Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa
File:                     QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa (raw, json)
Hash identifier:          BV90qyTZ2mSXTk5cRtdnXpR9YZCcRQTsmHQnNud7vUk=
Subject key identifier:   40:39:10:63:F5:35:2D:6F:59:15:F2:22:76:4E:A6:2D:82:93:DD:43
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       018F50482698FC9F2752274EF6E8A8EB4B74
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa
Signing time:             Mon 06 May 2024 23:40:56 +0000
ROA not before:           Mon 06 May 2024 23:40:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25400
IP address blocks:        46.15.0.0/16 maxlen: 16
                          46.212.0.0/17 maxlen: 17
                          46.212.0.0/20 maxlen: 20
                          46.212.16.0/20 maxlen: 20
                          46.212.48.0/20 maxlen: 20
                          46.212.64.0/21 maxlen: 21
                          46.212.72.0/21 maxlen: 21
                          46.212.80.0/21 maxlen: 21
                          46.212.88.0/21 maxlen: 21
                          46.212.128.0/17 maxlen: 17
                          46.249.224.0/19 maxlen: 19
                          46.249.224.0/22 maxlen: 22
                          46.249.230.0/23 maxlen: 23
                          46.249.233.0/24 maxlen: 24
                          46.249.234.0/23 maxlen: 23
                          46.249.236.0/23 maxlen: 23
                          46.249.238.0/24 maxlen: 24
                          46.249.252.0/22 maxlen: 22
                          62.73.252.0/24 maxlen: 24
                          62.97.160.0/19 maxlen: 19
                          62.97.168.0/22 maxlen: 22
                          62.97.172.0/23 maxlen: 23
                          62.141.128.0/19 maxlen: 19
                          78.156.0.0/19 maxlen: 24
                          80.232.124.0/24 maxlen: 24
                          80.239.0.0/17 maxlen: 17
                          82.194.192.0/19 maxlen: 19
                          82.194.198.0/24 maxlen: 24
                          82.194.204.0/22 maxlen: 22
                          82.194.204.0/23 maxlen: 23
                          82.194.206.0/23 maxlen: 23
                          82.194.209.0/24 maxlen: 24
                          82.194.210.0/24 maxlen: 24
                          82.194.216.0/24 maxlen: 24
                          82.194.218.0/23 maxlen: 23
                          84.208.0.0/13 maxlen: 17
                          84.208.20.0/24 maxlen: 24
                          84.208.21.0/24 maxlen: 24
                          84.208.22.0/23 maxlen: 23
                          84.208.192.0/20 maxlen: 20
                          84.208.208.0/20 maxlen: 20
                          84.208.224.0/20 maxlen: 20
                          84.208.240.0/20 maxlen: 20
                          84.209.80.0/20 maxlen: 20
                          84.209.210.0/24 maxlen: 24
                          84.209.216.0/24 maxlen: 24
                          84.209.218.0/24 maxlen: 24
                          84.209.221.0/24 maxlen: 24
                          84.209.234.0/24 maxlen: 24
                          84.209.240.0/20 maxlen: 20
                          84.210.112.0/20 maxlen: 20
                          84.210.128.0/20 maxlen: 20
                          84.210.160.0/23 maxlen: 23
                          84.210.178.0/23 maxlen: 23
                          84.210.186.0/23 maxlen: 23
                          84.210.208.0/20 maxlen: 20
                          84.210.251.0/24 maxlen: 24
                          84.211.2.0/23 maxlen: 23
                          84.211.36.0/23 maxlen: 23
                          84.211.42.0/24 maxlen: 24
                          84.211.48.0/20 maxlen: 20
                          84.212.0.0/20 maxlen: 20
                          84.212.16.0/20 maxlen: 20
