Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/5SDOFy4iXmFs1EATrbWnCnkZ090.roa
File:                     5SDOFy4iXmFs1EATrbWnCnkZ090.roa (raw, json)
Hash identifier:          aiWNbQ5NxC2ObUdywdR6mQ/0JK5PTCYh0AsEkszm67Y=
Subject key identifier:   E5:20:CE:17:2E:22:5E:61:6C:D4:40:13:AD:B5:A7:0A:79:19:D3:DD
Certificate issuer:       /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial:       018B27214D333CBEF71DF7FE660CF4742E7E
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/5SDOFy4iXmFs1EATrbWnCnkZ090.roa
Signing time:             Fri 13 Oct 2023 03:42:55 +0000
ROA not before:           Fri 13 Oct 2023 03:42:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35104
IP address blocks:        46.235.84.0/24 maxlen: 24
                          46.235.83.0/24 maxlen: 24
                          46.235.82.0/24 maxlen: 24
                          46.235.81.0/24 maxlen: 24
                          46.235.85.0/24 maxlen: 24
                          46.235.80.0/24 maxlen: 24
                          46.235.87.0/24 maxlen: 24
                          46.235.86.0/24 maxlen: 24
                          188.127.40.0/24 maxlen: 24
                          188.127.39.0/24 maxlen: 24
                          188.127.44.0/24 maxlen: 24
                          188.127.43.0/24 maxlen: 24
                          188.127.42.0/24 maxlen: 24
                          188.127.41.0/24 maxlen: 24
                          37.228.64.0/24 maxlen: 24
                          188.127.45.0/24 maxlen: 24
                          188.127.48.0/24 maxlen: 24
                          37.228.68.0/24 maxlen: 24
                          37.228.67.0/24 maxlen: 24
                          37.228.66.0/24 maxlen: 24
                          37.228.65.0/24 maxlen: 24
                          37.228.71.0/24 maxlen: 24
                          37.228.70.0/24 maxlen: 24
                          37.228.69.0/24 maxlen: 24
                          188.127.38.0/24 maxlen: 24
                          188.127.33.0/24 maxlen: 24
                          188.127.32.0/24 maxlen: 24
                          188.127.37.0/24 maxlen: 24
                          188.127.36.0/24 maxlen: 24
                          188.127.35.0/24 maxlen: 24
                          188.127.34.0/24 maxlen: 24
                          93.185.67.0/24 maxlen: 24
                          93.185.66.0/24 maxlen: 24
                          93.185.65.0/24 maxlen: 24
                          93.185.71.0/24 maxlen: 24
                          93.185.70.0/24 maxlen: 24
                          93.185.69.0/24 maxlen: 24
                          93.185.68.0/24 maxlen: 24
                          93.185.74.0/24 maxlen: 24
                          93.185.73.0/24 maxlen: 24
                          93.185.72.0/24 maxlen: 24
                          93.185.78.0/24 maxlen: 24
                          93.185.77.0/24 maxlen: 24
                          93.185.76.0/24 maxlen: 24
                          93.185.75.0/24 maxlen: 24
                          93.185.72.0/21 maxlen: 21
                          93.185.79.0/24 maxlen: 24
                          89.219.24.0/24 maxlen: 24
                          89.219.25.0/24 maxlen: 24
                          89.219.27.0/24 maxlen: 24
                          89.219.26.0/24 maxlen: 24
                          77.245.97.0/24 maxlen: 24
                          77.245.96.0/24 maxlen: 24
                          77.245.98.0/24 maxlen: 24
                          77.245.104.0/22 maxlen: 22
                          77.245.100.0/24 maxlen: 24
                          77.245.99.0/24 maxlen: 24
                          77.245.104.0/24 maxlen: 24
                          77.245.103.0/24 maxlen: 24
                          77.245.102.0/24 maxlen: 24
                          77.245.101.0/24 maxlen: 24
                          77.245.105.0/24 maxlen: 24
                          77.245.108.0/23 maxlen: 23
                          77.245.111.0/24 maxlen: 24
                          77.245.110.0/24 maxlen: 24
                          77.245.109.0/24 maxlen: 24
                          77.245.108.0/24 maxlen: 24
                          77.245.107.0/24 maxlen: 24
                          77.245.106.0/24 maxlen: 24
                          93.185.64.0/24 maxlen: 24
                          193.29.53.0/24 maxlen: 24
                          185.20.125.0/24 maxlen: 24
