Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v4smmF1DErUX_SRMv-9Jg8wYIUU.roa
File:                     v4smmF1DErUX_SRMv-9Jg8wYIUU.roa (raw, json)
Hash identifier:          6o6RzdymCxTEEDFFBtyvDtfIwWQl3M/dTAAPXvEU/s0=
Subject key identifier:   BF:8B:26:98:5D:43:12:B5:17:FD:24:4C:BF:EF:49:83:CC:18:21:45
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       0196250CD3A47EE0DE1A8A797AAF7163A6C5
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v4smmF1DErUX_SRMv-9Jg8wYIUU.roa
Signing time:             Fri 11 Apr 2025 13:31:59 +0000
ROA not before:           Fri 11 Apr 2025 13:31:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8717
IP address blocks:        5.53.128.0/17 maxlen: 17
                          37.63.0.0/17 maxlen: 17
                          46.232.152.0/21 maxlen: 21
                          46.238.0.0/18 maxlen: 18
                          46.238.14.0/24 maxlen: 24
                          62.204.128.0/19 maxlen: 19
                          62.204.128.0/24 maxlen: 24
                          62.204.130.0/24 maxlen: 24
                          62.204.141.0/24 maxlen: 24
                          62.221.128.0/19 maxlen: 19
                          62.221.128.0/24 maxlen: 24
                          77.70.0.0/17 maxlen: 17
                          77.236.160.0/19 maxlen: 19
                          77.236.178.0/23 maxlen: 23
                          78.83.0.0/16 maxlen: 16
                          78.83.7.0/24 maxlen: 24
                          78.83.144.0/24 maxlen: 24
                          78.83.145.0/24 maxlen: 24
                          78.83.146.0/24 maxlen: 24
                          78.83.147.0/24 maxlen: 24
                          78.83.148.0/24 maxlen: 24
                          78.83.149.0/24 maxlen: 24
                          78.83.150.0/24 maxlen: 24
                          78.83.151.0/24 maxlen: 24
                          78.83.210.0/24 maxlen: 24
                          78.83.225.0/24 maxlen: 24
                          78.83.226.0/23 maxlen: 23
                          78.90.0.0/16 maxlen: 16
                          80.253.48.0/20 maxlen: 20
                          82.103.64.0/18 maxlen: 18
                          82.103.91.0/24 maxlen: 24
                          82.103.103.0/24 maxlen: 24
                          82.103.109.0/24 maxlen: 24
                          82.103.110.0/23 maxlen: 23
                          82.103.126.0/24 maxlen: 24
                          82.103.127.0/24 maxlen: 24
                          82.147.128.0/19 maxlen: 19
                          83.97.24.0/21 maxlen: 21
                          84.242.128.0/18 maxlen: 18
                          84.252.0.0/18 maxlen: 18
                          85.91.128.0/19 maxlen: 19
                          85.118.64.0/19 maxlen: 19
                          85.130.0.0/17 maxlen: 17
                          85.130.95.0/24 maxlen: 24
                          85.130.96.0/23 maxlen: 23
                          85.130.120.0/23 maxlen: 23
                          85.196.128.0/18 maxlen: 18
                          87.97.128.0/17 maxlen: 17
                          87.97.160.0/22 maxlen: 22
                          87.227.128.0/17 maxlen: 17
                          88.203.128.0/17 maxlen: 17
                          88.203.129.0/24 maxlen: 24
                          88.203.132.0/24 maxlen: 24
                          88.203.147.0/24 maxlen: 24
                          88.203.204.0/24 maxlen: 24
                          88.203.237.0/24 maxlen: 24
                          89.186.200.0/21 maxlen: 21
                          89.190.192.0/19 maxlen: 19
