Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UZFd-ZaFUPNqLbnqRpnZETATMkY.roa
File:                     UZFd-ZaFUPNqLbnqRpnZETATMkY.roa (raw, json)
Hash identifier:          IrZEOjPQlo/vOEJRHtvyMOgmAxM+c6WD5ITmYuzy8Es=
Subject key identifier:   51:91:5D:F9:96:85:50:F3:6A:2D:B9:EA:46:99:D9:11:30:13:32:46
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       018FE817D865D4957101D871E80676DA5851
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UZFd-ZaFUPNqLbnqRpnZETATMkY.roa
Signing time:             Wed 05 Jun 2024 11:10:27 +0000
ROA not before:           Wed 05 Jun 2024 11:10:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8492
IP address blocks:        37.77.129.0/24 maxlen: 24
                          37.77.130.0/23 maxlen: 23
                          37.77.132.0/24 maxlen: 24
                          37.77.133.0/24 maxlen: 24
                          37.77.134.0/23 maxlen: 23
                          37.221.200.0/23 maxlen: 23
                          37.221.203.0/24 maxlen: 24
                          37.221.204.0/23 maxlen: 23
                          37.221.206.0/24 maxlen: 24
                          46.34.134.0/24 maxlen: 24
                          46.34.136.0/21 maxlen: 21
                          46.34.148.0/22 maxlen: 22
                          46.229.208.0/22 maxlen: 22
                          46.229.208.0/23 maxlen: 23
                          46.229.210.0/23 maxlen: 23
                          46.229.210.0/24 maxlen: 24
                          46.229.211.0/24 maxlen: 24
                          46.231.208.0/24 maxlen: 24
                          46.231.209.0/24 maxlen: 24
                          46.231.210.0/23 maxlen: 23
                          46.231.212.0/23 maxlen: 23
                          46.231.214.0/23 maxlen: 23
                          46.231.214.0/24 maxlen: 24
                          46.231.215.0/24 maxlen: 24
                          62.32.64.0/24 maxlen: 24
                          62.32.66.0/23 maxlen: 23
                          62.32.68.0/23 maxlen: 23
                          62.32.70.0/24 maxlen: 24
                          62.32.73.0/24 maxlen: 24
                          62.32.74.0/24 maxlen: 24
                          62.32.75.0/24 maxlen: 24
                          62.32.76.0/24 maxlen: 24
                          62.32.83.0/24 maxlen: 24
                          62.32.88.0/24 maxlen: 24
                          62.32.89.0/24 maxlen: 24
                          62.32.90.0/24 maxlen: 24
                          62.32.91.0/24 maxlen: 24
                          62.32.94.0/24 maxlen: 24
                          79.134.192.0/24 maxlen: 24
                          79.134.193.0/24 maxlen: 24
                          79.134.194.0/23 maxlen: 23
                          79.134.196.0/23 maxlen: 23
                          79.134.198.0/23 maxlen: 23
                          79.134.200.0/21 maxlen: 21
                          79.134.208.0/22 maxlen: 22
                          79.134.212.0/24 maxlen: 24
                          79.134.213.0/24 maxlen: 24
                          79.134.214.0/23 maxlen: 23
                          79.134.216.0/22 maxlen: 22
                          79.134.220.0/23 maxlen: 23
                          79.134.222.0/23 maxlen: 23
                          79.142.80.0/21 maxlen: 21
                          79.142.88.0/22 maxlen: 22
                          79.142.92.0/24 maxlen: 24
                          80.79.64.0/21 maxlen: 21
                          80.79.72.0/22 maxlen: 22
                          80.79.76.0/24 maxlen: 24
                          80.79.79.0/24 maxlen: 24
                          80.250.80.0/24 maxlen: 24
                          80.250.83.0/24 maxlen: 24
                          80.250.87.0/24 maxlen: 24
                          80.250.88.0/21 maxlen: 21
                          85.114.0.0/19 maxlen: 19
                          85.114.0.0/22 maxlen: 22
                          85.114.4.0/22 maxlen: 22
                          85.114.8.0/21 maxlen: 21
                          85.114.16.0/20 maxlen: 20
                          87.236.80.0/22 maxlen: 22
                          87.236.80.0/23 maxlen: 23
                          87.236.80.0/24 maxlen: 24
                          87.236.81.0/24 maxlen: 24
