Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Uk7Mewz76q0PuAHrpX1oPRle9f8.roa
File:                     Uk7Mewz76q0PuAHrpX1oPRle9f8.roa (raw, json)
Hash identifier:          6IKcZpdsVAo3nVKH/o1wrFtpdVzp5VfYMouYNycBv44=
Subject key identifier:   52:4E:CC:7B:0C:FB:EA:AD:0F:B8:01:EB:A5:7D:68:3D:19:5E:F5:FF
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       0192B87DEE5EFE334BDC01DF1B561377979A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Uk7Mewz76q0PuAHrpX1oPRle9f8.roa
Signing time:             Wed 23 Oct 2024 08:28:33 +0000
ROA not before:           Wed 23 Oct 2024 08:28:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2588
IP address blocks:        46.19.200.0/21 maxlen: 21
                          80.81.32.0/19 maxlen: 24
                          80.81.35.0/24 maxlen: 24
                          83.223.128.0/19 maxlen: 19
                          83.223.145.0/24 maxlen: 24
                          83.223.155.0/24 maxlen: 24
                          85.254.0.0/17 maxlen: 17
                          85.254.49.0/24 maxlen: 24
                          85.254.50.0/24 maxlen: 24
                          85.254.69.0/24 maxlen: 24
                          85.254.128.0/18 maxlen: 18
                          91.190.32.0/19 maxlen: 24
                          91.190.36.0/24 maxlen: 24
                          91.190.52.0/24 maxlen: 24
                          91.190.56.0/23 maxlen: 24
                          91.190.60.0/24 maxlen: 24
                          94.101.224.0/20 maxlen: 20
                          109.205.120.0/21 maxlen: 21
                          109.205.127.0/24 maxlen: 24
                          159.148.0.0/16 maxlen: 16
                          159.148.0.0/24 maxlen: 24
                          159.148.1.0/24 maxlen: 24
                          159.148.2.0/24 maxlen: 24
                          159.148.3.0/24 maxlen: 24
                          159.148.4.0/24 maxlen: 24
                          159.148.5.0/24 maxlen: 24
                          159.148.6.0/24 maxlen: 24
                          159.148.7.0/24 maxlen: 24
                          159.148.8.0/24 maxlen: 24
                          159.148.9.0/24 maxlen: 24
                          159.148.10.0/24 maxlen: 24
                          159.148.11.0/24 maxlen: 24
                          159.148.12.0/24 maxlen: 24
                          159.148.13.0/24 maxlen: 24
                          159.148.14.0/24 maxlen: 24
                          159.148.15.0/24 maxlen: 24
                          159.148.16.0/24 maxlen: 24
                          159.148.17.0/24 maxlen: 24
                          159.148.18.0/24 maxlen: 24
                          159.148.19.0/24 maxlen: 24
                          159.148.20.0/24 maxlen: 24
                          159.148.21.0/24 maxlen: 24
                          159.148.22.0/24 maxlen: 24
                          159.148.24.0/24 maxlen: 24
                          159.148.25.0/24 maxlen: 24
                          159.148.28.0/24 maxlen: 24
                          159.148.29.0/24 maxlen: 24
                          159.148.31.0/24 maxlen: 24
                          159.148.32.0/24 maxlen: 24
                          159.148.33.0/24 maxlen: 24
                          159.148.34.0/24 maxlen: 24
                          159.148.35.0/24 maxlen: 24
                          159.148.36.0/24 maxlen: 24
                          159.148.37.0/24 maxlen: 24
                          159.148.39.0/24 maxlen: 24
                          159.148.40.0/24 maxlen: 24
                          159.148.41.0/24 maxlen: 24
                          159.148.42.0/24 maxlen: 24