                          185.20.124.0/24 maxlen: 24
                          185.20.127.0/24 maxlen: 24
                          185.20.126.0/24 maxlen: 24
                          80.242.211.0/24 maxlen: 24
                          80.242.210.0/24 maxlen: 24
                          80.242.209.0/24 maxlen: 24
                          80.242.213.0/24 maxlen: 24
                          80.242.212.0/24 maxlen: 24
                          80.242.208.0/24 maxlen: 24
                          185.20.126.0/23 maxlen: 23
                          80.242.218.0/24 maxlen: 24
                          80.242.217.0/24 maxlen: 24
                          80.242.216.0/24 maxlen: 24
                          80.242.219.0/24 maxlen: 24
                          80.242.215.0/24 maxlen: 24
                          80.242.214.0/24 maxlen: 24
                          80.242.223.0/24 maxlen: 24
                          80.242.222.0/24 maxlen: 24
                          80.242.221.0/24 maxlen: 24
                          80.242.220.0/24 maxlen: 24
                          95.141.128.0/24 maxlen: 24
                          95.141.132.0/24 maxlen: 24
                          95.141.131.0/24 maxlen: 24
                          95.141.130.0/24 maxlen: 24
                          95.141.129.0/24 maxlen: 24
                          95.141.136.0/22 maxlen: 22
                          95.141.135.0/24 maxlen: 24
                          95.141.134.0/24 maxlen: 24
                          95.141.133.0/24 maxlen: 24
                          95.141.139.0/24 maxlen: 24
                          95.141.138.0/24 maxlen: 24
                          95.141.137.0/24 maxlen: 24
                          95.141.136.0/24 maxlen: 24
                          95.141.142.0/24 maxlen: 24
                          95.141.141.0/24 maxlen: 24
                          95.141.140.0/24 maxlen: 24
                          95.141.143.0/24 maxlen: 24
                          217.196.16.0/24 maxlen: 24
                          217.196.17.0/24 maxlen: 24
                          217.196.24.0/24 maxlen: 24
                          217.196.23.0/24 maxlen: 24
                          217.196.19.0/24 maxlen: 24
                          217.196.18.0/24 maxlen: 24
                          217.196.22.0/24 maxlen: 24
                          217.196.21.0/24 maxlen: 24
                          217.196.20.0/24 maxlen: 24
                          217.196.31.0/24 maxlen: 24
                          217.196.30.0/24 maxlen: 24
                          217.196.26.0/24 maxlen: 24
                          217.196.25.0/24 maxlen: 24
                          217.196.29.0/24 maxlen: 24
                          217.196.28.0/24 maxlen: 24
                          217.196.27.0/24 maxlen: 24
                          217.196.26.0/23 maxlen: 23
                          195.189.31.0/24 maxlen: 24
                          195.189.30.0/24 maxlen: 24
                          195.189.29.0/24 maxlen: 24
                          195.189.28.0/24 maxlen: 24
                          188.0.132.0/24 maxlen: 24
                          188.0.131.0/24 maxlen: 24
                          188.0.130.0/24 maxlen: 24
                          188.0.129.0/24 maxlen: 24
                          188.0.128.0/24 maxlen: 24
                          188.0.139.0/24 maxlen: 24
                          188.0.138.0/24 maxlen: 24
                          188.0.137.0/24 maxlen: 24
                          188.0.136.0/24 maxlen: 24
                          188.0.135.0/24 maxlen: 24
                          188.0.134.0/24 maxlen: 24
                          188.0.133.0/24 maxlen: 24
                          188.0.145.0/24 maxlen: 24
                          188.0.144.0/24 maxlen: 24
                          188.0.143.0/24 maxlen: 24
                          188.0.142.0/24 maxlen: 24
                          188.0.141.0/24 maxlen: 24
                          188.0.140.0/22 maxlen: 24
                          188.0.146.0/24 maxlen: 24
                          188.0.149.0/24 maxlen: 24
                          188.0.148.0/24 maxlen: 24
                          188.0.147.0/24 maxlen: 24
                          188.0.152.0/24 maxlen: 24
                          188.0.151.0/24 maxlen: 24
                          188.0.150.0/24 maxlen: 24
                          188.0.159.0/24 maxlen: 24
