Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20383334.roa
File:                     3231332e3133392e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          AGi0Q9yxTaWmHsTzdgh/u7HIZJQyz6Ulph6cfSEADjg=
Subject key identifier:   DB:E4:AD:FE:63:70:DE:00:A1:06:B1:B7:DF:FD:32:10:59:5B:23:2B
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       7C3BBEDC8A435630B39FF75FC24FC86B04F2036A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20383334.roa
Signing time:             Sat 18 Oct 2025 00:07:27 +0000
ROA not before:           Sat 18 Oct 2025 00:02:27 +0000
ROA not after:            Sat 17 Oct 2026 00:07:27 +0000
asID:                     834
IP address blocks:        213.139.67.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 19 Oct 2025 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3b:be:dc:8a:43:56:30:b3:9f:f7:5f:c2:4f:c8:6b:04:f2:03:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Oct 18 00:02:27 2025 GMT
            Not After : Oct 17 00:07:27 2026 GMT
        Subject: CN=DBE4ADFE6370DE00A106B1B7DFFD3210595B232B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:37:77:d1:c1:44:ef:97:36:2b:69:06:68:
                    91:1e:1f:78:17:23:4c:84:55:a1:97:b3:8c:4e:14:
                    34:3a:40:58:35:5d:e6:6b:2a:77:26:fc:47:aa:4f:
                    a6:3c:ae:93:35:a3:12:05:46:51:9a:6e:b8:82:a4:
                    31:e7:21:44:17:a5:41:1e:52:ec:d2:54:e4:e0:65:
                    e9:0a:90:d2:e5:04:cf:e0:f1:a1:5c:aa:11:b1:e7:
                    db:1c:d6:8c:52:de:e6:71:67:86:8c:b3:7f:0b:2c:
                    93:9c:68:9d:ed:9a:d8:42:f8:cd:85:ec:06:bd:2a:
                    2a:36:82:63:28:7f:23:61:8c:7b:e4:dd:93:1e:79:
                    95:7d:09:6a:8d:58:4c:3c:f8:e9:77:d8:87:4b:4c:
                    0d:90:b9:b9:26:52:17:23:b5:2c:9c:4f:46:07:0a:
                    69:27:3e:e9:0b:47:d2:3e:27:2d:53:70:46:06:06:
                    05:b4:fb:01:2a:f0:99:8b:69:95:16:b6:97:4a:95:
                    90:0e:45:bb:06:66:ba:9a:13:82:ce:37:df:87:82:
                    86:ef:47:7b:ad:1b:b9:54:4f:c2:b4:8f:96:dc:8f:
                    5f:8c:d9:19:bb:8e:8a:84:49:f5:21:f5:de:23:5d:
                    80:ed:0d:01:b5:79:90:d9:85:6a:71:da:fd:8d:82:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:AD:FE:63:70:DE:00:A1:06:B1:B7:DF:FD:32:10:59:5B:23:2B
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:e2:87:b8:e0:c9:47:24:0c:ab:25:ce:15:2d:f8:07:cb:
         24:58:19:33:0e:1e:74:5c:8e:aa:ef:aa:0e:be:4d:d2:03:5b:
         27:30:b7:59:ff:1a:b7:4e:9b:60:a7:78:7a:fc:47:23:57:83:
         22:67:84:ba:49:47:94:6a:ce:0f:36:00:c0:42:27:7c:11:ca:
         c7:03:76:65:0d:66:e9:84:94:7f:ee:9a:89:82:ba:20:aa:3e:
         e1:51:75:73:79:31:7b:b0:74:bb:dc:67:7e:e5:a7:c3:3f:d0:
         1f:29:f4:71:09:62:82:40:9c:72:8c:15:81:4a:75:15:b7:13:
         28:2b:6a:10:94:d1:e1:cc:21:8e:f8:16:ec:6d:1a:b5:02:43:
         c9:06:17:b8:e5:bc:11:c3:9e:9c:9e:05:c8:b6:96:2e:bf:78:
         6c:42:1f:67:eb:96:2e:3e:e6:6b:7e:03:16:01:d8:46:e6:cc:
         7d:a3:e5:f6:93:f1:e7:02:6d:dc:75:32:2e:d8:02:77:01:be:
         fa:2a:f1:4f:eb:af:3b:e1:f1:b8:c0:e5:1f:a8:3a:af:19:62:
         e1:95:9f:c8:7c:6f:b6:f2:4c:e4:33:46:6b:e1:65:d1:ec:26:
         b8:0d:0c:a0:8a:90:77:2d:f1:c6:eb:ee:63:25:cb:0b:de:a3:
         8c:35:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:43:28 2025 by rpki-client