9c:21:91:2f:9e:5a:30:2f:f9:11:b1:53:c2:
                    76:20:b5:d2:40:1b:5d:40:a3:08:8d:0c:e1:0b:e9:
                    2e:49:21:04:01:81:1a:23:b6:81:46:8f:47:d8:ee:
                    1a:01:cb:cd:e4:d5:f3:e0:c1:b3:17:76:a1:73:c8:
                    9f:f1:ee:d0:26:0f:de:0f:93:b3:8c:5e:6f:b8:a2:
                    fd:14:fd:a6:02:df:8f:97:6f:d7:0b:55:aa:77:9e:
                    29:14:69:ff:81:ba:20:7d:bc:6c:e9:17:1b:96:b7:
                    ba:26:96:e8:7b:06:22:71:1d:42:b7:97:65:6d:6e:
                    1d:aa:1a:a0:c5:d5:c9:9f:7b:35:65:47:a0:1f:97:
                    00:ca:15:51:e3:b5:b1:c6:60:13:e4:03:e3:f4:2b:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:2D:F7:29:E4:04:1B:D0:6E:5A:94:AA:E8:6F:78:49:74:61:D6
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RPct9ynkBBvQblqUquhveEl0YdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:01:08:11:af:41:5b:6e:f2:79:d9:cb:d8:8a:f5:11:1a:
         4c:20:dc:c9:a5:9e:1a:35:40:7f:58:12:3d:61:0b:dc:5b:0d:
         b1:70:cf:c9:1e:91:17:cb:fd:d4:7c:ea:e7:d4:24:e5:d7:02:
         44:ae:f0:ac:20:61:fe:40:17:bc:5e:5c:64:23:ec:b7:70:35:
         62:c6:c6:6e:64:e3:a9:ec:1b:fd:d6:11:dc:2a:6d:05:27:a9:
         52:46:e5:4f:0b:f1:9a:10:6c:f7:97:c0:67:7a:bb:95:07:25:
         00:cb:dc:99:18:8a:4f:a6:b9:17:c5:79:ae:ab:d4:40:f5:4a:
         d0:80:ee:2a:df:ea:46:15:99:a6:ce:1d:1c:17:35:0c:17:cb:
         a7:84:d1:94:4f:b8:52:c7:56:60:fb:c5:f8:bd:e8:a7:53:d7:
         46:9f:a0:12:aa:b6:df:07:06:c8:5f:33:df:31:a1:29:83:62:
         de:e6:02:05:93:5e:3f:90:dc:f2:e7:4f:ab:24:47:d3:b1:7e:
         82:ea:62:ab:30:b9:42:4b:71:c8:16:a9:9c:b3:e8:91:c6:96:
         ea:0b:f1:15:82:19:44:35:0c:5d:ef:cb:fb:a1:48:df:e3:d1:
         53:cf:9e:94:33:5e:4d:6d:39:08:8a:80:e4:04:a2:06:6c:b6:
         9e:5a:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:07 2025 by rpki-client