Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FQkqCbE4Lq6FbE9Nhpy2NEaB8zQ.roa
File:                     FQkqCbE4Lq6FbE9Nhpy2NEaB8zQ.roa (raw, json)
Hash identifier:          Z03MKuDFlPkUyOnUaLam/xD3LYBZCepL0w3flsgoVgQ=
Subject key identifier:   15:09:2A:09:B1:38:2E:AE:85:6C:4F:4D:86:9C:B6:34:46:81:F3:34
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       0197A70A518660E2C3081A53A86876ADC3FF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FQkqCbE4Lq6FbE9Nhpy2NEaB8zQ.roa
Signing time:             Wed 25 Jun 2025 12:22:40 +0000
ROA not before:           Wed 25 Jun 2025 12:22:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2588
IP address blocks:        46.19.200.0/21 maxlen: 21
                          80.81.32.0/24 maxlen: 24
                          80.81.33.0/24 maxlen: 24
                          80.81.34.0/24 maxlen: 24
                          80.81.35.0/24 maxlen: 24
                          80.81.36.0/24 maxlen: 24
                          80.81.37.0/24 maxlen: 24
                          80.81.42.0/24 maxlen: 24
                          80.81.43.0/24 maxlen: 24
                          80.81.46.0/24 maxlen: 24
                          80.81.51.0/24 maxlen: 24
                          80.81.55.0/24 maxlen: 24
                          80.81.57.0/24 maxlen: 24
                          80.81.59.0/24 maxlen: 24
                          80.81.62.0/24 maxlen: 24
                          83.223.128.0/19 maxlen: 19
                          83.223.145.0/24 maxlen: 24
                          83.223.155.0/24 maxlen: 24
                          85.254.0.0/17 maxlen: 17
                          85.254.6.0/24 maxlen: 24
                          85.254.49.0/24 maxlen: 24
                          85.254.50.0/24 maxlen: 24
                          85.254.56.0/24 maxlen: 24
                          85.254.57.0/24 maxlen: 24
                          85.254.60.0/24 maxlen: 24
                          85.254.61.0/24 maxlen: 24
                          85.254.69.0/24 maxlen: 24
                          85.254.128.0/18 maxlen: 18
                          85.254.132.0/24 maxlen: 24
                          85.254.147.0/24 maxlen: 24
                          85.254.160.0/24 maxlen: 24
                          91.190.32.0/24 maxlen: 24
                          91.190.33.0/24 maxlen: 24
                          91.190.34.0/24 maxlen: 24
                          91.190.35.0/24 maxlen: 24
                          91.190.36.0/24 maxlen: 24
                          91.190.42.0/24 maxlen: 24
                          91.190.52.0/24 maxlen: 24
                          91.190.54.0/24 maxlen: 24
                          91.190.55.0/24 maxlen: 24
                          91.190.56.0/23 maxlen: 24
                          91.190.58.0/24 maxlen: 24
                          91.190.59.0/24 maxlen: 24
                          91.190.60.0/24 maxlen: 24
                          94.101.224.0/20 maxlen: 20
                          109.205.120.0/21 maxlen: 21
                          109.205.127.0/24 maxlen: 24
                          159.148.0.0/16 maxlen: 16
                          159.148.0.0/24 maxlen: 24
                          159.148.1.0/24 maxlen: 24
                          159.148.2.0/24 maxlen: 24
                          159.148.3.0/24 maxlen: 24
                          159.148.4.0/24 maxlen: 24
                          159.148.5.0/24 maxlen: 24
                          159.148.6.0/24 maxlen: 24
                          159.148.7.0/24 maxlen: 24
                          159.148.8.0/24 maxlen: 24
                          159.148.9.0/24 maxlen: 24
                          159.148.10.0/24 maxlen: 24
                          159.148.11.0/24 maxlen: 24
                          159.148.12.0/24 maxlen: 24
