Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/J3qjOn5voEQKEdSPQdONIfCoi7o.roa
File:                     J3qjOn5voEQKEdSPQdONIfCoi7o.roa (raw, json)
Hash identifier:          56Jguf1RTsY1WUlSviHPnHr7Asg2D9n5P84i+H+R1MI=
Subject key identifier:   27:7A:A3:3A:7E:6F:A0:44:0A:11:D4:8F:41:D3:8D:21:F0:A8:8B:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       01860E8F398349F6435999AC451C61E1AD57
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/J3qjOn5voEQKEdSPQdONIfCoi7o.roa
Signing time:             Wed 01 Feb 2023 19:58:32 +0000
ROA not before:           Wed 01 Feb 2023 19:58:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     36692
IP address blocks:        185.60.84.0/23 maxlen: 24
                          185.60.86.0/24 maxlen: 24
                          185.60.87.0/24 maxlen: 24
                          146.112.60.0/24 maxlen: 24
                          146.112.10.0/24 maxlen: 24
                          146.112.41.0/24 maxlen: 24
                          146.112.170.0/24 maxlen: 24
                          146.112.174.0/24 maxlen: 24
                          146.112.187.0/24 maxlen: 24
                          146.112.131.0/24 maxlen: 24
                          146.112.132.0/24 maxlen: 24
                          146.112.128.0/24 maxlen: 24
                          146.112.129.0/24 maxlen: 24
                          146.112.130.0/24 maxlen: 24
                          146.112.133.0/24 maxlen: 24
                          146.112.134.0/24 maxlen: 24
                          146.112.135.0/24 maxlen: 24
                          146.112.136.0/24 maxlen: 24
                          146.112.137.0/24 maxlen: 24
                          146.112.138.0/24 maxlen: 24
                          146.112.139.0/24 maxlen: 24
                          155.190.192.0/24 maxlen: 24
                          155.190.193.0/24 maxlen: 24
                          155.190.194.0/24 maxlen: 24
                          155.190.195.0/24 maxlen: 24
                          155.190.196.0/24 maxlen: 24
                          155.190.197.0/24 maxlen: 24
                          155.190.201.0/24 maxlen: 24
                          155.190.202.0/24 maxlen: 24
                          155.190.203.0/24 maxlen: 24
                          155.190.232.0/24 maxlen: 24
                          155.190.238.0/24 maxlen: 24
                          155.190.25.0/24 maxlen: 24
                          155.190.26.0/24 maxlen: 24
                          155.190.27.0/24 maxlen: 24
                          155.190.28.0/24 maxlen: 24
                          155.190.29.0/24 maxlen: 24
                          155.190.38.0/24 maxlen: 24
                          155.190.32.0/24 maxlen: 24
                          155.190.33.0/24 maxlen: 24
                          155.190.34.0/24 maxlen: 24
                          155.190.35.0/24 maxlen: 24
                          155.190.36.0/24 maxlen: 24
                          155.190.37.0/24 maxlen: 24
                          155.190.39.0/24 maxlen: 24
                          155.190.40.0/24 maxlen: 24
                          155.190.41.0/24 maxlen: 24
                          155.190.42.0/24 maxlen: 24
                          155.190.43.0/24 maxlen: 24
                          155.190.44.0/24 maxlen: 24
                          155.190.45.0/24 maxlen: 24
                          155.190.46.0/24 maxlen: 24
                          155.190.47.0/24 maxlen: 24
                          155.190.48.0/24 maxlen: 24
                          155.190.49.0/24 maxlen: 24
                          155.190.50.0/24 maxlen: 24
                          155.190.51.0/24 maxlen: 24
                          155.190.53.0/24 maxlen: 24
                          155.190.54.0/24 maxlen: 24
                          155.190.55.0/24 maxlen: 24
