Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/NvN6g-foHikRvSWleiWz1t_yV5c.roa
File:                     NvN6g-foHikRvSWleiWz1t_yV5c.roa (raw, json)
Hash identifier:          bF0Jh6WZmVMOKBGr1KAtpIVy4VZJBz4LADtKpBQguW8=
Subject key identifier:   36:F3:7A:83:E7:E8:1E:29:11:BD:25:A5:7A:25:B3:D6:DF:F2:57:97
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       018AB76189034D6950B06BC165C20C68837D
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/NvN6g-foHikRvSWleiWz1t_yV5c.roa
Signing time:             Thu 21 Sep 2023 10:55:37 +0000
ROA not before:           Thu 21 Sep 2023 10:55:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        37.19.195.0/24 maxlen: 24
                          37.19.198.0/23 maxlen: 23
                          37.19.196.0/23 maxlen: 23
                          45.134.142.0/24 maxlen: 24
                          45.134.140.0/24 maxlen: 24
                          37.19.201.0/24 maxlen: 24
                          37.19.205.0/24 maxlen: 24
                          37.19.200.0/24 maxlen: 24
                          37.19.211.0/24 maxlen: 24
                          37.19.209.0/24 maxlen: 24
                          37.19.210.0/24 maxlen: 24
                          37.19.212.0/23 maxlen: 23
                          37.19.217.0/24 maxlen: 24
                          37.19.221.0/24 maxlen: 24
                          37.19.223.0/24 maxlen: 24
                          37.19.220.0/24 maxlen: 24
                          156.146.37.0/24 maxlen: 24
                          156.146.39.0/24 maxlen: 24
                          156.146.41.0/24 maxlen: 24
                          156.146.45.0/24 maxlen: 24
                          156.146.51.0/24 maxlen: 24
                          156.146.47.0/24 maxlen: 24
                          156.146.46.0/23 maxlen: 23
                          156.146.46.0/24 maxlen: 24
                          156.146.50.0/24 maxlen: 24
                          156.146.48.0/24 maxlen: 24
                          156.146.57.0/24 maxlen: 24
                          156.146.55.0/24 maxlen: 24
                          156.146.54.0/24 maxlen: 24
                          156.146.63.0/24 maxlen: 24
                          156.146.60.0/24 maxlen: 24
                          156.146.62.0/24 maxlen: 24
                          84.17.36.0/24 maxlen: 24
                          138.199.7.0/24 maxlen: 24
                          138.199.10.0/23 maxlen: 23
                          138.199.6.0/24 maxlen: 24
                          138.199.13.0/24 maxlen: 24
                          84.17.43.0/24 maxlen: 24
                          138.199.16.0/24 maxlen: 24
                          84.17.48.0/24 maxlen: 24
                          84.17.48.0/23 maxlen: 23
                          138.199.21.0/24 maxlen: 24
                          138.199.19.0/24 maxlen: 24
                          138.199.18.0/23 maxlen: 23
                          84.17.51.0/24 maxlen: 24
                          84.17.49.0/24 maxlen: 24
                          138.199.18.0/24 maxlen: 24
                          84.17.52.0/24 maxlen: 24
                          138.199.31.0/24 maxlen: 24
                          138.199.28.0/23 maxlen: 23
                          138.199.30.0/24 maxlen: 24
                          138.199.35.0/24 maxlen: 24
                          138.199.33.0/24 maxlen: 24
                          138.199.34.0/23 maxlen: 23
                          138.199.38.0/24 maxlen: 24
                          138.199.34.0/24 maxlen: 24
                          138.199.39.0/24 maxlen: 24
                          138.199.43.0/24 maxlen: 24
                          138.199.42.0/24 maxlen: 24
                          138.199.49.0/24 maxlen: 24
