Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/plswNVvQb6NiSjDNXKVEbcNnNo0.roa
File:                     plswNVvQb6NiSjDNXKVEbcNnNo0.roa (raw, json)
Hash identifier:          7c06TSDrJX8JncI0fYeLQi4CrogppHOQNGbbxJkvm+s=
Subject key identifier:   A6:5B:30:35:5B:D0:6F:A3:62:4A:30:CD:5C:A5:44:6D:C3:67:36:8D
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0196A9C2BD8773E90C0E420B1ACC7CE4B0C8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/plswNVvQb6NiSjDNXKVEbcNnNo0.roa
Signing time:             Wed 07 May 2025 08:00:34 +0000
ROA not before:           Wed 07 May 2025 08:00:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215224
IP address blocks:        45.92.247.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 08 May 2025 12:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:c2:bd:87:73:e9:0c:0e:42:0b:1a:cc:7c:e4:b0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May  7 08:00:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a65b30355bd06fa3624a30cd5ca5446dc367368d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:97:6f:7e:6a:f5:95:08:c9:04:7a:53:24:
                    0d:ad:c1:82:d7:2e:f6:f5:52:36:c1:93:40:2c:50:
                    f8:35:f2:a9:7f:f9:fe:88:41:4a:dd:37:71:69:5c:
                    78:50:14:15:d1:59:88:4f:d1:fa:1c:a5:1e:da:dd:
                    9c:38:8a:a8:f1:07:7b:66:da:66:3e:9e:ed:de:05:
                    78:7e:7e:67:74:64:81:a9:e2:e9:de:89:43:90:cc:
                    a3:f0:dc:15:90:0c:c6:96:43:36:a9:45:db:df:9c:
                    f0:8c:d2:e1:58:eb:a5:09:ad:ef:81:be:5b:f9:a4:
                    66:d9:8c:a9:25:35:f1:c2:4a:40:93:e7:1f:98:3d:
                    b9:3e:57:e1:4d:6e:7c:bf:2d:f5:b8:af:2c:6d:3e:
                    67:50:17:86:c4:98:99:45:36:a3:dd:81:25:e6:b8:
                    47:61:e0:43:bf:c6:56:7f:ad:ac:86:0d:ab:fc:43:
                    c5:92:ac:13:21:1e:e6:bc:57:b1:67:65:12:f3:6c:
                    4f:69:84:9f:2c:58:93:11:8d:13:04:d0:b3:9a:c3:
                    16:3c:a5:e2:a2:fb:f3:7c:6d:66:3a:e6:ae:55:b6:
                    b5:72:b6:83:8c:63:81:76:83:05:88:69:5a:22:45:
                    fa:fa:4a:90:bc:b2:a8:8c:7f:56:72:7a:a8:8b:5d:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5B:30:35:5B:D0:6F:A3:62:4A:30:CD:5C:A5:44:6D:C3:67:36:8D
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/plswNVvQb6NiSjDNXKVEbcNnNo0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a4:ba:60:c1:74:77:e2:93:2f:5b:13:cf:d2:cd:ae:1c:b4:
         28:6f:0b:14:54:60:21:19:94:6b:7d:e2:4a:ef:b9:e9:d2:fb:
         5d:00:3d:23:cf:16:2a:a3:44:05:9c:1d:06:b1:6c:cc:59:90:
         f6:7a:a0:03:01:c1:64:cc:63:83:1f:d5:a6:7c:48:24:91:af:
         a6:11:02:9f:39:2f:83:09:6f:a1:0f:8e:32:2f:a8:a4:de:79:
         82:b4:7c:aa:93:80:38:f6:30:67:55:99:78:09:68:58:f7:cb:
         3e:f4:58:a9:99:16:4d:74:75:fc:86:7f:2e:c6:35:c8:cc:6a:
         2b:6e:6e:42:ae:08:41:ba:4c:a3:03:ce:22:0c:e8:54:23:5c:
         82:13:ad:ba:44:4c:31:75:66:7f:40:1e:02:62:6f:c1:12:9a:
         e2:4a:38:28:5d:99:02:f3:c2:fe:74:c2:9d:f1:7c:37:f9:aa:
         4e:67:9d:6a:de:47:61:ab:77:ad:58:89:cb:cc:db:06:22:17:
         43:78:39:dc:38:f0:97:b5:76:7c:34:f5:cf:95:05:e2:68:d4:
         77:df:a4:86:25:b2:34:06:e9:03:30:8d:65:1d:9d:0d:55:7e:
         bc:1b:e8:8e:e9:27:54:c7:51:1a:5c:b4:b6:46:25:a0:be:3b:
         be:d7:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:06 2025 by rpki-client