                          159.148.13.0/24 maxlen: 24
                          159.148.14.0/24 maxlen: 24
                          159.148.15.0/24 maxlen: 24
                          159.148.16.0/24 maxlen: 24
                          159.148.17.0/24 maxlen: 24
                          159.148.18.0/24 maxlen: 24
                          159.148.19.0/24 maxlen: 24
                          159.148.20.0/24 maxlen: 24
                          159.148.21.0/24 maxlen: 24
                          159.148.22.0/24 maxlen: 24
                          159.148.24.0/24 maxlen: 24
                          159.148.25.0/24 maxlen: 24
                          159.148.28.0/24 maxlen: 24
                          159.148.29.0/24 maxlen: 24
                          159.148.31.0/24 maxlen: 24
                          159.148.32.0/24 maxlen: 24
                          159.148.33.0/24 maxlen: 24
                          159.148.34.0/24 maxlen: 24
                          159.148.35.0/24 maxlen: 24
                          159.148.36.0/24 maxlen: 24
                          159.148.37.0/24 maxlen: 24
                          159.148.39.0/24 maxlen: 24
                          159.148.40.0/24 maxlen: 24
                          159.148.41.0/24 maxlen: 24
                          159.148.42.0/24 maxlen: 24
                          159.148.43.0/24 maxlen: 24
                          159.148.45.0/24 maxlen: 24
                          159.148.46.0/24 maxlen: 24
                          159.148.47.0/24 maxlen: 24
                          159.148.48.0/24 maxlen: 24
                          159.148.49.0/24 maxlen: 24
                          159.148.50.0/24 maxlen: 24
                          159.148.51.0/24 maxlen: 24
                          159.148.52.0/24 maxlen: 24
                          159.148.53.0/24 maxlen: 24
                          159.148.55.0/24 maxlen: 24
                          159.148.56.0/24 maxlen: 24
                          159.148.57.0/24 maxlen: 24
                          159.148.59.0/24 maxlen: 24
                          159.148.60.0/24 maxlen: 24
                          159.148.61.0/24 maxlen: 24
                          159.148.63.0/24 maxlen: 24
                          159.148.64.0/24 maxlen: 24
                          159.148.65.0/24 maxlen: 24
                          159.148.67.0/24 maxlen: 24
                          159.148.68.0/24 maxlen: 24
                          159.148.69.0/24 maxlen: 24
                          159.148.70.0/24 maxlen: 24
                          159.148.71.0/24 maxlen: 24
                          159.148.72.0/24 maxlen: 24
                          159.148.75.0/24 maxlen: 24
                          159.148.76.0/24 maxlen: 24
                          159.148.78.0/24 maxlen: 24
                          159.148.79.0/24 maxlen: 24
                          159.148.80.0/24 maxlen: 24
                          159.148.81.0/24 maxlen: 24
                          159.148.82.0/24 maxlen: 24
                          159.148.83.0/24 maxlen: 24
                          159.148.84.0/24 maxlen: 24
                          159.148.85.0/24 maxlen: 24
                          159.148.86.0/24 maxlen: 24
                          159.148.87.0/24 maxlen: 24
                          159.148.91.0/24 maxlen: 24
                          159.148.92.0/24 maxlen: 24
                          159.148.93.0/24 maxlen: 24
                          159.148.94.0/24 maxlen: 24
                          159.148.95.0/24 maxlen: 24
                          159.148.96.0/24 maxlen: 24
                          159.148.97.0/24 maxlen: 24
                          159.148.100.0/24 maxlen: 24
                          159.148.101.0/24 maxlen: 24
                          159.148.106.0/24 maxlen: 24
                          159.148.107.0/24 maxlen: 24