                          84.212.32.0/20 maxlen: 20
                          84.212.240.0/20 maxlen: 20
                          84.213.16.0/20 maxlen: 20
                          84.213.128.0/20 maxlen: 20
                          84.213.135.0/24 maxlen: 24
                          84.213.144.0/20 maxlen: 20
                          84.213.152.0/22 maxlen: 22
                          84.213.156.0/22 maxlen: 22
                          84.213.162.0/23 maxlen: 23
                          84.214.0.0/20 maxlen: 20
                          84.214.16.0/20 maxlen: 20
                          84.214.32.0/20 maxlen: 20
                          84.214.46.0/23 maxlen: 23
                          84.214.64.0/23 maxlen: 23
                          84.214.68.0/23 maxlen: 23
                          84.214.114.0/24 maxlen: 24
                          84.214.138.0/23 maxlen: 23
                          84.214.168.0/24 maxlen: 24
                          84.214.172.0/22 maxlen: 22
                          84.214.192.0/24 maxlen: 24
                          84.214.193.0/24 maxlen: 24
                          84.214.229.0/24 maxlen: 24
                          84.214.236.0/22 maxlen: 22
                          84.214.242.0/23 maxlen: 23
                          84.215.16.0/20 maxlen: 20
                          84.215.32.0/20 maxlen: 20
                          84.215.96.0/20 maxlen: 20
                          84.215.248.0/21 maxlen: 21
                          89.254.64.0/18 maxlen: 18
                          109.108.192.0/19 maxlen: 19
                          109.108.192.0/24 maxlen: 24
                          109.108.194.0/23 maxlen: 23
                          109.108.200.0/21 maxlen: 21
                          109.108.200.0/22 maxlen: 22
                          109.108.213.0/24 maxlen: 24
                          109.108.216.0/21 maxlen: 21
                          158.58.152.0/21 maxlen: 21
                          158.58.152.0/23 maxlen: 23
                          176.11.0.0/16 maxlen: 16
                          176.74.208.0/21 maxlen: 21
                          178.17.144.0/20 maxlen: 20
                          178.232.0.0/16 maxlen: 16
                          185.46.224.0/22 maxlen: 22
                          185.71.208.0/22 maxlen: 22
                          185.97.84.0/22 maxlen: 22
                          185.138.32.0/22 maxlen: 22
                          185.201.120.0/22 maxlen: 22
                          188.113.64.0/18 maxlen: 18
                          188.113.66.0/23 maxlen: 23
                          188.113.68.0/22 maxlen: 22
                          188.113.68.0/23 maxlen: 23
                          188.113.71.0/24 maxlen: 24
                          188.113.74.0/23 maxlen: 23
                          188.113.76.0/24 maxlen: 24
                          188.113.78.0/23 maxlen: 23
                          188.113.80.0/21 maxlen: 21
                          188.113.92.0/22 maxlen: 22
                          188.113.92.0/23 maxlen: 23
                          188.113.94.0/23 maxlen: 23
                          188.113.104.0/21 maxlen: 21
                          188.113.112.0/20 maxlen: 20
                          188.113.112.0/22 maxlen: 22
                          188.113.116.0/22 maxlen: 22
                          188.124.128.0/19 maxlen: 19
                          188.124.145.0/24 maxlen: 24
                          188.124.148.0/22 maxlen: 22
                          188.124.152.0/21 maxlen: 21
                          188.126.192.0/19 maxlen: 19
                          188.126.197.0/24 maxlen: 24
                          188.126.200.0/21 maxlen: 21
                          188.126.214.0/24 maxlen: 24
                          212.45.160.0/19 maxlen: 19
                          212.125.252.0/22 maxlen: 22
                          2a00:a540::/32 maxlen: 32