                          138.199.47.0/24 maxlen: 24
                          138.199.46.0/23 maxlen: 23
                          138.199.50.0/24 maxlen: 24
                          138.199.48.0/24 maxlen: 24
                          138.199.55.0/24 maxlen: 24
                          138.199.52.0/24 maxlen: 24
                          138.199.58.0/24 maxlen: 24
                          138.199.56.0/24 maxlen: 24
                          138.199.54.0/24 maxlen: 24
                          138.199.63.0/24 maxlen: 24
                          138.199.61.0/24 maxlen: 24
                          138.199.59.0/24 maxlen: 24
                          138.199.62.0/24 maxlen: 24
                          138.199.60.0/23 maxlen: 23
                          138.199.60.0/24 maxlen: 24
                          169.150.248.0/24 maxlen: 24
                          169.150.254.0/24 maxlen: 24
                          169.150.198.0/24 maxlen: 24
                          169.150.196.0/24 maxlen: 24
                          169.150.199.0/24 maxlen: 24
                          169.150.197.0/24 maxlen: 24
                          169.150.205.0/24 maxlen: 24
                          169.150.203.0/24 maxlen: 24
                          169.150.201.0/24 maxlen: 24
                          169.150.204.0/24 maxlen: 24
                          169.150.209.0/24 maxlen: 24
                          169.150.210.0/23 maxlen: 23
                          169.150.212.0/24 maxlen: 24
                          169.150.208.0/24 maxlen: 24
                          169.150.218.0/24 maxlen: 24
                          169.150.226.0/23 maxlen: 23
                          169.150.233.0/24 maxlen: 24
                          169.150.231.0/24 maxlen: 24
                          169.150.232.0/24 maxlen: 24
                          143.244.52.0/22 maxlen: 22
                          143.244.54.0/23 maxlen: 23
                          143.244.52.0/23 maxlen: 23
                          45.136.154.0/24 maxlen: 24
                          45.136.155.0/24 maxlen: 24
                          212.102.37.0/24 maxlen: 24
                          212.102.35.0/24 maxlen: 24
                          212.102.39.0/24 maxlen: 24
                          212.102.51.0/24 maxlen: 24
                          212.102.49.0/24 maxlen: 24
                          212.102.47.0/24 maxlen: 24
                          212.102.57.0/24 maxlen: 24
                          212.102.53.0/24 maxlen: 24
                          185.156.44.0/24 maxlen: 24
                          185.156.46.0/24 maxlen: 24
                          143.244.34.0/24 maxlen: 24
                          143.244.41.0/24 maxlen: 24
                          143.244.44.0/24 maxlen: 24
                          143.244.47.0/24 maxlen: 24
                          143.244.46.0/24 maxlen: 24
                          87.249.132.0/24 maxlen: 24
                          87.249.138.0/24 maxlen: 24
                          87.249.134.0/24 maxlen: 24
                          87.249.139.0/24 maxlen: 24
                          87.249.135.0/24 maxlen: 24
                          87.249.133.0/24 maxlen: 24
                          45.134.212.0/24 maxlen: 24
                          45.134.213.0/24 maxlen: 24
                          45.134.214.0/24 maxlen: 24
                          178.249.209.0/24 maxlen: 24
                          178.249.211.0/24 maxlen: 24
                          178.249.212.0/24 maxlen: 24
                          178.249.214.0/24 maxlen: 24
                          2a02:6ea0:1a00::/40 maxlen: 40
                          2a02:6ea0:3600::/40 maxlen: 40
                          2a02:6ea0:2e00::/40 maxlen: 40
                          2a02:6ea0:2600::/40 maxlen: 40