                          87.236.82.0/23 maxlen: 23
                          87.236.82.0/24 maxlen: 24
                          87.236.83.0/24 maxlen: 24
                          87.236.84.0/23 maxlen: 23
                          87.236.84.0/24 maxlen: 24
                          87.236.85.0/24 maxlen: 24
                          87.249.55.0/24 maxlen: 24
                          89.104.97.0/24 maxlen: 24
                          89.104.115.0/24 maxlen: 24
                          89.104.118.0/24 maxlen: 24
                          89.223.1.0/24 maxlen: 24
                          89.223.12.0/24 maxlen: 24
                          92.255.40.0/24 maxlen: 24
                          92.255.41.0/24 maxlen: 24
                          92.255.44.0/24 maxlen: 24
                          92.255.45.0/24 maxlen: 24
                          92.255.46.0/24 maxlen: 24
                          92.255.47.0/24 maxlen: 24
                          92.255.51.0/24 maxlen: 24
                          93.191.58.0/24 maxlen: 24
                          93.191.60.0/24 maxlen: 24
                          93.191.63.0/24 maxlen: 24
                          95.161.144.0/21 maxlen: 21
                          95.161.152.0/22 maxlen: 24
                          95.161.156.0/22 maxlen: 22
                          95.161.160.0/20 maxlen: 20
                          95.161.164.0/22 maxlen: 22
                          95.161.176.0/22 maxlen: 22
                          95.161.180.0/22 maxlen: 22
                          95.161.188.0/22 maxlen: 22
                          95.161.192.0/22 maxlen: 22
                          95.161.200.0/21 maxlen: 21
                          95.161.208.0/22 maxlen: 22
                          95.161.212.0/24 maxlen: 24
                          95.161.213.0/24 maxlen: 24
                          95.161.214.0/23 maxlen: 23
                          95.161.216.0/23 maxlen: 23
                          95.161.218.0/23 maxlen: 23
                          95.161.220.0/24 maxlen: 24
                          95.161.221.0/24 maxlen: 24
                          95.161.222.0/23 maxlen: 23
                          95.161.228.0/22 maxlen: 22
                          95.161.232.0/22 maxlen: 22
                          95.161.236.0/22 maxlen: 22
                          145.255.232.0/24 maxlen: 24
                          145.255.233.0/24 maxlen: 24
                          145.255.234.0/23 maxlen: 23
                          145.255.236.0/22 maxlen: 22
                          149.126.16.0/22 maxlen: 22
                          149.126.20.0/23 maxlen: 23
                          149.126.22.0/24 maxlen: 24
                          149.126.23.0/24 maxlen: 24
                          178.16.144.0/22 maxlen: 22
                          178.16.148.0/23 maxlen: 23
                          178.16.150.0/24 maxlen: 24
                          178.16.151.0/24 maxlen: 24
                          178.16.152.0/22 maxlen: 22
                          178.16.156.0/24 maxlen: 24
                          178.16.158.0/23 maxlen: 23
                          185.7.232.0/22 maxlen: 22
                          185.17.84.0/23 maxlen: 23
                          185.81.220.0/22 maxlen: 22
                          185.102.8.0/22 maxlen: 22
                          185.102.10.0/24 maxlen: 24
                          185.119.0.0/22 maxlen: 22
                          185.171.192.0/22 maxlen: 22
                          185.241.176.0/22 maxlen: 22
                          217.79.0.0/22 maxlen: 22
                          217.79.4.0/23 maxlen: 23
                          217.79.6.0/23 maxlen: 23
                          217.79.8.0/24 maxlen: 24
                          217.79.9.0/24 maxlen: 24
                          217.79.10.0/23 maxlen: 23
                          217.79.12.0/23 maxlen: 23
                          217.79.14.0/24 maxlen: 24
                          217.79.15.0/24 maxlen: 24
                          2a01:590::/32 maxlen: 32
                          2a05:a400::/29 maxlen: 29
                          2a05:a406::/32 maxlen: 32
                          2a05:a407::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 13:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e8:17:d8:65:d4:95:71:01:d8:71:e8:06:76:da:58:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jun  5 11:10:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=51915df9968550f36a2db9ea4699d91130133246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:ad:d4:5d:34:0f:d0:40:d3:13:f4:fd:c2:
                    2c:dc:88:aa:30:f4:7a:65:51:b5:e9:ba:2e:fd:3b:
                    cf:7e:64:54:1b:00:40:1e:a6:f2:b1:af:9b:1a:8b:
                    ac:f6:54:c8:65:82:81:51:f1:9e:06:17:29:72:fe:
                    98:78:d4:a4:77:aa:7b:d0:c4:ab:8f:58:44:95:cd:
                    15:71:7f:60:e6:b0:c9:69:3f:94:1c:38:d4:7e:e6:
                    5e:4e:7b:c9:f0:4c:8d:d3:09:05:10:aa:62:cd:3d:
                    4c:ed:e7:02:83:3c:94:d4:46:a9:f0:d0:7a:a8:67:
                    f5:24:53:b7:58:51:28:a7:4d:81:82:99:d3:ec:47:
                    fc:db:f7:b0:19:4f:1f:21:5e:99:94:52:c0:5a:60:
                    7f:7a:e2:bb:b9:8f:b5:96:a5:d2:62:40:df:ea:19:
                    f1:c3:92:0e:ec:d3:92:a6:53:71:6d:70:51:f3:63:
                    08:9d:9f:9e:3e:0f:15:37:40:e1:5e:af:18:1c:c1:
                    ce:a0:01:c3:bd:f0:d0:dc:50:7e:06:66:c5:72:da:
                    d1:44:c9:0c:9d:21:63:f3:5d:33:a9:0a:0b:95:55:
                    6e:c1:68:b7:23:ea:23:dc:20:aa:12:0b:2f:7f:d3:
                    d0:51:9f:12:67:52:f3:83:f5:78:47:36:9b:30:e7:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:5D:F9:96:85:50:F3:6A:2D:B9:EA:46:99:D9:11:30:13:32:46
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UZFd-ZaFUPNqLbnqRpnZETATMkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.129.0-37.77.135.255
                  37.221.200.0/23
                  37.221.203.0-37.221.206.255
                  46.34.134.0/24
                  46.34.136.0/21
                  46.34.148.0/22
                  46.229.208.0/22
                  46.231.208.0/21
                  62.32.64.0/24
                  62.32.66.0-62.32.70.255
                  62.32.73.0-62.32.76.255
                  62.32.83.0/24
                  62.32.88.0/22
                  62.32.94.0/24
                  79.134.192.0/19
                  79.142.80.0-79.142.92.255
                  80.79.64.0-80.79.76.255
                  80.79.79.0/24
                  80.250.80.0/24
                  80.250.83.0/24
                  80.250.87.0-80.250.95.255
                  85.114.0.0/19
                  87.236.80.0-87.236.85.255
                  87.249.55.0/24
                  89.104.97.0/24
                  89.104.115.0/24
                  89.104.118.0/24
                  89.223.1.0/24
                  89.223.12.0/24
                  92.255.40.0/23
                  92.255.44.0/22
                  92.255.51.0/24
                  93.191.58.0/24
                  93.191.60.0/24
                  93.191.63.0/24
                  95.161.144.0-95.161.183.255
                  95.161.188.0-95.161.195.255
                  95.161.200.0-95.161.223.255
                  95.161.228.0-95.161.239.255
                  145.255.232.0/21
                  149.126.16.0/21
                  178.16.144.0-178.16.156.255
                  178.16.158.0/23
                  185.7.232.0/22
                  185.17.84.0/23
                  185.81.220.0/22
                  185.102.8.0/22
                  185.119.0.0/22
                  185.171.192.0/22
                  185.241.176.0/22
                  217.79.0.0/20
                IPv6:
                  2a01:590::/32
                  2a05:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:eb:ef:96:97:fa:4a:35:83:c9:47:6e:32:22:21:99:e0:
         22:dc:ba:ea:95:57:cf:03:a1:75:ac:01:d6:19:36:7f:f6:ff:
         36:be:e8:78:77:34:7a:8e:d1:3c:fa:6b:dc:5b:28:31:6a:e8:
         4b:e7:b3:49:a6:d4:b4:2b:2e:e2:e5:25:4c:b7:95:b6:f3:e3:
         10:c1:2f:fd:09:70:e2:e1:07:68:7e:f8:db:1c:5d:f8:6b:ea:
         db:a5:75:38:ba:b4:95:5c:99:3a:3b:20:d3:97:46:19:14:9b:
         9d:ac:7d:c3:9e:b8:12:62:a5:d3:e7:1b:7c:be:05:7e:02:dd:
         c2:55:18:8b:f3:7d:3d:45:3e:fa:3c:8f:f6:0d:19:3c:38:d3:
         92:b2:7f:49:c5:cd:69:1c:14:ba:51:89:ad:05:38:75:ea:b3:
         de:0d:dc:1c:06:37:93:f2:a7:d7:b6:d7:33:2e:f3:bb:b4:86:
         c0:39:d0:e4:bb:d8:41:71:e8:f6:e6:0f:d9:6c:0a:ad:41:5e:
         bb:77:6a:ea:08:de:68:0e:a8:f1:ee:f2:eb:f0:03:e4:bb:77:
         c1:ac:a3:db:31:99:b8:ae:bc:4d:4f:c7:13:fe:35:84:49:f7:
         8c:2f:34:9b:70:b5:dc:60:c9:99:f6:11:dc:29:48:ab:09:23:
         7a:63:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org