Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vl8Bo5ZzB-yZlLbFSc2veU0PqOA.roa
File:                     Vl8Bo5ZzB-yZlLbFSc2veU0PqOA.roa (raw, json)
Hash identifier:          eF4HxvQqrNceq7W90d1UCbcXoTt3Reu2BRiitDAHZMk=
Subject key identifier:   56:5F:01:A3:96:73:07:EC:99:94:B6:C5:49:CD:AF:79:4D:0F:A8:E0
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018CE7F7882EE5B97A33624FE70598B18D47
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vl8Bo5ZzB-yZlLbFSc2veU0PqOA.roa
Signing time:             Mon 08 Jan 2024 07:26:48 +0000
ROA not before:           Mon 08 Jan 2024 07:26:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        93.190.246.0/23 maxlen: 23
                          45.129.127.0/24 maxlen: 24
                          45.128.26.0/24 maxlen: 24
                          2a0f:e840::/32 maxlen: 32
                          2a13:fd00::/29 maxlen: 29
                          2a0f:2f80::/29 maxlen: 29
                          2a13:18c4::/32 maxlen: 32
                          2a06:bf40::/29 maxlen: 29
Validation:               Failed, certificate revoked on Mon 08 Jan 2024 08:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:e7:f7:88:2e:e5:b9:7a:33:62:4f:e7:05:98:b1:8d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  8 07:26:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=565f01a3967307ec9994b6c549cdaf794d0fa8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:39:3e:4b:24:0a:5f:84:3f:e6:bf:c0:02:
                    3c:63:df:e6:76:12:1b:e7:8d:81:6d:ee:f5:93:71:
                    a3:f7:ce:f6:d4:32:a1:5a:9c:55:68:86:49:dc:c2:
                    d0:b6:7f:dd:0e:15:cf:29:49:b6:ca:6e:d7:70:7d:
                    bb:09:0e:d4:51:c6:95:8f:91:d0:45:f3:83:d8:47:
                    6b:64:42:e2:92:1a:6e:f6:a6:7a:c8:80:07:6c:6e:
                    a4:78:72:f7:d0:6d:7c:03:83:4d:3a:27:73:74:bd:
                    7f:a9:fe:b7:9b:db:d9:72:f9:2e:4a:32:c9:3e:8b:
                    19:da:15:94:b7:ba:d0:01:15:3e:e7:f8:7b:7a:56:
                    0c:43:9c:45:ef:9c:46:78:00:02:6d:8a:c4:3b:6b:
                    ac:17:d1:38:8d:9e:cf:4f:be:45:e8:29:1c:5c:ca:
                    78:8c:e7:28:1e:0d:c7:d4:f8:c2:04:73:46:02:2c:
                    e6:30:14:21:9b:00:ae:83:47:0f:83:21:49:6a:b7:
                    27:48:1c:f0:97:20:75:ce:3b:a3:f2:07:38:2a:43:
                    0b:d4:83:ae:ce:76:6b:fc:7b:45:74:65:06:8c:44:
                    51:34:cd:92:6c:d8:87:14:02:74:82:a3:ce:e4:42:
                    3e:43:87:cf:ab:9a:cd:79:75:25:3e:55:21:00:17:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:01:A3:96:73:07:EC:99:94:B6:C5:49:CD:AF:79:4D:0F:A8:E0
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vl8Bo5ZzB-yZlLbFSc2veU0PqOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.26.0/24
                  45.129.127.0/24
                  93.190.246.0/23
                IPv6:
                  2a06:bf40::/29
                  2a0f:2f80::/29
                  2a0f:e840::/32
                  2a13:18c4::/32
                  2a13:fd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:75:c5:c4:61:0c:27:13:05:45:13:a9:df:99:29:56:26:
         95:bb:18:4b:a1:35:b1:be:be:19:92:4e:14:ec:a1:1e:0d:62:
         6c:1d:30:ba:98:46:2d:d4:a1:33:e1:2b:59:a8:de:69:88:84:
         32:e5:dd:29:7d:0a:5f:b9:85:22:3c:96:e3:91:5b:1c:5f:27:
         50:87:7f:f2:3c:c8:0b:4d:29:79:dc:51:8c:e3:52:2b:66:23:
         4f:ca:d1:45:d7:fb:da:e2:71:62:38:09:05:dc:4b:49:91:b5:
         fc:52:b0:a1:fa:08:65:1b:f9:7c:4f:88:71:d1:91:88:06:b8:
         c3:da:c3:81:1a:7d:2a:5b:c0:41:a9:05:60:39:5b:8b:a0:eb:
         51:a9:b7:08:11:52:24:84:09:37:b1:b5:a8:d5:9d:fa:3b:cf:
         42:78:d8:e9:21:fb:bd:a3:aa:e5:ca:d3:0a:f2:39:de:04:9e:
         c3:9b:f2:5f:a1:3d:2e:fd:5d:af:b4:4b:69:1a:ea:7a:0d:98:
         63:3f:cc:64:6d:da:55:19:67:95:5f:de:01:66:3e:c0:45:db:
         96:1c:9e:6f:96:af:b8:85:da:d0:49:82:07:4c:ef:b0:d6:7d:
         9a:65:8b:36:88:cf:65:ee:29:36:81:fa:76:6d:c3:4b:76:53:
         2f:b0:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:23 2025 by rpki-client