Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/UnTINHDeAyx_VRc4Th_4ZP1E5y8.roa
File:                     UnTINHDeAyx_VRc4Th_4ZP1E5y8.roa (raw, json)
Hash identifier:          qOKyl2EwVEXjhpBHZVfUtDxjTqW3XK34c+NyG+MsfCw=
Subject key identifier:   52:74:C8:34:70:DE:03:2C:7F:55:17:38:4E:1F:F8:64:FD:44:E7:2F
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       019002D0C515046AA051FEC4658C9001D168
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/UnTINHDeAyx_VRc4Th_4ZP1E5y8.roa
Signing time:             Mon 10 Jun 2024 15:42:34 +0000
ROA not before:           Mon 10 Jun 2024 15:42:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136787
IP address blocks:        82.140.135.0/24 maxlen: 24
                          82.140.136.0/24 maxlen: 24
                          82.140.137.0/24 maxlen: 24
                          82.140.142.0/24 maxlen: 24
                          82.140.144.0/24 maxlen: 24
                          82.140.145.0/24 maxlen: 24
                          82.140.147.0/24 maxlen: 24
                          82.140.149.0/24 maxlen: 24
                          82.140.151.0/24 maxlen: 24
                          82.140.154.0/24 maxlen: 24
                          82.140.155.0/24 maxlen: 24
                          82.140.157.0/24 maxlen: 24
                          82.140.162.0/24 maxlen: 24
                          82.140.163.0/24 maxlen: 24
                          82.140.164.0/24 maxlen: 24
                          82.140.167.0/24 maxlen: 24
                          82.140.168.0/24 maxlen: 24
                          82.140.172.0/24 maxlen: 24
                          82.140.173.0/24 maxlen: 24
                          82.140.174.0/24 maxlen: 24
                          82.140.175.0/24 maxlen: 24
                          82.140.181.0/24 maxlen: 24
                          82.140.190.0/24 maxlen: 24
                          84.46.165.0/24 maxlen: 24
                          84.46.166.0/24 maxlen: 24
                          84.46.174.0/24 maxlen: 24
                          86.38.2.0/24 maxlen: 24
                          86.38.44.0/24 maxlen: 24
                          86.38.46.0/24 maxlen: 24
                          86.38.91.0/24 maxlen: 24
                          86.38.157.0/24 maxlen: 24
                          86.38.206.0/24 maxlen: 24
                          86.38.207.0/24 maxlen: 24
                          86.38.224.0/24 maxlen: 24
                          86.38.231.0/24 maxlen: 24
                          89.116.0.0/24 maxlen: 24
                          89.116.18.0/24 maxlen: 24
                          89.116.40.0/24 maxlen: 24
                          89.116.55.0/24 maxlen: 24
                          89.116.57.0/24 maxlen: 24
                          89.116.79.0/24 maxlen: 24
                          89.116.94.0/24 maxlen: 24
                          89.116.95.0/24 maxlen: 24
                          89.116.98.0/24 maxlen: 24
                          89.116.142.0/24 maxlen: 24
                          89.116.145.0/24 maxlen: 24
                          89.116.194.0/24 maxlen: 24
                          89.116.195.0/24 maxlen: 24
                          89.116.196.0/24 maxlen: 24
                          89.116.197.0/24 maxlen: 24
                          89.116.199.0/24 maxlen: 24
                          89.116.201.0/24 maxlen: 24
                          89.116.204.0/24 maxlen: 24
                          89.116.205.0/24 maxlen: 24
                          89.116.206.0/24 maxlen: 24
                          89.116.207.0/24 maxlen: 24
                          89.116.216.0/24 maxlen: 24
                          89.116.217.0/24 maxlen: 24
                          89.116.219.0/24 maxlen: 24
                          89.116.222.0/24 maxlen: 24
                          89.116.251.0/24 maxlen: 24
                          89.116.254.0/24 maxlen: 24
                          89.117.4.0/24 maxlen: 24
                          89.117.34.0/24 maxlen: 24
                          89.117.131.0/24 maxlen: 24
                          89.117.189.0/24 maxlen: 24
                          89.117.191.0/24 maxlen: 24
                          89.117.230.0/24 maxlen: 24
                          89.117.231.0/24 maxlen: 24
                          89.117.244.0/24 maxlen: 24
                          217.9.251.0/24 maxlen: 24
                          217.9.252.0/24 maxlen: 24
