Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZEZQad2QbjT4tZ6ZRbgL947se9Q.roa
File:                     ZEZQad2QbjT4tZ6ZRbgL947se9Q.roa (raw, json)
Hash identifier:          LTubxvg8F7h4NvvDFeNSQRYfBM5wMCweKzsvm/EbxAg=
Subject key identifier:   64:46:50:69:DD:90:6E:34:F8:B5:9E:99:45:B8:0B:F7:8E:EC:7B:D4
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0198612F57943C2FC94EDD9E256B08B3C6A6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZEZQad2QbjT4tZ6ZRbgL947se9Q.roa
Signing time:             Thu 31 Jul 2025 15:52:29 +0000
ROA not before:           Thu 31 Jul 2025 15:52:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30633
IP address blocks:        45.128.77.0/24 maxlen: 24
                          45.129.127.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          80.253.250.0/24 maxlen: 24
                          103.139.50.0/24 maxlen: 24
                          193.5.125.0/24 maxlen: 24
                          193.27.23.0/24 maxlen: 24
                          193.164.199.0/24 maxlen: 24
                          2a06:1180:1c5::/48 maxlen: 48
                          2a06:1181:100::/48 maxlen: 48
                          2a06:1184:33::/48 maxlen: 48
                          2a06:35c2::/32 maxlen: 32
                          2a09:17c4::/32 maxlen: 32
                          2a0a:2d04:100::/48 maxlen: 48
                          2a0a:2d06:33::/48 maxlen: 48
                          2a0a:2d06:55::/48 maxlen: 48
                          2a0c:7886:b::/48 maxlen: 48
                          2a0c:7886:33::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:1a80:2541::/48 maxlen: 48
                          2a0e:1a81::/32 maxlen: 32
                          2a0e:c780::/32 maxlen: 32
                          2a0e:c781::/32 maxlen: 32
                          2a0e:f201::/32 maxlen: 32
                          2a0e:f201:1::/48 maxlen: 48
                          2a0f:1583::/32 maxlen: 32
                          2a0f:1e00:123::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a0f:1e01:1::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0f:2d81::/32 maxlen: 32
                          2a0f:2e80::/29 maxlen: 29
                          2a0f:3045::/32 maxlen: 32
                          2a0f:3d84::/32 maxlen: 32
                          2a0f:7d02:1::/48 maxlen: 48
                          2a0f:7d02:100::/48 maxlen: 48
                          2a0f:7d06:fc9d::/48 maxlen: 48
                          2a0f:df44::/32 maxlen: 32
                          2a0f:e1c6::/32 maxlen: 32
                          2a0f:e6c5::/32 maxlen: 32
                          2a0f:e7c6:55::/48 maxlen: 48
                          2a10:3240::/29 maxlen: 29
                          2a10:32c0::/29 maxlen: 29
                          2a10:32c0::/32 maxlen: 32
                          2a10:32c1::/32 maxlen: 32
                          2a10:32c2::/32 maxlen: 32
                          2a10:32c4::/32 maxlen: 32
                          2a10:32c5::/32 maxlen: 32
                          2a10:32c6::/32 maxlen: 32
                          2a10:32c7::/32 maxlen: 32
                          2a10:35c0::/29 maxlen: 29
                          2a10:35c0::/32 maxlen: 32
                          2a10:35c1::/32 maxlen: 32
                          2a10:35c2::/32 maxlen: 32
                          2a10:35c3::/32 maxlen: 32
                          2a10:35c4::/32 maxlen: 32
                          2a10:35c5::/32 maxlen: 32
                          2a10:35c6::/32 maxlen: 32
                          2a10:35c7::/32 maxlen: 32
                          2a10:37c0::/29 maxlen: 29
                          2a10:4a00::/29 maxlen: 29
                          2a10:6d40::/29 maxlen: 29
                          2a10:7500::/29 maxlen: 29
                          2a10:7900::/29 maxlen: 29
                          2a11:fd80::/29 maxlen: 29
                          2a12:ac40::/32 maxlen: 32
                          2a12:ac41::/32 maxlen: 32
                          2a12:f540::/29 maxlen: 29
                          2a13:18c0:1::/48 maxlen: 48
                          2a13:18c4::/32 maxlen: 32
                          2a13:18c6:33::/48 maxlen: 48
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:8c82:3::/48 maxlen: 48
                          2a13:8c84::/32 maxlen: 32
                          2a13:9280::/32 maxlen: 32
                          2a13:c904::/32 maxlen: 32
                          2a13:e100:1312::/48 maxlen: 48
                          2a13:e101:2::/48 maxlen: 48
                          2a13:e102:3::/48 maxlen: 48
                          2a13:e104::/32 maxlen: 32