                          155.190.56.0/24 maxlen: 24
                          155.190.57.0/24 maxlen: 24
                          155.190.58.0/24 maxlen: 24
                          155.190.59.0/24 maxlen: 24
                          155.190.0.0/24 maxlen: 24
                          155.190.4.0/24 maxlen: 24
                          155.190.3.0/24 maxlen: 24
                          155.190.1.0/24 maxlen: 24
                          155.190.2.0/24 maxlen: 24
                          155.190.8.0/24 maxlen: 24
                          155.190.9.0/24 maxlen: 24
                          155.190.10.0/24 maxlen: 24
                          155.190.13.0/24 maxlen: 24
                          155.190.15.0/24 maxlen: 24
                          155.190.17.0/24 maxlen: 24
                          155.190.24.0/24 maxlen: 24
                          155.190.18.0/24 maxlen: 24
                          155.190.19.0/24 maxlen: 24
                          155.190.20.0/24 maxlen: 24
                          155.190.21.0/24 maxlen: 24
                          155.190.22.0/24 maxlen: 24
                          155.190.23.0/24 maxlen: 24
                          2a04:e4c0:25::/48 maxlen: 48
                          2a04:e4c0:14::/48 maxlen: 48
                          2a04:e4c0:22::/48 maxlen: 48
                          2a04:e4c0:11::/48 maxlen: 48
                          2a04:e4c0:47::/48 maxlen: 48
                          2a04:e4c0:55::/48 maxlen: 48
                          2a04:e4c0:30::/48 maxlen: 48
                          2a04:e4c0:44::/48 maxlen: 48
                          2a04:e4c7:fffd::/48 maxlen: 48
                          2a04:e4c0:52::/48 maxlen: 48
                          2a04:e4c4:3::/48 maxlen: 48
                          2a04:e4c0:63::/48 maxlen: 48
                          2a04:e4c0:41::/48 maxlen: 48
                          2a04:e4c0:60::/48 maxlen: 48
                          2a04:e4c0:13::/48 maxlen: 48
                          2a04:e4c0:16::/48 maxlen: 48
                          2a04:e4c7:ffff::/48 maxlen: 48
                          2a04:e4c0:10::/48 maxlen: 48
                          2a04:e4c0:49::/48 maxlen: 48
                          2a04:e4c0:24::/48 maxlen: 48
                          2a04:e4c0:43::/48 maxlen: 48
                          2a04:e4c0:46::/48 maxlen: 48
                          2a04:e4c0:21::/48 maxlen: 48
                          2a04:e4c0:40::/48 maxlen: 48
                          2a04:e4c7:fffe::/48 maxlen: 48
                          2a04:e4c4:1::/48 maxlen: 48
                          2a04:e4c0:54::/48 maxlen: 48
                          2a04:e4c0:62::/48 maxlen: 48
                          2a04:e4c0:18::/48 maxlen: 48
                          2a04:e4c4:4::/48 maxlen: 48
                          2a04:e4c0:51::/48 maxlen: 48
                          2a04:e4c0:15::/48 maxlen: 48
                          2a04:e4c0:12::/48 maxlen: 48
                          2a04:e4c0:48::/48 maxlen: 48
                          2a04:e4c0:23::/48 maxlen: 48
                          2a04:e4c0:45::/48 maxlen: 48
                          2a04:e4c0:20::/48 maxlen: 48
                          2a04:e4c0:59::/48 maxlen: 48
                          2a04:e4c0:42::/48 maxlen: 48
                          2a04:e4c0:53::/48 maxlen: 48
                          2a04:e4c0:56::/48 maxlen: 48
                          2a04:e4c0:31::/48 maxlen: 48
                          2a04:e4c0:64::/48 maxlen: 48
                          2a04:e4c4:2::/48 maxlen: 48
                          2a04:e4c0:61::/48 maxlen: 48