                          2a02:6ea0:3700::/40 maxlen: 40
                          2a02:6ea0:4b00::/40 maxlen: 40
                          2a02:6ea0:1500::/40 maxlen: 40
                          2a02:6ea0:2c00::/40 maxlen: 40
                          2a02:6ea0:1b00::/40 maxlen: 40
                          2a02:6ea0:1800::/40 maxlen: 40
                          2a02:6ea0:2900::/40 maxlen: 40
                          2a02:6ea0:2800::/40 maxlen: 40
                          2a02:6ea0:3f00::/40 maxlen: 40
                          2a02:6ea0:1700::/40 maxlen: 40
                          2a02:6ea0:2b00::/40 maxlen: 40
                          2a02:6ea0:2400::/40 maxlen: 40
                          2a02:6ea0:1000::/40 maxlen: 40
                          2a02:6ea0:3200::/40 maxlen: 40
                          2a02:6ea0:2100::/40 maxlen: 40
                          2a02:6ea0:1e00::/40 maxlen: 40
                          2a02:6ea0:3800::/40 maxlen: 40
                          2a02:6ea0:1300::/40 maxlen: 40
                          2a02:6ea0:4200::/40 maxlen: 40
                          2a02:6ea0:3100::/40 maxlen: 40
                          2a02:6ea0:1200::/40 maxlen: 40
                          2a02:6ea0:1c00::/40 maxlen: 40
                          2a02:6ea0:2200::/40 maxlen: 40
                          2a02:6ea0:3000::/40 maxlen: 40
                          2a02:6ea0:1100::/40 maxlen: 40
                          2a02:6ea0:1400::/40 maxlen: 40
                          2a02:6ea0:2500::/40 maxlen: 40
                          2a02:6ea0:2a00::/40 maxlen: 40
                          2a02:6ea0:1900::/40 maxlen: 40
                          2a02:6ea0:2d00::/40 maxlen: 40
                          2a02:6ea0:1600::/40 maxlen: 40
                          2a02:6ea0:3b00::/40 maxlen: 40
                          2a02:6ea0:2700::/40 maxlen: 40
                          2a02:6ea0:2000::/40 maxlen: 40
                          2a02:6ea0:2300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 05 Oct 2023 11:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b7:61:89:03:4d:69:50:b0:6b:c1:65:c2:0c:68:83:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Sep 21 10:55:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36f37a83e7e81e2911bd25a57a25b3d6dff25797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:98:d0:96:2a:37:ca:da:85:b7:5e:60:53:
                    33:8f:e7:f8:e9:8c:86:f0:70:79:c7:b1:93:6b:66:
                    ca:2c:7b:20:2b:8d:db:81:54:73:49:e3:f7:f3:b0:
                    79:39:f1:52:72:61:70:1c:42:3e:3e:c6:f3:1e:30:
                    f8:1b:03:f5:12:35:5b:c5:63:77:c4:9f:7d:4f:ad:
                    50:70:31:a6:0e:f8:51:87:20:4d:60:6f:f3:11:3e:
                    f0:d7:e1:cb:9e:95:d5:75:e8:7a:ac:ef:4f:11:98:
                    0f:1c:4c:7f:bf:9f:67:85:c3:29:d9:ba:c1:13:7d:
                    46:e1:22:ce:57:09:be:71:91:c6:34:4f:ed:fa:03:
                    4f:70:94:55:44:51:53:de:40:1a:3a:82:fe:82:81:
                    4a:bb:bf:86:92:38:f8:0c:a6:46:b7:cc:79:ef:e9:
                    49:8f:b5:a1:73:d5:82:10:94:dc:04:e4:87:23:11:
                    3e:62:97:42:fc:eb:f1:cc:16:fe:d4:c2:aa:20:69:
                    a5:bd:66:51:16:9c:6d:dc:d6:7e:f2:9c:1e:93:ba:
                    d3:d6:15:c8:04:c4:ba:66:f8:e6:71:08:09:31:09:
                    fd:6d:ea:05:55:10:c9:c4:b8:46:a1:47:03:ca:e6:
                    94:9b:70:f0:23:2b:66:14:99:1a:60:71:58:3e:a1:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:7A:83:E7:E8:1E:29:11:BD:25:A5:7A:25:B3:D6:DF:F2:57:97
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/NvN6g-foHikRvSWleiWz1t_yV5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.19.195.0-37.19.201.255
                  37.19.205.0/24
                  37.19.209.0-37.19.213.255
                  37.19.217.0/24