                          159.148.43.0/24 maxlen: 24
                          159.148.45.0/24 maxlen: 24
                          159.148.46.0/24 maxlen: 24
                          159.148.47.0/24 maxlen: 24
                          159.148.48.0/24 maxlen: 24
                          159.148.49.0/24 maxlen: 24
                          159.148.50.0/24 maxlen: 24
                          159.148.51.0/24 maxlen: 24
                          159.148.52.0/24 maxlen: 24
                          159.148.53.0/24 maxlen: 24
                          159.148.55.0/24 maxlen: 24
                          159.148.56.0/24 maxlen: 24
                          159.148.57.0/24 maxlen: 24
                          159.148.59.0/24 maxlen: 24
                          159.148.60.0/24 maxlen: 24
                          159.148.61.0/24 maxlen: 24
                          159.148.63.0/24 maxlen: 24
                          159.148.64.0/24 maxlen: 24
                          159.148.65.0/24 maxlen: 24
                          159.148.67.0/24 maxlen: 24
                          159.148.68.0/24 maxlen: 24
                          159.148.69.0/24 maxlen: 24
                          159.148.70.0/24 maxlen: 24
                          159.148.71.0/24 maxlen: 24
                          159.148.72.0/24 maxlen: 24
                          159.148.75.0/24 maxlen: 24
                          159.148.76.0/24 maxlen: 24
                          159.148.78.0/24 maxlen: 24
                          159.148.79.0/24 maxlen: 24
                          159.148.80.0/24 maxlen: 24
                          159.148.81.0/24 maxlen: 24
                          159.148.83.0/24 maxlen: 24
                          159.148.84.0/24 maxlen: 24
                          159.148.85.0/24 maxlen: 24
                          159.148.86.0/24 maxlen: 24
                          159.148.87.0/24 maxlen: 24
                          159.148.91.0/24 maxlen: 24
                          159.148.92.0/24 maxlen: 24
                          159.148.93.0/24 maxlen: 24
                          159.148.94.0/24 maxlen: 24
                          159.148.95.0/24 maxlen: 24
                          159.148.96.0/24 maxlen: 24
                          159.148.97.0/24 maxlen: 24
                          159.148.100.0/24 maxlen: 24
                          159.148.101.0/24 maxlen: 24
                          159.148.106.0/24 maxlen: 24
                          159.148.107.0/24 maxlen: 24
                          159.148.108.0/24 maxlen: 24
                          159.148.110.0/24 maxlen: 24
                          159.148.111.0/24 maxlen: 24
                          159.148.112.0/24 maxlen: 24
                          159.148.113.0/24 maxlen: 24
                          159.148.115.0/24 maxlen: 24
                          159.148.116.0/24 maxlen: 24
                          159.148.117.0/24 maxlen: 24
                          159.148.118.0/24 maxlen: 24
                          159.148.120.0/24 maxlen: 24
                          159.148.121.0/24 maxlen: 24
                          159.148.122.0/24 maxlen: 24
                          159.148.123.0/24 maxlen: 24
                          159.148.127.0/24 maxlen: 24
                          159.148.129.0/24 maxlen: 24
                          159.148.132.0/24 maxlen: 24
                          159.148.133.0/24 maxlen: 24
                          159.148.135.0/24 maxlen: 24
                          159.148.139.0/24 maxlen: 24
                          159.148.145.0/24 maxlen: 24
                          159.148.146.0/24 maxlen: 24
                          159.148.151.0/24 maxlen: 24
                          159.148.152.0/24 maxlen: 24
