Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uqSDpiZs0G7aeo4NH4Br3Q3inRA.roa
File:                     uqSDpiZs0G7aeo4NH4Br3Q3inRA.roa (raw, json)
Hash identifier:          1UBoeFogaH+OFAZdgr+nG5TcJfbrtP/+VswrRINjvN4=
Subject key identifier:   BA:A4:83:A6:26:6C:D0:6E:DA:7A:8E:0D:1F:80:6B:DD:0D:E2:9D:10
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       01985632D79F1469765E2092AA8879DEBC6E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uqSDpiZs0G7aeo4NH4Br3Q3inRA.roa
Signing time:             Tue 29 Jul 2025 12:40:29 +0000
ROA not before:           Tue 29 Jul 2025 12:40:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        45.144.172.0/24 maxlen: 24
                          45.144.174.0/24 maxlen: 24
                          86.107.50.0/24 maxlen: 24
                          86.107.100.0/24 maxlen: 24
                          92.114.54.0/24 maxlen: 24
                          93.113.171.0/24 maxlen: 24
                          167.17.178.0/24 maxlen: 24
                          167.17.179.0/24 maxlen: 24
                          167.17.183.0/24 maxlen: 24
                          167.17.184.0/24 maxlen: 24
                          167.17.185.0/24 maxlen: 24
                          167.17.186.0/24 maxlen: 24
                          167.17.187.0/24 maxlen: 24
                          167.17.188.0/24 maxlen: 24
                          167.17.189.0/24 maxlen: 24
                          167.17.190.0/24 maxlen: 24
                          185.72.8.0/24 maxlen: 24
                          185.141.219.0/24 maxlen: 24
                          185.193.102.0/24 maxlen: 24
                          185.198.235.0/24 maxlen: 24
                          188.64.142.0/24 maxlen: 24
                          188.212.121.0/24 maxlen: 24
                          193.124.49.0/24 maxlen: 24
                          194.58.34.0/24 maxlen: 24
                          194.58.44.0/24 maxlen: 24
                          194.58.45.0/24 maxlen: 24
                          194.58.46.0/24 maxlen: 24
                          195.88.89.0/24 maxlen: 24
                          195.133.192.0/24 maxlen: 24
                          195.133.193.0/24 maxlen: 24
                          212.192.6.0/24 maxlen: 24
                          212.192.12.0/24 maxlen: 24
                          212.192.13.0/24 maxlen: 24
                          212.192.15.0/24 maxlen: 24
                          212.192.20.0/24 maxlen: 24
                          212.192.21.0/24 maxlen: 24
                          212.192.23.0/24 maxlen: 24
                          212.192.214.0/24 maxlen: 24
                          212.192.215.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 11:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:56:32:d7:9f:14:69:76:5e:20:92:aa:88:79:de:bc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jul 29 12:40:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=baa483a6266cd06eda7a8e0d1f806bdd0de29d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:f2:38:cd:6f:49:8e:1f:11:86:0c:61:37:
                    b4:bf:b3:6b:a3:d4:50:34:d5:79:12:85:3b:3f:d8:
                    4e:82:42:82:a3:3c:ba:90:51:a1:a6:c2:ea:8b:33:
                    4b:af:08:f3:e6:b0:ae:cc:e0:f1:7a:bd:a7:70:1c:
                    c2:2a:87:10:e7:a5:7e:60:6e:0c:a6:cb:63:07:ac:
                    11:b9:02:0f:4a:b2:fa:50:d2:4c:a7:2c:8f:fa:7f:
                    f4:86:5f:8e:6e:5c:51:e1:ea:7a:51:62:d2:12:af:
                    2a:dc:6a:41:e0:c1:5c:1d:7f:eb:3f:83:7a:39:68:
                    8f:09:2b:e7:8a:20:d4:e7:ab:4d:ac:84:d5:30:46:
                    d9:a8:c5:17:fa:19:51:a6:66:f1:dc:7c:be:01:96:
                    70:fb:30:91:7e:02:83:60:d3:4d:46:61:a3:6c:6e:
                    de:15:1b:c7:bd:51:c5:35:56:2b:79:50:4e:14:6e:
                    3e:a7:ca:73:6f:c9:76:73:72:58:2c:44:48:65:2e:
                    52:e7:20:e2:7c:d2:af:cf:52:34:ab:d1:45:86:a1:
                    ef:8e:0c:e1:07:ab:23:bb:7c:ba:d2:a2:00:03:51:
                    8c:61:42:bd:33:96:4d:d8:64:fe:e3:f2:70:df:06:
                    79:02:da:8f:87:70:43:ba:3b:63:c8:45:06:28:a9:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A4:83:A6:26:6C:D0:6E:DA:7A:8E:0D:1F:80:6B:DD:0D:E2:9D:10
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/uqSDpiZs0G7aeo4NH4Br3Q3inRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.172.0/24
                  45.144.174.0/24
                  86.107.50.0/24
                  86.107.100.0/24
                  92.114.54.0/24
                  93.113.171.0/24
                  167.17.178.0/23
                  167.17.183.0-167.17.190.255
                  185.72.8.0/24
                  185.141.219.0/24
                  185.193.102.0/24
                  185.198.235.0/24
                  188.64.142.0/24
                  188.212.121.0/24
                  193.124.49.0/24
                  194.58.34.0/24
                  194.58.44.0-194.58.46.255
                  195.88.89.0/24
                  195.133.192.0/23
                  212.192.6.0/24
                  212.192.12.0/23
                  212.192.15.0/24
                  212.192.20.0/23
                  212.192.23.0/24
                  212.192.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:24:b1:6d:fb:f6:22:da:8d:61:7c:9a:ee:db:5f:b1:c1:d3:
         77:1d:14:88:f5:36:9d:d5:ae:65:43:ec:dd:54:6b:4a:77:dd:
         e7:f3:a8:70:3b:7b:4a:fc:2a:8b:20:01:03:24:1d:4f:1a:10:
         fc:02:0d:69:9a:53:79:0f:d2:32:28:28:75:37:2e:65:e7:02:
         89:26:58:4b:12:cf:f4:3e:54:f9:bb:16:4a:33:36:f1:9f:09:
         ed:bc:86:84:da:e8:89:21:af:01:b8:d6:c8:8c:db:2b:19:19:
         ae:14:cc:37:39:b1:40:79:52:ce:b9:34:2f:10:af:f7:08:30:
         95:63:0a:7b:44:0c:2b:52:0a:54:7d:9d:31:80:8d:c4:9c:66:
         14:e2:27:f6:3c:51:56:a6:81:a0:81:cf:22:8c:db:7a:24:47:
         6d:6a:f7:35:65:f8:52:38:1a:7b:97:5f:91:71:57:ba:5a:d5:
         1c:5a:c1:62:33:57:a8:92:5f:c4:e4:ec:52:81:f1:00:2d:7d:
         ac:31:de:c9:b3:a7:ec:07:ea:68:d8:f5:a9:a1:32:69:03:07:
         de:4d:77:d8:4a:47:dc:da:8a:fd:bb:0f:04:ee:91:e6:3c:0a:
         68:f2:40:85:16:8e:eb:93:7f:71:d1:45:c4:ee:69:22:0b:95:
         60:c3:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:05 2025 by rpki-client