                          159.148.108.0/24 maxlen: 24
                          159.148.110.0/24 maxlen: 24
                          159.148.111.0/24 maxlen: 24
                          159.148.112.0/24 maxlen: 24
                          159.148.113.0/24 maxlen: 24
                          159.148.115.0/24 maxlen: 24
                          159.148.116.0/24 maxlen: 24
                          159.148.117.0/24 maxlen: 24
                          159.148.118.0/24 maxlen: 24
                          159.148.120.0/24 maxlen: 24
                          159.148.121.0/24 maxlen: 24
                          159.148.122.0/24 maxlen: 24
                          159.148.123.0/24 maxlen: 24
                          159.148.127.0/24 maxlen: 24
                          159.148.129.0/24 maxlen: 24
                          159.148.132.0/24 maxlen: 24
                          159.148.133.0/24 maxlen: 24
                          159.148.135.0/24 maxlen: 24
                          159.148.139.0/24 maxlen: 24
                          159.148.145.0/24 maxlen: 24
                          159.148.146.0/24 maxlen: 24
                          159.148.151.0/24 maxlen: 24
                          159.148.152.0/24 maxlen: 24
                          159.148.153.0/24 maxlen: 24
                          159.148.154.0/24 maxlen: 24
                          159.148.155.0/24 maxlen: 24
                          159.148.156.0/24 maxlen: 24
                          159.148.159.0/24 maxlen: 24
                          159.148.161.0/24 maxlen: 24
                          159.148.162.0/24 maxlen: 24
                          159.148.164.0/24 maxlen: 24
                          159.148.168.0/24 maxlen: 24
                          159.148.170.0/24 maxlen: 24
                          159.148.175.0/24 maxlen: 24
                          159.148.178.0/24 maxlen: 24
                          159.148.185.0/24 maxlen: 24
                          159.148.186.0/24 maxlen: 24
                          159.148.187.0/24 maxlen: 24
                          159.148.188.0/24 maxlen: 24
                          159.148.189.0/24 maxlen: 24
                          159.148.192.0/24 maxlen: 24
                          159.148.193.0/24 maxlen: 24
                          159.148.194.0/24 maxlen: 24
                          159.148.195.0/24 maxlen: 24
                          159.148.196.0/24 maxlen: 24
                          159.148.201.0/24 maxlen: 24
                          159.148.202.0/24 maxlen: 24
                          159.148.205.0/24 maxlen: 24
                          159.148.206.0/24 maxlen: 24
                          159.148.207.0/24 maxlen: 24
                          159.148.209.0/24 maxlen: 24
                          159.148.210.0/24 maxlen: 24
                          159.148.211.0/24 maxlen: 24
                          159.148.212.0/24 maxlen: 24
                          159.148.213.0/24 maxlen: 24
                          159.148.214.0/24 maxlen: 24
                          159.148.215.0/24 maxlen: 24
                          159.148.217.0/24 maxlen: 24
                          159.148.219.0/24 maxlen: 24
                          159.148.221.0/24 maxlen: 24
                          159.148.223.0/24 maxlen: 24
                          159.148.227.0/24 maxlen: 24
                          159.148.228.0/24 maxlen: 24
                          159.148.229.0/24 maxlen: 24
                          159.148.230.0/24 maxlen: 24
                          159.148.232.0/24 maxlen: 24
                          159.148.233.0/24 maxlen: 24
                          159.148.235.0/24 maxlen: 24
                          159.148.237.0/24 maxlen: 24
                          159.148.238.0/24 maxlen: 24
                          159.148.250.0/24 maxlen: 24
