Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z0mVIzzwihiMrChjaUfgLAAcrzk.roa
File:                     Z0mVIzzwihiMrChjaUfgLAAcrzk.roa (raw, json)
Hash identifier:          T5T6lkDC3yCNJIhSu0bJj6TNlxuLUdjE+FT03IFD5Mo=
Subject key identifier:   67:49:95:23:3C:F0:8A:18:8C:AC:28:63:69:47:E0:2C:00:1C:AF:39
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01985C130E5601E5D81C259745C9F9C6757E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z0mVIzzwihiMrChjaUfgLAAcrzk.roa
Signing time:             Wed 30 Jul 2025 16:03:29 +0000
ROA not before:           Wed 30 Jul 2025 16:03:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3319
IP address blocks:        77.47.142.0/24 maxlen: 24
                          185.143.56.0/22 maxlen: 24
                          195.178.132.0/24 maxlen: 24
                          195.178.133.0/24 maxlen: 24
                          195.178.134.0/24 maxlen: 24
                          195.178.135.0/24 maxlen: 24
                          195.178.144.0/23 maxlen: 23
                          195.178.147.0/24 maxlen: 24
                          195.178.152.0/22 maxlen: 22
                          212.111.207.0/24 maxlen: 24
                          212.111.216.0/24 maxlen: 24
                          212.111.217.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 17:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5c:13:0e:56:01:e5:d8:1c:25:97:45:c9:f9:c6:75:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jul 30 16:03:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=674995233cf08a188cac28636947e02c001caf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:23:9a:05:8a:6c:62:8e:ea:9d:e3:4d:61:
                    2a:c1:76:05:80:18:ac:90:55:8f:3f:22:c9:53:b6:
                    96:eb:a3:f5:f2:d9:cb:c6:a6:a7:b3:56:3d:e7:3a:
                    67:b0:8b:5f:f2:68:32:92:27:2d:e8:50:5d:4f:82:
                    ec:bb:14:41:79:7e:ab:5f:aa:40:21:11:58:c4:5f:
                    c9:30:9d:83:84:30:e6:54:96:44:d1:ae:51:da:ce:
                    55:da:80:2a:d1:1d:6e:34:f3:8c:b2:26:d1:62:ec:
                    36:f1:35:98:21:1b:4d:fc:62:68:34:86:e4:35:06:
                    b1:6a:06:e1:e6:7e:02:4a:09:f2:a6:75:fa:09:e8:
                    e4:b5:46:dc:b4:8b:42:f2:9b:92:27:e6:8d:24:9c:
                    2c:34:12:db:87:fd:b0:2c:c4:14:35:ed:49:a5:d0:
                    4e:27:28:34:7a:91:f0:df:29:70:c2:e2:b8:9e:b9:
                    6c:e8:ab:f4:9c:ae:d1:a0:30:d6:79:e6:3f:3a:da:
                    ab:ae:b5:dc:99:3a:35:5f:7b:61:36:d4:46:02:e2:
                    44:61:ca:ef:be:8b:5e:a2:ed:bb:5f:cb:c9:c2:d1:
                    ef:75:c2:54:db:16:8c:a4:5b:d1:2b:b3:27:c3:69:
                    9d:74:6e:bf:05:91:02:d6:d6:6f:a7:50:94:d6:8f:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:95:23:3C:F0:8A:18:8C:AC:28:63:69:47:E0:2C:00:1C:AF:39
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Z0mVIzzwihiMrChjaUfgLAAcrzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.142.0/24
                  185.143.56.0/22
                  195.178.132.0/22
                  195.178.144.0/23
                  195.178.147.0/24
                  195.178.152.0/22
                  212.111.207.0/24
                  212.111.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:d2:23:f4:13:5c:4b:cb:52:de:d3:f4:a7:7b:13:fb:45:48:
         31:c9:6a:64:90:fd:e2:f6:8f:0a:e0:62:5d:87:de:f7:98:5e:
         fb:00:d7:5d:40:7e:92:ef:3f:7f:16:6d:d3:4c:80:95:d4:1d:
         c0:b2:08:38:e3:ed:22:c1:88:e2:40:4a:ce:e7:db:51:2a:16:
         72:6f:eb:a0:29:60:cc:99:50:e0:79:d6:fd:be:87:81:4f:7a:
         78:e8:09:76:cc:4c:76:cb:3b:b4:71:de:4a:20:51:f1:c3:68:
         f9:ac:60:af:bb:34:07:75:ac:bc:8e:91:15:87:92:96:4e:63:
         2f:99:ce:45:39:0a:8f:d0:7d:7e:74:c5:0f:5d:13:00:16:d5:
         df:ec:0a:d9:4f:60:c2:b2:31:ef:71:75:49:e7:60:43:ee:3a:
         12:b7:27:67:8a:e3:3b:bf:a1:3b:64:96:b1:cc:10:d2:e1:99:
         37:3d:0d:74:df:5f:e7:40:0c:00:8d:65:9f:3a:70:b2:1b:ef:
         93:d1:53:11:c9:66:5f:5e:ad:c9:4f:4d:71:36:73:01:86:af:
         12:1e:b5:ad:fc:9f:02:e6:de:5d:54:4e:34:05:07:ca:ed:ba:
         6c:60:ac:9c:6c:82:ff:59:8e:dd:50:67:1b:d5:98:2f:9a:f6:
         93:b1:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:36 2025 by rpki-client