                          159.148.153.0/24 maxlen: 24
                          159.148.154.0/24 maxlen: 24
                          159.148.155.0/24 maxlen: 24
                          159.148.156.0/24 maxlen: 24
                          159.148.159.0/24 maxlen: 24
                          159.148.161.0/24 maxlen: 24
                          159.148.162.0/24 maxlen: 24
                          159.148.164.0/24 maxlen: 24
                          159.148.168.0/24 maxlen: 24
                          159.148.170.0/24 maxlen: 24
                          159.148.175.0/24 maxlen: 24
                          159.148.178.0/24 maxlen: 24
                          159.148.185.0/24 maxlen: 24
                          159.148.186.0/24 maxlen: 24
                          159.148.187.0/24 maxlen: 24
                          159.148.188.0/24 maxlen: 24
                          159.148.189.0/24 maxlen: 24
                          159.148.192.0/24 maxlen: 24
                          159.148.193.0/24 maxlen: 24
                          159.148.194.0/24 maxlen: 24
                          159.148.195.0/24 maxlen: 24
                          159.148.196.0/24 maxlen: 24
                          159.148.201.0/24 maxlen: 24
                          159.148.202.0/24 maxlen: 24
                          159.148.205.0/24 maxlen: 24
                          159.148.206.0/24 maxlen: 24
                          159.148.207.0/24 maxlen: 24
                          159.148.209.0/24 maxlen: 24
                          159.148.210.0/24 maxlen: 24
                          159.148.211.0/24 maxlen: 24
                          159.148.212.0/24 maxlen: 24
                          159.148.213.0/24 maxlen: 24
                          159.148.214.0/24 maxlen: 24
                          159.148.215.0/24 maxlen: 24
                          159.148.217.0/24 maxlen: 24
                          159.148.219.0/24 maxlen: 24
                          159.148.221.0/24 maxlen: 24
                          159.148.223.0/24 maxlen: 24
                          159.148.227.0/24 maxlen: 24
                          159.148.228.0/24 maxlen: 24
                          159.148.229.0/24 maxlen: 24
                          159.148.230.0/24 maxlen: 24
                          159.148.232.0/24 maxlen: 24
                          159.148.233.0/24 maxlen: 24
                          159.148.235.0/24 maxlen: 24
                          159.148.237.0/24 maxlen: 24
                          159.148.238.0/24 maxlen: 24
                          159.148.250.0/24 maxlen: 24
                          159.148.251.0/24 maxlen: 24
                          159.148.252.0/24 maxlen: 24
                          159.148.252.2/32 maxlen: 32
                          159.148.254.0/24 maxlen: 24
                          185.27.92.0/22 maxlen: 22
                          217.69.112.0/20 maxlen: 20
                          217.69.113.0/24 maxlen: 24
                          2a02:610::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 01:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b8:7d:ee:5e:fe:33:4b:dc:01:df:1b:56:13:77:97:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Oct 23 08:28:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=524ecc7b0cfbeaad0fb801eba57d683d195ef5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:db:59:90:3c:e0:9f:52:4f:51:28:0c:4f:4e:
                    6c:0e:dd:4f:d4:8a:c6:e9:b3:4e:39:ee:73:8a:08:
                    b4:4e:0a:48:b8:c0:27:fa:bd:05:23:74:62:2e:95:
                    e7:22:31:3f:09:c6:4d:de:45:36:93:a6:d4:f9:1c:
                    a6:6d:20:f3:0e:ef:5b:23:2e:5f:c8:d2:cb:0e:af:
                    20:c9:22:33:13:e9:84:df:0c:49:0c:97:c2:5f:f8:
                    2e:96:fa:53:a4:96:01:c5:a1:05:60:47:65:e4:b3:
                    9a:48:a1:16:2e:31:3b:04:fc:59:32:95:ed:4a:42:
                    f0:b5:48:b3:de:f6:ac:db:62:ba:ba:47:fc:2f:a3:
                    97:2c:e1:c3:90:3e:e6:d1:c5:f5:b7:be:3b:0c:e6:
                    45:a7:79:7f:89:6b:37:fb:62:58:72:83:4a:6a:d9:
                    25:97:4d:2c:01:0e:1b:e6:dc:97:24:c0:4e:e6:5d:
                    59:e9:a4:c0:9e:2d:39:77:eb:f1:56:3b:9a:5b:58:
                    19:6a:2d:8d:df:94:d7:67:4d:fc:a3:b8:66:cf:c5:
                    97:08:e5:b3:5b:18:df:7f:e5:e3:6b:fb:93:67:91:
                    91:c7:64:39:f5:49:67:fc:fd:b3:c2:9c:67:05:f8:
                    19:83:57:53:7b:9c:0c:25:b8:e0:91:42:54:43:b2:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4E:CC:7B:0C:FB:EA:AD:0F:B8:01:EB:A5:7D:68:3D:19:5E:F5:FF
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Uk7Mewz76q0PuAHrpX1oPRle9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.200.0/21
                  80.81.32.0/19
                  83.223.128.0/19
                  85.254.0.0-85.254.191.255
                  91.190.32.0/19
                  94.101.224.0/20
                  109.205.120.0/21
                  159.148.0.0/16
                  185.27.92.0/22
                  217.69.112.0/20
                IPv6:
                  2a02:610::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:e4:1c:b7:04:e2:b6:2e:82:e5:1a:c3:b0:f6:70:87:27:
         d5:7c:bb:6d:30:3e:64:de:9d:7a:9a:7f:31:c9:ef:fc:90:12:
         01:82:0b:da:c1:a2:d6:f6:3d:9e:c9:56:f1:9c:da:dd:d2:bd:
         18:07:b4:2b:8f:96:dd:56:6a:c1:5a:e5:2d:b7:d4:52:d4:74:
         c0:bd:1b:64:f7:1f:db:79:2b:6b:06:3a:8d:7b:a5:0e:4c:bd:
         a3:78:a4:15:e9:83:d7:97:9e:41:7b:1d:42:a0:3f:bc:42:4f:
         83:55:04:b6:a4:4b:6b:04:52:7b:c9:a1:9a:85:21:ff:b9:af:
         e8:97:cc:fc:77:0f:1a:a9:82:32:84:35:59:b2:04:52:d5:35:
         e3:2c:59:48:8d:bb:2c:cc:2f:50:44:94:54:0f:62:91:26:55:
         d6:6b:0d:c3:0a:67:62:ed:3f:44:bf:a5:45:3a:a0:cb:a3:66:
         84:4b:9c:97:9e:cc:77:09:3f:a7:d8:db:aa:a2:a3:45:7d:05:
         1c:12:0c:6e:1b:35:2e:e8:8f:82:85:9c:80:41:0d:27:b0:51:
         df:64:3b:7a:24:1d:cc:d4:90:8b:19:3e:9e:b7:30:0b:c0:23:
         4a:d1:86:1a:56:db:60:12:d5:1b:5e:44:f5:ae:29:df:e8:55:
         0b:40:7c:97
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZK4fe5e/jNL3AHfG1YTd5eaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQxMDIzMDgyODMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjRlY2M3YjBjZmJlYWFkMGZiODAxZWJhNTdkNjgzZDE5NWVmNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79tZkDzgn1JPUSgMT05sDt1P1IrG
6bNOOe5zigi0TgpIuMAn+r0FI3RiLpXnIjE/CcZN3kU2k6bU+RymbSDzDu9bIy5f
yNLLDq8gySIzE+mE3wxJDJfCX/gulvpTpJYBxaEFYEdl5LOaSKEWLjE7BPxZMpXt
SkLwtUiz3vas22K6ukf8L6OXLOHDkD7m0cX1t747DOZFp3l/iWs3+2JYcoNKatkl
l00sAQ4b5tyXJMBO5l1Z6aTAni05d+vxVjuaW1gZai2N35TXZ038o7hmz8WXCOWz
Wxjff+Xja/uTZ5GRx2Q59Uln/P2zwpxnBfgZg1dTe5wMJbjgkUJUQ7JyPQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFFJOzHsM++qtD7gB66V9aD0ZXvX/MB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvVWs3TWV3ejc2cTBQdUFIcnBYMW9QUmxlOWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDLhPIAwQF
UFEgAwQFU9+AMAsDAwFV/gMEBlX+gAMEBVu+IAMEBF5l4AMEA23NeAMDAJ+UAwQC
uRtcAwQE2UVwMA0EAgACMAcDBQAqAgYQMA0GCSqGSIb3DQEBCwUAA4IBAQAVoOQc
twTiti6C5RrDsPZwhyfVfLttMD5k3p16mn8xye/8kBIBggvawaLW9j2eyVbxnNrd
0r0YB7Qrj5bdVmrBWuUtt9RS1HTAvRtk9x/beStrBjqNe6UOTL2jeKQV6YPXl55B
ex1CoD+8Qk+DVQS2pEtrBFJ7yaGahSH/ua/ol8z8dw8aqYIyhDVZsgRS1TXjLFlI
jbsszC9QRJRUD2KRJlXWaw3DCmdi7T9Ev6VFOqDLo2aES5yXnsx3CT+n2NuqoqNF
fQUcEgxuGzUu6I+ChZyAQQ0nsFHfZDt6JB3M1JCLGT6etzALwCNK0YYaVttgEtUb
XkT1rinf6FULQHyX
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:16 2025 by rpki-client