                          217.9.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Jun 2024 16:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:02:d0:c5:15:04:6a:a0:51:fe:c4:65:8c:90:01:d1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jun 10 15:42:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5274c83470de032c7f5517384e1ff864fd44e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:d3:0b:a8:bd:0f:85:dc:76:c8:ef:a9:07:
                    4f:58:58:8c:e1:7e:c2:68:b3:04:c1:c1:eb:6d:2d:
                    44:b5:da:a1:df:01:cd:0c:c8:ff:57:0e:8b:7c:fd:
                    9a:32:ff:85:5e:d9:6a:9d:ed:ec:15:74:7a:d4:ad:
                    11:d8:a5:45:2e:e2:6e:a3:a0:7e:89:95:cc:3c:c1:
                    fd:26:f3:c6:64:78:bc:af:2a:8c:9a:37:8d:f7:67:
                    2e:bc:0a:44:df:d8:0f:4e:d5:73:22:e7:54:b2:1d:
                    29:3a:8c:a2:b6:bb:df:9d:00:f6:24:68:29:24:14:
                    0c:f6:d0:2d:1f:77:cf:11:61:0b:58:3b:76:75:e5:
                    97:35:3c:5f:4e:d7:e6:92:de:9f:f1:5e:41:a8:5e:
                    3c:31:c0:b2:1f:56:0e:08:32:0e:2c:6a:fd:21:86:
                    4d:2f:55:8b:be:05:72:c7:b7:94:e5:a1:64:2b:ba:
                    37:18:7c:96:6b:62:ab:11:a1:8c:b8:f9:4e:a7:97:
                    d5:f4:d4:21:68:d0:3a:77:e1:a2:64:b4:d6:ce:11:
                    3c:51:cc:86:81:9d:ce:64:c3:b9:74:09:70:6b:dc:
                    56:97:81:a0:22:23:e3:fc:fa:0f:af:79:2e:5a:a3:
                    a6:d3:0b:41:ef:50:3d:8b:5f:98:0b:4e:22:7e:71:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:74:C8:34:70:DE:03:2C:7F:55:17:38:4E:1F:F8:64:FD:44:E7:2F
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/UnTINHDeAyx_VRc4Th_4ZP1E5y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.135.0-82.140.137.255
                  82.140.142.0/24
                  82.140.144.0/23
                  82.140.147.0/24
                  82.140.149.0/24
                  82.140.151.0/24
                  82.140.154.0/23
                  82.140.157.0/24
                  82.140.162.0-82.140.164.255
                  82.140.167.0-82.140.168.255
                  82.140.172.0/22
                  82.140.181.0/24
                  82.140.190.0/24
                  84.46.165.0-84.46.166.255
                  84.46.174.0/24
                  86.38.2.0/24
                  86.38.44.0/24
                  86.38.46.0/24
                  86.38.91.0/24
                  86.38.157.0/24
                  86.38.206.0/23
                  86.38.224.0/24
                  86.38.231.0/24
                  89.116.0.0/24
                  89.116.18.0/24
                  89.116.40.0/24
                  89.116.55.0/24
                  89.116.57.0/24
                  89.116.79.0/24
                  89.116.94.0/23
                  89.116.98.0/24
                  89.116.142.0/24
                  89.116.145.0/24
                  89.116.194.0-89.116.197.255
                  89.116.199.0/24
                  89.116.201.0/24
                  89.116.204.0/22
                  89.116.216.0/23
                  89.116.219.0/24
                  89.116.222.0/24
                  89.116.251.0/24
                  89.116.254.0/24
                  89.117.4.0/24
                  89.117.34.0/24
                  89.117.131.0/24
                  89.117.189.0/24
                  89.117.191.0/24
                  89.117.230.0/23
                  89.117.244.0/24
                  217.9.251.0-217.9.253.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:37:d8:92:0a:ac:72:65:aa:fb:ce:44:e2:db:92:61:f3:
         f4:a7:1e:22:96:a4:47:fb:b9:9f:13:42:3b:fc:dc:88:48:10:
         11:f5:30:cc:b1:9f:4f:40:6b:d7:31:8e:55:d9:8c:9f:cc:e8:
         8b:95:2c:4c:20:f2:79:1d:8d:6f:00:0b:97:79:5f:c0:30:7f:
         14:4b:47:ad:33:d8:2b:30:f5:d6:fb:64:85:f5:50:17:e8:b8:
         87:59:81:0b:f8:0e:4e:0b:79:d9:30:8b:b9:41:67:ed:2d:fc:
         2b:57:2f:6d:75:5f:3d:82:92:40:79:f3:6f:a6:14:af:19:6a:
         aa:d3:e3:85:26:f6:6f:86:77:fd:28:44:f7:a5:25:5a:8e:19:
         2d:a7:4e:51:2d:7b:a4:32:8f:08:fc:65:eb:38:00:f5:84:18:
         b9:a7:92:0b:33:22:cb:59:4e:1b:de:32:d2:7c:8c:84:bc:70:
         0c:4b:4d:2d:29:f4:0b:f9:e3:5a:01:bc:03:dc:70:4b:9f:49:
         07:8f:94:88:f1:c2:e7:06:1f:74:43:e9:53:e4:41:92:fa:e1:
         74:b8:27:9e:38:d9:55:53:2f:e8:c9:f8:e2:4e:07:dd:c9:be:
         91:63:19:23:71:8c:1b:3a:cd:f9:08:3c:27:ec:c4:49:2e:c4:
         75:ae:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 20:37:16 2024 by rpki-client on console-fra.rpki-client.org