                  37.19.220.0/23
                  37.19.223.0/24
                  45.134.140.0/24
                  45.134.142.0/24
                  45.134.212.0-45.134.214.255
                  45.136.154.0/23
                  84.17.36.0/24
                  84.17.43.0/24
                  84.17.48.0/23
                  84.17.51.0-84.17.52.255
                  87.249.132.0/22
                  87.249.138.0/23
                  138.199.6.0/23
                  138.199.10.0/23
                  138.199.13.0/24
                  138.199.16.0/24
                  138.199.18.0/23
                  138.199.21.0/24
                  138.199.28.0/22
                  138.199.33.0-138.199.35.255
                  138.199.38.0/23
                  138.199.42.0/23
                  138.199.46.0-138.199.50.255
                  138.199.52.0/24
                  138.199.54.0-138.199.56.255
                  138.199.58.0-138.199.63.255
                  143.244.34.0/24
                  143.244.41.0/24
                  143.244.44.0/24
                  143.244.46.0/23
                  143.244.52.0/22
                  156.146.37.0/24
                  156.146.39.0/24
                  156.146.41.0/24
                  156.146.45.0-156.146.48.255
                  156.146.50.0/23
                  156.146.54.0/23
                  156.146.57.0/24
                  156.146.60.0/24
                  156.146.62.0/23
                  169.150.196.0/22
                  169.150.201.0/24
                  169.150.203.0-169.150.205.255
                  169.150.208.0-169.150.212.255
                  169.150.218.0/24
                  169.150.226.0/23
                  169.150.231.0-169.150.233.255
                  169.150.248.0/24
                  169.150.254.0/24
                  178.249.209.0/24
                  178.249.211.0-178.249.212.255
                  178.249.214.0/24
                  185.156.44.0/24
                  185.156.46.0/24
                  212.102.35.0/24
                  212.102.37.0/24
                  212.102.39.0/24
                  212.102.47.0/24
                  212.102.49.0/24
                  212.102.51.0/24
                  212.102.53.0/24
                  212.102.57.0/24
                IPv6:
                  2a02:6ea0:1000::-2a02:6ea0:1cff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:1e00::/40
                  2a02:6ea0:2000::-2a02:6ea0:2eff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:3000::-2a02:6ea0:32ff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:3600::-2a02:6ea0:38ff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ea0:3b00::/40
                  2a02:6ea0:3f00::/40
                  2a02:6ea0:4200::/40
                  2a02:6ea0:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:8b:63:3a:f7:6c:82:9f:3a:67:f9:3c:6e:65:e1:d8:86:
         51:24:5b:ed:f0:a2:59:ef:44:05:df:6d:3c:ce:f9:2b:b0:3d:
         cc:71:06:82:42:9d:a2:54:c2:ee:cd:4a:74:4c:0d:b3:4c:28:
         26:c1:07:cd:07:c2:10:d1:11:e3:12:93:1a:1c:4f:ca:3e:61:
         6f:90:69:6c:8b:f2:01:6d:18:fa:d1:90:3e:97:26:df:66:43:
         47:27:15:81:04:de:2f:8d:b3:8d:4e:87:6e:d9:85:df:33:77:
         a6:5c:b9:8e:46:13:3d:0e:a7:d5:b8:a5:c7:27:ec:7f:92:4e:
         34:34:c8:b3:26:f8:7a:aa:1a:ae:9b:77:43:77:b6:ff:cb:06:
         0a:d4:9f:30:77:fb:66:1f:0b:fb:f3:31:f7:aa:82:83:eb:cc:
         0e:70:9a:de:cf:96:c3:19:dd:7b:d9:89:df:36:03:26:bd:6a:
         f8:c4:d0:d3:79:96:1e:df:fd:fd:25:e0:8c:13:a5:12:23:40:
         91:0f:c8:bf:c3:17:9d:c0:b9:c8:10:58:6a:75:40:c0:8a:89:
         e7:41:71:71:24:74:61:9d:0f:38:89:86:45:a5:16:cf:d5:a0:
         47:ee:8f:be:2b:68:71:7d:6e:a1:3d:99:64:da:5e:04:d9:e7:
         1c:53:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:05 2024 by rpki-client on console-ams.rpki-client.org