                          2a02:228::/29 maxlen: 29
                          2a02:228:10::/48 maxlen: 48
                          2a02:fe0::/29 maxlen: 40
                          2a02:fe0:dd05::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 07 May 2024 14:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:48:26:98:fc:9f:27:52:27:4e:f6:e8:a8:eb:4b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: May  6 23:40:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=40391063f5352d6f5915f222764ea62d8293dd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:b0:e1:34:ab:cc:5d:79:66:b9:a6:e0:6d:
                    e8:f1:58:d1:50:15:d7:fe:c1:d8:ff:fa:5c:60:0e:
                    73:5e:9e:f4:fd:15:cd:71:04:cb:f0:07:5f:c3:9a:
                    01:34:11:62:1c:60:9f:b7:22:c4:cb:2c:aa:40:ed:
                    ea:a0:ef:d5:64:7c:63:34:fd:92:aa:e7:3e:94:08:
                    a2:75:d5:26:cc:5d:7d:38:18:9b:8c:44:f7:25:c1:
                    35:1e:f5:35:86:69:38:74:87:d4:c0:0f:cb:a0:97:
                    e3:69:d0:d7:b1:38:66:36:7b:8b:6e:9c:5f:fc:eb:
                    bb:8c:b3:a2:59:31:76:9b:9a:b2:18:b6:db:3c:04:
                    ee:3e:52:3d:8b:50:ff:15:cb:c3:f8:ab:b9:c1:09:
                    dd:a9:e9:fb:94:de:9d:68:f2:0f:7d:d8:ed:e9:18:
                    84:c7:d8:5d:b4:f2:8e:f7:4f:41:ff:ca:1d:b7:20:
                    35:76:cf:c4:59:46:b4:18:24:b5:75:8c:1c:fe:0e:
                    13:64:84:7e:ce:97:4f:33:f1:c4:fe:29:3c:69:4b:
                    ac:b6:f4:17:d5:95:f0:2f:38:bd:4c:ef:3e:50:eb:
                    b2:65:c5:12:12:7e:3c:f9:38:ce:0c:ab:2c:6c:9b:
                    cf:fa:82:b4:5a:59:04:9a:3e:8e:5e:bb:78:24:69:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:10:63:F5:35:2D:6F:59:15:F2:22:76:4E:A6:2D:82:93:DD:43
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/QDkQY_U1LW9ZFfIidk6mLYKT3UM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.15.0.0/16
                  46.212.0.0/16
                  46.249.224.0/19
                  62.73.252.0/24
                  62.97.160.0/19
                  62.141.128.0/19
                  78.156.0.0/19
                  80.232.124.0/24
                  80.239.0.0/17
                  82.194.192.0/19
                  84.208.0.0/13
                  89.254.64.0/18
                  109.108.192.0/19
                  158.58.152.0/21
                  176.11.0.0/16
                  176.74.208.0/21
                  178.17.144.0/20
                  178.232.0.0/16
                  185.46.224.0/22
                  185.71.208.0/22
                  185.97.84.0/22
                  185.138.32.0/22
                  185.201.120.0/22
                  188.113.64.0/18
                  188.124.128.0/19
                  188.126.192.0/19
                  212.45.160.0/19
                  212.125.252.0/22
                IPv6:
                  2a00:a540::/32
                  2a02:228::/29
                  2a02:fe0::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:60:e5:8e:3a:c5:92:90:d7:ec:f7:fe:64:76:d0:6e:a4:
         8c:02:2c:84:0e:ae:b8:a8:97:3b:5c:dc:8f:ce:ec:68:f3:cd:
         7c:d5:de:85:f0:4a:a9:1e:d1:83:3f:23:32:f1:fd:3a:e0:e7:
         e8:be:f6:a5:61:01:43:49:5e:c2:b2:79:d9:2a:fd:68:4b:2c:
         c5:88:57:bd:db:ff:5b:5c:de:eb:38:2a:45:69:a2:8e:bd:b4:
         a2:49:b6:5b:fb:cb:82:01:7c:2f:ba:9f:4b:d4:d5:ba:b5:dd:
         9c:ff:ad:e5:ee:0f:bf:42:8c:8c:e6:4c:c0:78:43:7f:f7:a5:
         db:f6:22:dc:99:ec:75:d4:e7:bc:7f:e4:2c:7c:ab:7b:29:2e:
         e3:1a:3b:92:50:7f:6c:1d:c2:00:18:39:3b:b0:c6:5a:c0:25:
         3d:0c:f7:c6:5b:92:da:99:e2:57:c4:b8:3a:b2:a0:10:35:0e:
         b0:98:44:3d:3d:ee:b8:30:7e:c1:12:73:a6:78:5e:f1:33:d3:
         16:e0:eb:8d:17:f7:04:1c:d4:01:60:e9:9e:32:91:93:16:90:
         70:6e:99:db:8f:37:ed:fb:60:57:ff:97:92:17:9a:e1:46:f2:
         1a:2a:bf:0b:d5:b4:9c:10:79:d6:6f:d4:08:cb:be:9e:df:1f:
         89:b9:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org