Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ARdZQE2BVvisbvWkVsAtrrqC_cU.roa
File:                     ARdZQE2BVvisbvWkVsAtrrqC_cU.roa (raw, json)
Hash identifier:          umxIeTcxdJMuWR9C+6Mmthym4ptGiP8huHlGGxVoBss=
Subject key identifier:   01:17:59:40:4D:81:56:F8:AC:6E:F5:A4:56:C0:2D:AE:BA:82:FD:C5
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       0194FB0AE679E6A83AF8F171EE6DBD4CA9D9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ARdZQE2BVvisbvWkVsAtrrqC_cU.roa
Signing time:             Wed 12 Feb 2025 16:43:02 +0000
ROA not before:           Wed 12 Feb 2025 16:43:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     32805
IP address blocks:        193.180.174.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 16:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:fb:0a:e6:79:e6:a8:3a:f8:f1:71:ee:6d:bd:4c:a9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Feb 12 16:43:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=011759404d8156f8ac6ef5a456c02daeba82fdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:fd:af:a4:99:67:a2:c9:a3:dc:03:bf:c1:
                    57:f7:10:f5:86:35:93:4d:c4:00:cf:84:cb:67:bd:
                    22:e9:59:93:a6:a6:81:87:dc:c9:34:49:0b:29:7c:
                    8f:4b:37:6b:da:2c:36:39:de:c0:02:cd:b6:6e:26:
                    15:2e:27:0b:d0:f0:88:b1:cb:2e:90:6d:32:e7:62:
                    55:79:a2:63:3d:81:38:86:9d:ef:70:04:d2:49:f5:
                    37:8b:8b:2e:78:ca:c5:64:b7:07:dd:13:38:1b:8c:
                    0e:d9:a9:77:ab:1a:57:f4:1e:dc:3c:8c:07:a5:19:
                    ab:1d:a4:2b:e5:a3:ad:cc:17:86:9d:9c:66:bd:76:
                    1d:72:79:c5:fe:74:08:9e:f0:ca:94:ce:1a:f6:b0:
                    53:51:66:6c:f3:e0:1c:ed:0d:76:26:7a:aa:20:ce:
                    31:b7:cd:e8:bd:5c:42:e2:68:76:0a:ad:47:c4:1b:
                    1d:3b:c6:ec:f9:15:03:57:d2:d8:26:a3:98:a5:b4:
                    d3:55:72:82:76:d8:47:68:41:a2:37:f7:bd:05:7a:
                    bf:58:47:5b:44:b4:1c:51:0d:36:e0:8c:bd:63:6d:
                    90:bc:c0:b4:7c:6a:09:a3:02:87:82:ad:7e:fd:48:
                    33:ce:2c:75:33:b0:58:b6:3b:17:47:41:46:b5:78:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:59:40:4D:81:56:F8:AC:6E:F5:A4:56:C0:2D:AE:BA:82:FD:C5
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ARdZQE2BVvisbvWkVsAtrrqC_cU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.180.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:35:87:72:79:66:e1:df:87:5d:ba:19:4d:c1:6c:3e:ac:e2:
         67:94:87:0e:9b:dd:25:c6:d9:df:ed:bf:d7:72:df:31:91:ec:
         17:a4:a4:ed:5e:c5:db:e6:2c:69:4d:52:d0:43:f8:a6:5d:58:
         b4:5e:8f:7d:af:d1:54:ef:07:73:c5:15:80:ea:ba:14:c8:a0:
         e8:52:d3:50:08:b9:93:76:47:40:5f:ea:2b:ff:df:b0:1d:76:
         9e:e0:c6:13:cb:a5:77:6f:02:a7:d5:2d:39:5c:c1:6f:ee:42:
         af:c4:12:3d:2e:69:d1:a0:2d:bc:29:83:d8:57:81:9f:19:56:
         e2:3c:02:89:df:5a:12:2d:f4:25:d8:8f:37:93:0b:8b:a7:1d:
         fb:57:92:b8:c8:8d:e4:b8:ae:08:f9:d2:cb:b3:3b:a2:27:b1:
         c7:c9:d6:f6:51:34:ad:a5:fe:11:7b:66:b8:da:85:52:21:c2:
         be:7e:45:b0:a2:74:4d:ed:a7:55:9e:b9:db:6f:be:16:77:78:
         87:1a:20:20:0a:03:12:66:69:89:45:6e:ab:21:70:69:6e:35:
         9d:e7:40:bd:bb:88:34:08:67:fa:80:8f:42:d2:21:4b:bd:d0:
         7b:28:de:c5:7e:b8:94:05:df:a6:42:5d:41:d9:12:64:63:60:
         26:3f:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:48:11 2025 by rpki-client