Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/z5n7P_P-VsaJlXRYUQIOPasmiEg.roa
File:                     z5n7P_P-VsaJlXRYUQIOPasmiEg.roa (raw, json)
Hash identifier:          aE4YE3VEUQItwRJA7QaxxE/zzpEVrkDD4qmofAvWPXA=
Subject key identifier:   CF:99:FB:3F:F3:FE:56:C6:89:95:74:58:51:02:0E:3D:AB:26:88:48
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       0198760533B7A8AB1F6C9EAB9B7151F6944E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/z5n7P_P-VsaJlXRYUQIOPasmiEg.roa
Signing time:             Mon 04 Aug 2025 16:58:28 +0000
ROA not before:           Mon 04 Aug 2025 16:58:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        85.115.208.0/23 maxlen: 24
                          85.115.210.0/23 maxlen: 24
                          85.115.211.0/24 maxlen: 24
                          213.145.68.0/23 maxlen: 23
                          213.145.70.0/23 maxlen: 24
                          213.145.71.0/24 maxlen: 24
                          213.145.72.0/21 maxlen: 24
                          213.145.82.0/23 maxlen: 24
                          213.145.84.0/23 maxlen: 23
                          213.145.86.0/23 maxlen: 23
                          213.145.88.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 04 Aug 2025 21:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:05:33:b7:a8:ab:1f:6c:9e:ab:9b:71:51:f6:94:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Aug  4 16:58:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cf99fb3ff3fe56c68995745851020e3dab268848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:03:7e:1e:1f:49:ec:e9:a9:e3:38:b4:b2:
                    ac:6a:6d:81:61:85:c7:9b:71:51:25:ce:80:9b:81:
                    2d:c4:64:95:dd:a0:d2:ee:53:0e:04:0c:e2:9f:c0:
                    46:49:b4:a6:66:eb:47:ff:4b:8b:0f:1c:0c:cf:de:
                    c2:a8:61:db:af:9d:74:dc:7c:4b:a7:74:ae:78:76:
                    68:68:3a:6a:d3:b7:1f:5f:ef:20:3f:96:2a:2b:bd:
                    a2:f4:8b:e8:8a:5b:07:05:22:a5:86:a2:bc:63:e5:
                    63:96:15:b0:4b:c7:74:1e:e8:31:d0:66:dc:47:07:
                    2d:de:ac:3a:ad:a1:df:5b:d5:69:09:3b:a2:1b:fa:
                    34:91:77:2e:6b:df:6d:cf:65:52:b7:66:8d:39:60:
                    ae:b0:31:1d:54:68:8a:03:3a:a3:b8:aa:59:b6:cb:
                    80:9d:c3:71:66:97:1b:29:c9:7d:69:4f:c9:1c:2a:
                    5c:2c:0e:3e:b5:f5:b6:d3:b3:0d:fa:97:34:e6:10:
                    1f:56:06:f3:c4:a9:c6:fd:92:be:ae:97:3c:bf:4c:
                    47:13:c4:22:6b:4e:b2:15:64:a9:f4:34:76:6c:65:
                    c6:f2:f4:5a:b3:4f:fe:09:a8:00:89:fa:64:9a:6a:
                    0c:6f:bc:ff:ff:2b:07:b0:a5:99:63:f6:d2:12:92:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:99:FB:3F:F3:FE:56:C6:89:95:74:58:51:02:0E:3D:AB:26:88:48
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/z5n7P_P-VsaJlXRYUQIOPasmiEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.208.0/22
                  213.145.68.0-213.145.79.255
                  213.145.82.0-213.145.89.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:64:b1:4a:04:3a:b6:52:44:44:6c:ba:ec:d5:4b:bd:97:
         90:45:a4:6c:95:60:60:6b:08:53:81:f7:cc:13:01:07:f9:aa:
         5d:4d:2f:23:25:26:f9:3a:71:47:7b:5f:79:5c:88:cf:12:36:
         34:4f:f7:d3:d7:c3:d0:67:7d:9a:45:77:86:38:34:e0:8f:94:
         45:ac:b8:8c:f3:8d:2b:15:97:2d:55:74:d2:5f:36:be:63:7d:
         19:29:68:f2:27:16:c7:d4:7e:5a:ab:6d:76:d9:20:cd:63:7f:
         e7:cc:22:8c:f2:00:90:0f:72:bf:2a:fa:93:fc:c2:ab:92:0e:
         b1:7d:91:84:83:2a:fa:83:43:6b:a9:dd:b5:db:44:25:e3:4a:
         bf:15:98:ff:b6:02:30:70:1e:43:06:35:d3:e5:c8:b4:2b:33:
         30:4d:15:4f:63:45:41:50:06:66:3f:e1:c3:65:d7:2f:98:a5:
         c2:5d:9c:40:51:89:4f:3a:01:28:2b:df:d9:aa:70:14:3a:86:
         d1:ea:c7:5a:99:cb:80:22:29:8d:b0:9d:73:9e:4c:16:a5:bb:
         fd:6e:52:ff:11:9b:3c:56:4b:21:df:13:c0:04:29:64:a2:64:
         46:b8:98:82:60:52:2c:64:4a:8f:e5:fc:73:91:99:e5:37:ee:
         f0:23:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:29:55 2025 by rpki-client