Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS26262.roa
File:                     AS26262.roa (raw, json)
Hash identifier:          7i0IV0P4EeXTjeNp+4nqiL46zcGoyqNrFdWu/g8/VZQ=
Subject key identifier:   35:17:E4:F8:90:72:E5:F2:E4:C4:3B:33:36:E1:82:7B:DA:91:E9:F1
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       3E38FC08E9698956DB4A6F500AC1AF0DFF6E3B4A
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS26262.roa
Signing time:             Tue 11 Mar 2025 08:41:50 +0000
ROA not before:           Tue 11 Mar 2025 08:36:50 +0000
ROA not after:            Tue 10 Mar 2026 08:41:50 +0000
asID:                     26262
IP address blocks:        62.182.34.0/24 maxlen: 24
                          62.182.35.0/24 maxlen: 24
                          176.53.156.0/24 maxlen: 24
                          194.93.50.0/24 maxlen: 24
                          194.93.51.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 11 Mar 2025 14:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:38:fc:08:e9:69:89:56:db:4a:6f:50:0a:c1:af:0d:ff:6e:3b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Mar 11 08:36:50 2025 GMT
            Not After : Mar 10 08:41:50 2026 GMT
        Subject: CN=3517E4F89072E5F2E4C43B3336E1827BDA91E9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:50:fa:e6:c6:f1:c0:d7:46:9e:29:5c:e7:
                    a4:66:e5:a9:64:8c:62:ef:76:06:6e:51:9a:41:8f:
                    67:75:4e:66:44:c4:ba:39:65:3c:14:85:7a:34:e1:
                    6b:8f:52:ff:f8:63:b8:c8:ec:66:3f:12:81:6f:0a:
                    4f:ce:f0:05:4e:91:99:32:ef:6f:dd:03:ab:d2:0b:
                    c8:13:b6:65:56:53:e8:fb:97:02:eb:c6:d7:62:71:
                    57:70:a7:00:44:39:74:84:c3:3e:7e:68:1d:cc:e0:
                    48:04:94:78:e0:19:4d:35:2b:b8:65:b8:25:83:6c:
                    7b:55:78:b6:0c:df:d9:75:1c:41:74:08:52:32:a3:
                    ed:f9:42:64:f1:76:39:80:72:fb:c9:1b:63:db:30:
                    b4:dc:1a:a9:a7:f5:0c:31:43:14:e8:0b:e5:59:32:
                    f0:ab:c0:78:a6:a4:ce:30:f8:fe:9d:3f:f6:26:d9:
                    9c:4b:b8:7f:4e:d5:e1:af:a4:53:71:34:35:9a:b3:
                    be:6e:d8:78:15:b5:a5:d3:2d:91:cb:60:62:24:94:
                    40:b3:c1:05:99:63:10:24:34:bc:16:28:89:09:c4:
                    4f:d6:52:05:24:78:e2:e6:b8:1b:4a:85:0b:4a:37:
                    85:9d:24:f6:ad:1e:aa:8a:70:2f:03:17:30:f8:31:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:E4:F8:90:72:E5:F2:E4:C4:3B:33:36:E1:82:7B:DA:91:E9:F1
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS26262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.34.0/23
                  176.53.156.0/24
                  194.93.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:1f:75:c8:38:3a:c2:59:b5:00:1f:14:c6:2e:26:93:69:4f:
         92:f6:46:ed:06:ff:55:25:05:de:be:d8:63:0f:f9:e6:68:0e:
         6e:75:79:8f:46:91:4b:c9:4c:76:d2:07:2e:73:1f:5a:bd:9b:
         52:cb:ec:94:b0:16:96:17:43:fb:5a:0e:eb:0f:9d:38:70:8b:
         cc:3d:d1:a4:0a:11:7d:0d:1d:65:2c:f5:98:3e:87:f6:a4:bd:
         f8:25:ba:54:af:10:09:f8:1a:bb:6a:54:91:2d:b4:66:57:da:
         ae:bc:a4:a2:1a:51:99:c1:d8:8a:37:05:7e:0c:75:12:e0:4c:
         75:54:c2:a9:7f:2d:a7:1b:ee:aa:46:63:ff:b6:be:1a:b4:8e:
         ac:16:b0:1e:a8:82:ba:74:c7:2c:1f:b1:33:13:b2:02:91:56:
         38:9a:c0:4f:53:85:b8:16:a4:a5:41:49:40:68:10:b2:5b:85:
         e9:ea:25:3e:18:9e:28:b3:19:17:8f:e7:77:74:17:1c:14:6c:
         1f:54:ed:b9:b4:d6:6d:ef:a0:7f:e5:64:85:41:44:70:37:51:
         20:86:c9:c2:ba:f8:a8:e8:32:69:28:b8:36:3a:dd:7f:19:b3:
         62:da:8f:d2:92:03:b5:84:54:5a:61:b9:03:24:85:c2:5e:20:
         91:fe:12:36
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUPjj8COlpiVbbSm9QCsGvDf9uO0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAzMTEwODM2NTBaFw0yNjAzMTAwODQxNTBaMDMxMTAvBgNV
BAMTKDM1MTdFNEY4OTA3MkU1RjJFNEM0M0IzMzM2RTE4MjdCREE5MUU5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTuFD65sbxwNdGnilc56Rm5alk
jGLvdgZuUZpBj2d1TmZExLo5ZTwUhXo04WuPUv/4Y7jI7GY/EoFvCk/O8AVOkZky
72/dA6vSC8gTtmVWU+j7lwLrxtdicVdwpwBEOXSEwz5+aB3M4EgElHjgGU01K7hl
uCWDbHtVeLYM39l1HEF0CFIyo+35QmTxdjmAcvvJG2PbMLTcGqmn9QwxQxToC+VZ
MvCrwHimpM4w+P6dP/Ym2ZxLuH9O1eGvpFNxNDWas75u2HgVtaXTLZHLYGIklECz
wQWZYxAkNLwWKIkJxE/WUgUkeOLmuBtKhQtKN4WdJPatHqqKcC8DFzD4MVfhAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUNRfk+JBy5fLkxDszNuGCe9qR6fEwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjYyNjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAE+tiID
BACwNZwDBAHCXTIwDQYJKoZIhvcNAQELBQADggEBAHgfdcg4OsJZtQAfFMYuJpNp
T5L2Ru0G/1UlBd6+2GMP+eZoDm51eY9GkUvJTHbSBy5zH1q9m1LL7JSwFpYXQ/ta
DusPnThwi8w90aQKEX0NHWUs9Zg+h/akvfglulSvEAn4GrtqVJEttGZX2q68pKIa
UZnB2Io3BX4MdRLgTHVUwql/Lacb7qpGY/+2vhq0jqwWsB6ogrp0xywfsTMTsgKR
VjiawE9ThbgWpKVBSUBoELJbhenqJT4YniizGReP53d0FxwUbB9U7bm01m3voH/l
ZIVBRHA3USCGycK6+KjoMmkouDY63X8Zs2Laj9KSA7WEVFphuQMkhcJeIJH+EjY=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:01:26 2025 by rpki-client