                          188.0.158.0/24 maxlen: 24
                          188.0.157.0/24 maxlen: 24
                          188.0.153.0/24 maxlen: 24
                          188.0.156.0/24 maxlen: 24
                          188.0.155.0/24 maxlen: 24
                          188.0.154.0/24 maxlen: 24
                          2a03:a300:5000::/44 maxlen: 44
                          2a03:a300:4000::/44 maxlen: 44
                          2a03:a300:1140::/48 maxlen: 48
                          2a03:a300:2020::/48 maxlen: 48
                          2a03:a300:4100::/48 maxlen: 48
                          2a03:a300:2000::/48 maxlen: 48
                          2a03:a300:1000::/48 maxlen: 48
                          2a03:a300:3000::/48 maxlen: 48
                          2a03:a300:800::/37 maxlen: 37

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 09:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:27:21:4d:33:3c:be:f7:1d:f7:fe:66:0c:f4:74:2e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
        Validity
            Not Before: Oct 13 03:42:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e520ce172e225e616cd44013adb5a70a7919d3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:15:aa:75:67:a0:7b:74:32:8e:18:db:ad:
                    b9:27:9f:e4:7a:d9:46:47:ae:0d:33:f1:72:43:3c:
                    10:00:25:72:05:7c:81:da:49:92:67:58:02:15:38:
                    4c:5c:35:8e:ba:55:67:09:04:b9:ba:81:ce:83:80:
                    9c:50:56:27:1d:cf:f6:3e:3e:3b:02:98:2f:2c:ae:
                    fb:47:30:3a:f3:a4:93:6e:7c:6b:05:02:bd:b0:30:
                    d1:2d:ac:49:f2:e3:c4:7b:b8:41:d6:a5:fd:f0:0f:
                    38:30:79:fd:7b:64:f0:59:27:0b:44:3a:0b:c2:3b:
                    57:95:0d:6a:42:86:8e:f6:f5:03:cc:91:83:47:8b:
                    57:db:1d:0f:63:0d:51:2d:9f:66:ae:6f:91:5e:b9:
                    db:77:ed:97:f2:1e:c4:1f:40:69:9d:44:91:7d:16:
                    b0:22:b6:15:9c:4a:ad:5c:d0:1d:b1:76:28:5e:c4:
                    0d:82:82:e3:8f:75:1f:84:f6:75:05:19:86:b1:f4:
                    1a:0e:d8:c6:fa:e2:94:30:b1:86:d5:5a:a2:67:dd:
                    51:d8:61:54:3b:f4:0e:d1:23:14:6d:01:a0:00:d0:
                    20:02:00:92:87:25:be:41:ea:2a:c2:b7:82:3d:b2:
                    83:89:fb:c8:d7:79:42:f9:d6:11:b8:c5:8a:11:63:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:CE:17:2E:22:5E:61:6C:D4:40:13:AD:B5:A7:0A:79:19:D3:DD
            X509v3 Authority Key Identifier:
                keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/5SDOFy4iXmFs1EATrbWnCnkZ090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.228.64.0/21
                  46.235.80.0/21
                  77.245.96.0/20
                  80.242.208.0/20
                  89.219.24.0/22
                  93.185.64.0/20
                  95.141.128.0/20
                  185.20.124.0/22
                  188.0.128.0/19
                  188.127.32.0-188.127.45.255
                  188.127.48.0/24
                  193.29.53.0/24
                  195.189.28.0/22
                  217.196.16.0/20
                IPv6:
                  2a03:a300:800::-2a03:a300:1000:ffff:ffff:ffff:ffff:ffff
                  2a03:a300:1140::/48
                  2a03:a300:2000::/48
                  2a03:a300:2020::/48
                  2a03:a300:3000::/48
                  2a03:a300:4000::/44
                  2a03:a300:4100::/48
                  2a03:a300:5000::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:c4:56:be:bb:82:89:85:00:38:23:fa:0a:c3:7e:a1:3f:
         b3:aa:5a:df:08:65:38:c6:b4:77:f8:6b:62:58:50:0c:dc:0f:
         eb:63:c3:f4:6b:90:7b:ca:b0:0e:bf:31:6c:ec:bc:55:3f:0d:
         ff:ba:08:3c:93:fe:77:93:22:87:b1:b3:35:66:1c:14:a7:be:
         32:62:38:6f:5b:dc:32:78:6c:f5:1c:bf:1c:19:57:fa:b8:89:
         56:2e:17:5a:f9:4d:28:03:1e:0f:b5:05:1f:5b:01:f1:b0:4a:
         5b:32:c1:e8:59:17:50:9f:0b:96:e9:a8:41:8f:78:c1:b6:29:
         e6:90:1c:c0:70:b7:d9:96:d2:20:1a:e4:8f:55:a7:ee:90:1d:
         a0:f3:b1:43:dc:3a:a3:78:a7:1a:8b:c5:b4:05:b8:97:22:2e:
         b8:22:da:89:62:31:a2:d7:2f:16:3e:81:42:2b:1b:67:8a:15:
         35:1f:e3:ec:c1:b1:b5:11:06:37:6e:d0:9b:be:6f:d0:4a:82:
         b6:75:e7:e9:71:33:87:db:1e:47:98:00:89:e8:d6:2c:cf:e1:
         e7:d7:ba:7f:f3:1c:26:14:98:29:c3:a1:a2:06:14:d6:13:f0:
         96:28:d8:d0:a3:bf:76:e9:21:ca:2c:ab:41:04:ff:cd:25:5c:
         a5:93:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org