Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RZyO56BCHpeI7u1p9_dRKGlZmXI.roa
File:                     RZyO56BCHpeI7u1p9_dRKGlZmXI.roa (raw, json)
Hash identifier:          yccU+HVNg6eLoyKcvoseovRoq1U1nzS3aywQbBXZwiQ=
Subject key identifier:   45:9C:8E:E7:A0:42:1E:97:88:EE:ED:69:F7:F7:51:28:69:59:99:72
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F6262536D5C7835FD0D1CBB7F81A726
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RZyO56BCHpeI7u1p9_dRKGlZmXI.roa
Signing time:             Tue 25 Jun 2024 12:32:46 +0000
ROA not before:           Tue 25 Jun 2024 12:32:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396603
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 26 Nov 2024 13:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:62:53:6d:5c:78:35:fd:0d:1c:bb:7f:81:a7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=459c8ee7a0421e9788eeed69f7f7512869599972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:a9:8a:2c:dc:41:d1:7b:72:b3:0d:9a:a0:
                    54:41:70:b0:17:18:c2:76:94:eb:e7:ec:30:47:2a:
                    ef:7b:8b:83:5e:af:0d:25:91:20:17:62:70:7f:4a:
                    36:83:c3:8a:1b:73:fa:9b:27:f6:fd:71:fc:b8:25:
                    0a:4a:82:bc:ad:2e:99:e6:c2:48:dc:ca:f8:11:ff:
                    9b:04:f5:42:da:5c:96:60:81:4b:85:78:a5:9a:a6:
                    80:12:7b:33:d2:4e:6d:ef:85:58:5b:30:44:54:ee:
                    2e:82:10:24:fe:1c:d6:aa:23:e7:a5:0e:a7:fb:97:
                    38:98:0f:ee:3b:5f:a7:a9:d7:87:0f:02:4f:fc:44:
                    53:03:be:10:ee:52:f1:44:a5:d7:1e:a8:81:2c:5d:
                    33:17:76:97:cd:a5:24:2c:5d:43:d7:50:5b:7b:50:
                    ce:73:c7:3a:f9:6e:96:91:31:e8:23:20:6f:db:df:
                    0f:6b:e9:78:b2:0f:47:10:bf:ec:dc:99:9e:be:4f:
                    17:23:03:18:a2:4d:76:b4:e4:c5:08:ce:9f:41:75:
                    26:3d:ad:ec:81:6d:6b:66:5f:68:f6:4b:d7:3a:68:
                    b5:f5:9b:86:70:3e:05:ad:b1:01:93:d8:b3:3f:58:
                    21:3a:24:3f:f5:40:58:e3:c7:6d:74:9b:49:15:7e:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:8E:E7:A0:42:1E:97:88:EE:ED:69:F7:F7:51:28:69:59:99:72
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RZyO56BCHpeI7u1p9_dRKGlZmXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:e3:2a:cb:92:ab:f0:da:cd:1c:4d:72:09:f1:43:f3:a5:
         41:a8:65:36:0c:82:49:5a:3b:c8:39:ba:f8:5e:9d:24:2b:3d:
         eb:26:38:2a:8e:93:f5:29:e0:00:33:ad:a1:0c:81:4f:14:fd:
         a1:bd:c4:7f:07:63:23:01:b9:6c:5a:f1:de:d2:7f:c7:db:36:
         c3:11:14:e8:ef:92:49:6a:f8:de:5a:98:d4:33:1d:fb:c0:55:
         2c:5c:a3:70:08:f0:56:29:b1:ee:af:75:67:ce:fe:31:4f:28:
         e4:84:d9:3b:75:c0:bf:b0:67:42:06:fc:cb:49:6a:fe:12:18:
         27:71:d7:75:31:b7:e0:73:5b:7c:37:62:b8:4a:27:bf:59:11:
         6f:7d:22:a4:21:d5:bc:40:20:5f:2a:19:bf:c5:4a:6d:07:95:
         3f:15:eb:7f:54:1c:07:15:ff:e2:cc:61:e6:66:d3:2c:ae:99:
         1b:89:95:12:5b:04:d7:80:2a:da:79:d3:d6:1a:f7:ab:12:39:
         5c:06:dd:e6:f0:30:bd:d5:ee:a6:8b:90:a0:74:37:37:13:c4:
         bc:c2:89:50:58:dd:af:1a:0d:a9:99:55:a1:76:7f:8d:19:6f:
         0a:07:a1:6a:ca:f7:fd:3b:8a:d0:d4:19:0d:10:ee:d8:18:3f:
         34:16:8d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:45 2025 by rpki-client