                          2a04:e4c0:17::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 03 Mar 2023 15:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0e:8f:39:83:49:f6:43:59:99:ac:45:1c:61:e1:ad:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Feb  1 19:58:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=277aa33a7e6fa0440a11d48f41d38d21f0a88bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:4d:0d:79:e7:89:14:15:27:a8:21:25:64:
                    ae:19:13:ec:65:10:e2:ac:79:17:aa:3c:02:2e:a6:
                    9a:b9:e3:66:b3:df:3d:60:98:fc:31:f7:0a:dc:ba:
                    41:3f:85:62:d1:09:3d:0f:1f:8c:c1:80:65:51:49:
                    b7:fe:f0:0f:f5:1e:f7:7d:c3:a5:25:70:9e:f6:6f:
                    dd:08:14:81:1e:e0:6d:f7:1f:42:d2:32:93:83:1c:
                    3c:6b:bb:25:da:bb:f7:6e:a1:46:eb:68:04:97:8f:
                    56:da:c3:e7:88:bd:29:93:3f:db:32:31:c1:5b:2f:
                    d6:75:cd:64:f8:36:31:41:f0:6b:7f:30:57:87:84:
                    37:27:9d:c0:36:bb:ca:ce:f0:b3:2a:da:9c:00:f4:
                    ff:01:85:c0:4f:9b:fa:fa:46:6e:de:52:27:90:28:
                    22:99:8a:35:b8:51:22:72:ef:76:4a:be:96:27:ef:
                    95:2b:04:2f:4f:0c:dc:80:2c:22:ee:7e:79:1e:c7:
                    9f:25:bb:63:ce:bb:72:b4:47:61:20:96:8d:5e:a1:
                    f1:ae:2d:5f:85:42:45:79:b5:52:bb:db:48:32:55:
                    56:7b:97:00:7a:28:e2:94:23:f9:54:0b:f0:0e:02:
                    24:c1:6e:79:50:7e:78:df:5d:39:73:eb:a5:7f:13:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:A3:3A:7E:6F:A0:44:0A:11:D4:8F:41:D3:8D:21:F0:A8:8B:BA
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/J3qjOn5voEQKEdSPQdONIfCoi7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.112.10.0/24
                  146.112.41.0/24
                  146.112.60.0/24
                  146.112.128.0-146.112.139.255
                  146.112.170.0/24
                  146.112.174.0/24
                  146.112.187.0/24
                  155.190.0.0-155.190.4.255
                  155.190.8.0-155.190.10.255
                  155.190.13.0/24
                  155.190.15.0/24
                  155.190.17.0-155.190.29.255
                  155.190.32.0-155.190.51.255
                  155.190.53.0-155.190.59.255
                  155.190.192.0-155.190.197.255
                  155.190.201.0-155.190.203.255
                  155.190.232.0/24
                  155.190.238.0/24
                  185.60.84.0/22
                IPv6:
                  2a04:e4c0:10::-2a04:e4c0:18:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:20::-2a04:e4c0:25:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:30::/47
                  2a04:e4c0:40::-2a04:e4c0:49:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:51::-2a04:e4c0:56:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c0:59::/48
                  2a04:e4c0:60::-2a04:e4c0:64:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c4:1::-2a04:e4c4:4:ffff:ffff:ffff:ffff:ffff
                  2a04:e4c7:fffd::-2a04:e4c7:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:71:84:fd:5e:71:15:6a:f4:83:0b:e8:96:17:1b:f1:de:
         bf:10:38:0f:47:ff:b7:ca:fd:09:0f:db:8e:59:80:d5:3f:a7:
         8a:d0:31:9b:eb:05:fc:0b:9e:3a:ec:04:55:fc:bc:74:eb:ba:
         a6:54:e6:8e:9a:df:73:1a:c0:98:1c:b8:36:5e:b6:04:75:cb:
         22:92:3c:b7:a7:e6:3d:5b:db:b3:ab:eb:aa:b9:ca:6a:0a:70:
         db:00:f5:66:38:2b:b0:3d:2c:6a:2a:36:4a:4d:1a:57:2f:33:
         c9:9e:ab:e1:7e:7e:58:27:7d:00:cb:45:20:2b:8a:02:79:a7:
         cb:48:a8:da:34:c7:56:c8:38:da:7a:d3:7b:27:33:2e:57:29:
         08:96:ac:ae:6a:40:25:99:25:f5:44:38:89:14:43:5b:42:8b:
         de:9e:7d:55:eb:79:b0:36:4c:dc:cb:d9:f5:5c:9b:14:71:88:
         98:f7:3d:e4:2a:92:ee:21:92:7d:4c:77:76:a0:5f:a7:d2:b4:
         c4:6a:cd:ba:a7:31:fc:9d:14:ba:e2:f5:80:40:f8:33:ac:af:
         16:1a:00:e1:59:99:94:c4:81:0b:b8:bb:9f:74:33:f0:e7:e9:
         85:25:bd:58:c8:8c:11:73:18:e0:4b:39:ae:47:1b:ae:13:cb:
         a9:f1:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org