                          89.215.0.0/16 maxlen: 16
                          89.215.8.0/22 maxlen: 22
                          89.215.40.0/22 maxlen: 22
                          89.215.48.0/22 maxlen: 22
                          89.253.128.0/18 maxlen: 18
                          92.247.0.0/16 maxlen: 16
                          92.247.168.0/24 maxlen: 24
                          95.111.0.0/17 maxlen: 17
                          95.140.208.0/20 maxlen: 20
                          130.204.0.0/16 maxlen: 16
                          151.251.0.0/16 maxlen: 16
                          151.251.38.0/24 maxlen: 24
                          151.251.140.0/24 maxlen: 24
                          151.251.237.0/24 maxlen: 24
                          176.12.0.0/18 maxlen: 18
                          193.22.103.0/24 maxlen: 24
                          195.24.32.0/19 maxlen: 19
                          195.34.96.0/19 maxlen: 19
                          195.34.101.0/24 maxlen: 24
                          195.34.122.0/24 maxlen: 24
                          195.34.123.0/24 maxlen: 24
                          195.149.248.0/21 maxlen: 21
                          195.177.248.0/23 maxlen: 23
                          212.36.0.0/19 maxlen: 19
                          212.36.25.0/24 maxlen: 24
                          212.50.0.0/19 maxlen: 19
                          212.50.7.0/24 maxlen: 24
                          212.91.160.0/19 maxlen: 19
                          212.91.184.0/24 maxlen: 24
                          212.91.185.0/24 maxlen: 24
                          212.91.186.0/24 maxlen: 24
                          212.91.187.0/24 maxlen: 24
                          212.95.160.0/19 maxlen: 19
                          212.95.161.0/24 maxlen: 24
                          212.104.96.0/19 maxlen: 19
                          213.169.32.0/19 maxlen: 19
                          213.191.160.0/19 maxlen: 19
                          213.222.32.0/19 maxlen: 19
                          213.226.0.0/18 maxlen: 18
                          213.226.5.0/24 maxlen: 24
                          213.226.6.0/24 maxlen: 24
                          213.226.9.0/24 maxlen: 24
                          213.226.31.0/24 maxlen: 24
                          213.226.35.0/24 maxlen: 24
                          213.226.47.0/24 maxlen: 24
                          213.226.48.0/24 maxlen: 24
                          213.240.192.0/18 maxlen: 18
                          217.9.224.0/20 maxlen: 20
                          217.10.240.0/20 maxlen: 20
                          217.18.240.0/20 maxlen: 20
                          217.79.32.0/20 maxlen: 20
                          2a00:4800::/29 maxlen: 29
                          2a01:288::/32 maxlen: 32
                          2a01:288:400b::/48 maxlen: 48
                          2a01:288:400c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sun 13 Apr 2025 11:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:25:0c:d3:a4:7e:e0:de:1a:8a:79:7a:af:71:63:a6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Apr 11 13:31:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf8b26985d4312b517fd244cbfef4983cc182145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:3d:86:bd:bc:f3:02:54:a5:10:25:98:d0:
                    ec:2b:41:3b:ae:08:61:33:0b:58:5f:ea:f8:15:c2:
                    e0:36:e9:c9:2e:81:94:52:fb:d4:54:fb:5b:39:d0:
                    4a:0c:c1:e2:b4:ec:b6:cf:bf:b5:32:f2:cc:e6:84:
                    53:fa:92:99:2e:1f:56:9e:47:98:48:7c:3d:24:2a:
                    f7:38:68:96:45:b8:4f:47:34:99:4c:e1:84:34:71:
                    fa:3b:7a:e7:cc:a9:fd:ef:fa:96:f0:e3:3f:ea:41:
                    02:f5:f4:69:8c:e5:f8:af:9f:f9:84:ff:2c:6e:cb:
                    cd:da:06:c1:2c:7c:f0:b5:1a:73:a9:21:9d:f0:f9:
                    bf:dd:05:2f:68:64:0d:19:5a:c9:88:cf:c7:b6:14:
                    af:20:c4:30:6d:be:02:1b:6e:17:31:fe:cd:4e:52:
                    23:7f:cd:26:5d:68:ee:8c:0a:31:40:f3:fa:47:c8:
                    f6:c0:c5:cc:0d:f5:a2:4a:c6:1d:27:95:28:9d:bd:
                    eb:a6:fb:09:3d:1a:dd:f0:71:58:0f:b1:d6:e7:1b:
                    5a:87:e2:65:5d:51:67:93:5d:ec:75:4e:4d:1b:55:
                    43:86:60:6d:21:12:86:06:55:5b:6e:eb:cb:0e:12:
                    a7:b4:23:4f:27:e8:f2:18:56:8d:a5:6e:62:1c:5b:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:26:98:5D:43:12:B5:17:FD:24:4C:BF:EF:49:83:CC:18:21:45
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v4smmF1DErUX_SRMv-9Jg8wYIUU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.53.128.0/17
                  37.63.0.0/17
                  46.232.152.0/21
                  46.238.0.0/18
                  62.204.128.0/19
                  62.221.128.0/19
                  77.70.0.0/17
                  77.236.160.0/19
                  78.83.0.0/16
                  78.90.0.0/16
                  80.253.48.0/20
                  82.103.64.0/18
                  82.147.128.0/19
                  83.97.24.0/21
                  84.242.128.0/18
                  84.252.0.0/18
                  85.91.128.0/19
                  85.118.64.0/19
                  85.130.0.0/17
                  85.196.128.0/18
                  87.97.128.0/17
                  87.227.128.0/17
                  88.203.128.0/17
                  89.186.200.0/21
                  89.190.192.0/19
                  89.215.0.0/16
                  89.253.128.0/18
                  92.247.0.0/16
                  95.111.0.0/17
                  95.140.208.0/20
                  130.204.0.0/16
                  151.251.0.0/16
                  176.12.0.0/18
                  193.22.103.0/24
                  195.24.32.0/19
                  195.34.96.0/19
                  195.149.248.0/21
                  195.177.248.0/23
                  212.36.0.0/19
                  212.50.0.0/19
                  212.91.160.0/19
                  212.95.160.0/19
                  212.104.96.0/19
                  213.169.32.0/19
                  213.191.160.0/19
                  213.222.32.0/19
                  213.226.0.0/18
                  213.240.192.0/18
                  217.9.224.0/20
                  217.10.240.0/20
                  217.18.240.0/20
                  217.79.32.0/20
                IPv6:
                  2a00:4800::/29
                  2a01:288::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:2a:36:71:6e:ff:3f:e3:c4:2f:db:5c:06:8b:4a:94:04:
         35:b3:e7:3b:da:41:83:c5:36:85:04:be:7a:98:0f:98:28:2f:
         47:1e:a2:fe:82:22:eb:a0:74:2a:37:90:32:56:94:d7:aa:37:
         5e:74:a0:01:77:ec:0e:4d:82:0b:2d:28:2b:36:ab:58:89:85:
         cb:ce:45:b8:53:1d:b0:87:11:b2:01:56:9c:4d:35:64:b6:c1:
         a7:4b:33:66:79:56:08:28:53:eb:95:ce:f0:f0:80:78:da:ea:
         cb:ce:87:92:05:ef:c1:d6:42:76:3e:e7:a7:dd:9d:6f:57:91:
         44:c7:5e:04:81:20:b5:04:a7:9e:cd:8d:03:70:15:f9:8b:f6:
         cc:87:7a:5a:03:a5:e3:55:27:5e:e8:ea:92:86:be:3b:b1:63:
         48:d5:ce:7c:76:2e:ea:2f:a9:1e:58:7d:34:6b:5d:b4:cf:70:
         dc:d5:1a:94:cf:75:73:7d:0d:6b:20:d0:a8:cb:ad:92:93:87:
         87:b3:b6:74:90:d4:29:5a:6e:aa:ac:a7:74:18:2e:89:d3:13:
         70:f1:58:d1:f6:d0:f4:86:49:4c:b5:2d:5b:88:34:ef:8c:80:
         5b:3b:45:57:aa:d4:11:59:a0:7c:da:de:88:f0:7b:76:1e:f1:
         9c:80:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:33:19 2025 by rpki-client