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 10:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:61:2f:57:94:3c:2f:c9:4e:dd:9e:25:6b:08:b3:c6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jul 31 15:52:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=64465069dd906e34f8b59e9945b80bf78eec7bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:9e:38:0b:8b:0b:dd:85:97:3f:a3:3e:71:
                    c5:60:b4:13:11:78:8f:02:a8:fe:68:72:15:94:7c:
                    1d:0e:f4:7a:37:1e:d2:d8:f3:05:18:cc:47:18:b1:
                    a9:5b:a1:62:cc:52:97:36:89:ee:b3:a8:92:ec:26:
                    fb:9c:62:c5:a9:0f:43:90:d8:64:a4:9f:73:50:64:
                    0f:e4:c8:8a:09:90:d5:f9:89:2f:3b:c8:9b:2a:02:
                    3f:24:17:1c:48:46:85:fb:28:0b:58:c3:90:1f:c1:
                    54:e3:b1:4b:14:45:5c:af:f8:3e:90:91:57:ad:c9:
                    91:6d:62:4e:26:2e:82:5a:7d:b7:99:c7:64:7b:c9:
                    8c:49:06:b8:37:f1:2b:f8:10:91:cd:21:f6:3f:07:
                    43:e7:5c:a7:56:8c:a3:23:38:56:cc:f3:a4:1f:60:
                    d1:a7:71:4f:09:a9:30:24:ab:02:e9:a1:60:69:5f:
                    15:0a:5c:52:30:c1:f0:7a:f6:e7:de:05:d5:d4:c3:
                    0f:21:10:c5:c2:68:02:e4:87:93:ea:66:6c:be:7d:
                    9d:1d:a3:75:a3:ba:38:51:ef:4c:57:48:f0:61:e7:
                    6f:59:cf:98:d4:18:36:2d:85:92:82:6a:6d:e4:c8:
                    07:25:dd:d1:4b:a4:7b:26:9f:62:d0:c4:e8:44:ba:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:46:50:69:DD:90:6E:34:F8:B5:9E:99:45:B8:0B:F7:8E:EC:7B:D4
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZEZQad2QbjT4tZ6ZRbgL947se9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.77.0/24
                  45.129.127.0/24
                  45.135.37.0/24
                  45.157.37.0/24
                  80.253.250.0/24
                  103.139.50.0/24
                  193.5.125.0/24
                  193.27.23.0/24
                  193.164.199.0/24
                IPv6:
                  2a06:1180:1c5::/48
                  2a06:1181:100::/48
                  2a06:1184:33::/48
                  2a06:35c2::/32
                  2a09:17c4::/32
                  2a0a:2d04:100::/48
                  2a0a:2d06:33::/48
                  2a0a:2d06:55::/48
                  2a0c:7886:b::/48
                  2a0c:7886:33::/48
                  2a0e:15c7:88::/48
                  2a0e:1a80:2541::/48
                  2a0e:1a81::/32
                  2a0e:c780::/31
                  2a0e:f201::/32
                  2a0f:1583::/32
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2d81::/32
                  2a0f:2e80::/29
                  2a0f:3045::/32
                  2a0f:3d84::/32
                  2a0f:7d02:1::/48
                  2a0f:7d02:100::/48
                  2a0f:7d06:fc9d::/48
                  2a0f:df44::/32
                  2a0f:e1c6::/32
                  2a0f:e6c5::/32
                  2a0f:e7c6:55::/48
                  2a10:3240::/29
                  2a10:32c0::/29
                  2a10:35c0::/29
                  2a10:37c0::/29
                  2a10:4a00::/29
                  2a10:6d40::/29
                  2a10:7500::/29
                  2a10:7900::/29
                  2a11:fd80::/29
                  2a12:ac40::/31
                  2a12:f540::/29
                  2a13:18c0:1::/48
                  2a13:18c4::/32
                  2a13:18c6:33::/48
                  2a13:18c6:55::/48
                  2a13:8c82:3::/48
                  2a13:8c84::/32
                  2a13:9280::/32
                  2a13:c904::/32
                  2a13:e100:1312::/48
                  2a13:e101:2::/48
                  2a13:e102:3::/48
                  2a13:e104::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:6f:16:c5:0d:b0:82:26:e2:42:26:1e:23:73:ef:d9:d7:2f:
         8d:55:7b:d3:8f:96:17:5c:59:1e:08:7e:89:42:5e:30:40:09:
         f9:a5:34:5b:c3:4c:ff:2f:2e:f1:2f:f0:bf:db:61:b9:c6:cf:
         e3:6e:e2:d4:8d:e2:51:77:5c:16:1c:bc:2b:ba:2e:1d:eb:7a:
         30:1a:be:b7:58:af:d5:23:9d:eb:c2:07:31:a3:d0:dd:cf:8f:
         fe:8b:ad:b1:b5:fe:a6:8e:c1:25:cf:c8:65:89:bd:7b:18:9c:
         34:45:d4:55:ef:74:93:f4:d2:c9:f7:e8:0e:74:50:fc:e9:4d:
         00:76:0e:f3:f4:12:4b:92:da:9d:3f:e0:25:84:9d:56:ca:cc:
         55:ea:71:65:c7:05:b2:15:7e:77:64:ee:18:bc:47:bf:84:af:
         d4:ff:07:4a:6d:cc:3c:08:00:1e:77:af:a9:07:b2:81:21:fa:
         cb:59:e2:73:14:42:05:71:3a:a3:67:de:ca:52:7e:7f:2e:4f:
         7e:9b:5b:0f:aa:31:9c:2d:91:c8:07:6f:ad:7f:24:0d:0b:1a:
         83:5c:32:4b:9a:20:73:94:6e:ec:72:b2:c3:03:83:3b:b3:48:
         28:0c:7f:f7:88:05:cd:a0:74:8c:0b:b5:ef:83:a1:79:e5:6c:
         7b:04:c8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:25 2025 by rpki-client