                          159.148.251.0/24 maxlen: 24
                          159.148.252.0/24 maxlen: 24
                          159.148.252.2/32 maxlen: 32
                          159.148.254.0/24 maxlen: 24
                          185.27.92.0/22 maxlen: 22
                          217.69.112.0/20 maxlen: 20
                          217.69.113.0/24 maxlen: 24
                          2a02:610::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 26 Jun 2025 14:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:a7:0a:51:86:60:e2:c3:08:1a:53:a8:68:76:ad:c3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jun 25 12:22:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=15092a09b1382eae856c4f4d869cb6344681f334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:66:d0:96:76:89:27:e0:e5:6f:1d:72:b5:
                    e9:ba:d4:a8:8d:b9:b6:9f:27:2b:c4:48:9c:6b:17:
                    87:fa:2c:e5:5a:e2:aa:8d:43:50:76:05:ab:5c:30:
                    6d:37:4f:62:df:5c:dd:2a:85:76:ed:dd:f8:b8:7b:
                    90:32:c7:e3:57:35:b5:a5:24:dd:99:07:5b:1e:bb:
                    88:41:ca:49:0b:05:04:cb:ec:76:bf:09:dd:11:59:
                    6e:4c:48:02:00:07:59:19:c3:ab:8d:e2:7a:8e:8d:
                    00:d1:2d:a3:43:20:f8:5e:9e:60:42:a3:0e:30:61:
                    43:34:24:00:07:0d:2e:5a:f6:7a:68:29:3a:9e:b6:
                    96:b6:23:7d:6f:0f:51:66:1f:24:a9:ad:06:0b:3a:
                    af:60:90:fa:1c:93:bd:b8:54:02:e3:41:b1:71:c8:
                    70:64:4d:73:eb:30:ee:3d:9d:b8:72:6e:99:5f:0a:
                    3b:7b:35:4d:31:1a:17:d7:b7:07:56:7a:7b:c7:50:
                    cc:b3:1a:4c:ec:e0:e6:24:9f:56:3e:77:a9:85:3b:
                    0b:10:e5:d0:e8:f0:47:88:1e:15:7e:e9:3d:2f:45:
                    12:64:57:a8:33:10:fb:1c:0f:da:44:db:5b:0a:a0:
                    2d:5d:d8:d2:da:2d:73:33:83:1c:c3:23:4d:ef:19:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:2A:09:B1:38:2E:AE:85:6C:4F:4D:86:9C:B6:34:46:81:F3:34
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FQkqCbE4Lq6FbE9Nhpy2NEaB8zQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.200.0/21
                  80.81.32.0-80.81.37.255
                  80.81.42.0/23
                  80.81.46.0/24
                  80.81.51.0/24
                  80.81.55.0/24
                  80.81.57.0/24
                  80.81.59.0/24
                  80.81.62.0/24
                  83.223.128.0/19
                  85.254.0.0-85.254.191.255
                  91.190.32.0-91.190.36.255
                  91.190.42.0/24
                  91.190.52.0/24
                  91.190.54.0-91.190.60.255
                  94.101.224.0/20
                  109.205.120.0/21
                  159.148.0.0/16
                  185.27.92.0/22
                  217.69.112.0/20
                IPv6:
                  2a02:610::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:dc:e8:2f:76:e4:49:63:29:57:45:59:90:52:0d:03:a3:
         ea:b1:31:b4:12:83:0c:66:19:13:8a:fe:c8:cd:4d:62:37:eb:
         0c:1a:ad:1f:68:25:d5:f2:2e:ff:1a:ff:8d:b1:a6:3e:44:18:
         21:2d:6f:99:c5:e8:fd:47:4a:4d:91:56:c7:84:69:b0:6d:15:
         91:9a:84:8a:27:d9:08:35:f1:17:83:c0:08:1b:ce:0e:58:fe:
         f8:d6:63:51:ae:7f:f4:e4:ee:a9:e9:30:d8:e5:1c:f3:b5:ee:
         85:f7:14:cc:7b:58:06:e7:56:eb:24:05:9b:ff:95:4e:18:83:
         eb:6f:8a:e9:11:d2:08:1e:f7:d4:8f:58:2e:27:88:ef:33:36:
         52:34:9b:f2:a8:b6:83:5d:a3:c3:3a:11:3e:b4:b2:c7:24:fc:
         97:8d:db:a8:12:be:b4:b4:01:de:1f:35:0d:7d:d6:9a:7b:49:
         1d:8d:7d:71:9e:f5:98:db:48:40:52:44:bc:ef:90:64:4b:db:
         68:09:d6:c0:78:c8:87:52:0a:b1:ef:ab:a2:32:a3:01:10:51:
         2e:00:7d:07:47:f7:56:f1:c7:32:05:0e:b1:b7:79:ba:f4:aa:
         8e:10:ad:d9:11:98:78:9d:24:10:79:13:3f:d2:42:02:5e:c3:
         f4:ec:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:14:22 2025 by rpki-client