Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/noAd7YTTPimWHK8ISX-Gwtg9yck.roa
File:                     noAd7YTTPimWHK8ISX-Gwtg9yck.roa (raw, json)
Hash identifier:          Abb0jHTj6n7xKdWN8aLSX/H5WhirdexKAxdrCjtj+Tc=
Subject key identifier:   9E:80:1D:ED:84:D3:3E:29:96:1C:AF:08:49:7F:86:C2:D8:3D:C9:C9
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       0193536862FD87DB6EC18F70A262B32AFF58
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/noAd7YTTPimWHK8ISX-Gwtg9yck.roa
Signing time:             Fri 22 Nov 2024 10:26:10 +0000
ROA not before:           Fri 22 Nov 2024 10:26:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3303
IP address blocks:        46.245.144.0/21 maxlen: 21
                          78.110.128.0/20 maxlen: 20
                          91.216.229.0/24 maxlen: 24
                          138.187.0.0/16 maxlen: 19
                          138.188.0.0/16 maxlen: 24
                          138.190.0.0/16 maxlen: 16
                          164.128.0.0/16 maxlen: 24
                          185.39.92.0/22 maxlen: 22
                          185.84.76.0/22 maxlen: 24
                          185.106.64.0/22 maxlen: 24
                          188.92.48.0/21 maxlen: 21
                          193.5.0.0/24 maxlen: 24
                          193.5.3.0/24 maxlen: 24
                          193.5.4.0/23 maxlen: 24
                          193.5.6.0/23 maxlen: 23
                          193.5.20.0/24 maxlen: 24
                          193.5.36.0/24 maxlen: 24
                          193.5.38.0/24 maxlen: 24
                          193.5.52.0/24 maxlen: 24
                          193.5.59.0/24 maxlen: 24
                          193.5.61.0/24 maxlen: 24
                          193.5.63.0/24 maxlen: 24
                          193.5.224.0/20 maxlen: 20
                          193.47.232.0/24 maxlen: 24
                          193.134.36.0/22 maxlen: 24
                          193.134.248.0/23 maxlen: 24
                          193.134.255.0/24 maxlen: 24
                          193.135.0.0/23 maxlen: 24
                          193.135.3.0/24 maxlen: 24
                          193.135.26.0/23 maxlen: 23
                          193.135.100.0/24 maxlen: 24
                          193.135.111.0/24 maxlen: 24
                          193.135.128.0/22 maxlen: 24
                          193.135.132.0/24 maxlen: 24
                          193.135.133.0/24 maxlen: 24
                          193.135.136.0/24 maxlen: 24
                          193.135.140.0/24 maxlen: 24
                          193.135.142.0/23 maxlen: 24
                          193.135.143.0/24 maxlen: 24
                          193.135.144.0/23 maxlen: 24
                          193.135.148.0/23 maxlen: 24
                          193.135.148.0/24 maxlen: 24
                          193.135.173.0/24 maxlen: 24
                          193.135.214.0/23 maxlen: 24
                          193.135.218.0/24 maxlen: 24
                          193.135.255.0/24 maxlen: 24
                          193.222.64.0/19 maxlen: 19
                          193.223.16.0/20 maxlen: 20
                          193.223.32.0/19 maxlen: 19
                          193.246.0.0/23 maxlen: 24
                          193.246.8.0/22 maxlen: 22
                          193.246.16.0/21 maxlen: 24
                          193.246.32.0/20 maxlen: 20
                          193.246.32.0/21 maxlen: 24
                          193.246.40.0/21 maxlen: 21
                          193.246.48.0/23 maxlen: 24
                          193.246.50.0/24 maxlen: 24
                          193.246.56.0/24 maxlen: 24
                          193.246.57.0/24 maxlen: 24
                          193.246.99.0/24 maxlen: 24
                          193.246.100.0/24 maxlen: 24
                          193.246.104.0/24 maxlen: 24
                          193.246.105.0/24 maxlen: 24
                          193.246.113.0/24 maxlen: 24
                          193.246.127.0/24 maxlen: 24
                          193.246.202.0/23 maxlen: 24
                          193.246.246.0/24 maxlen: 24
                          193.246.248.0/22 maxlen: 24
                          193.247.36.0/22 maxlen: 24
                          193.247.40.0/24 maxlen: 24
                          193.247.41.0/24 maxlen: 24
                          193.247.42.0/24 maxlen: 24
                          193.247.43.0/24 maxlen: 24
                          193.247.44.0/22 maxlen: 24
                          193.247.86.0/24 maxlen: 24
                          193.247.90.0/24 maxlen: 24
                          193.247.104.0/23 maxlen: 23
                          193.247.151.0/24 maxlen: 24
                          193.247.166.0/23 maxlen: 24
                          193.247.168.0/21 maxlen: 21
                          193.247.176.0/22 maxlen: 22
                          193.247.193.0/24 maxlen: 24
                          193.247.212.0/24 maxlen: 24
                          193.247.217.0/24 maxlen: 24
                          193.247.218.0/23 maxlen: 23
                          193.247.224.0/21 maxlen: 24
                          193.247.244.0/23 maxlen: 24
                          193.247.246.0/24 maxlen: 24
                          193.247.247.0/24 maxlen: 24
                          193.247.250.0/24 maxlen: 24
                          193.247.255.0/24 maxlen: 24
                          194.6.160.0/19 maxlen: 24
                          194.11.96.0/20 maxlen: 20
                          194.11.144.0/21 maxlen: 21
                          194.209.0.0/16 maxlen: 24
                          195.35.121.0/24 maxlen: 24
                          195.65.0.0/16 maxlen: 24
                          195.144.32.0/19 maxlen: 24
                          195.176.128.0/19 maxlen: 24
                          195.176.192.0/19 maxlen: 24
                          212.117.96.0/19 maxlen: 19
                          212.243.0.0/16 maxlen: 24
                          217.192.0.0/15 maxlen: 24
                          2001:918::/32 maxlen: 48
                          2001:91f::/32 maxlen: 32
                          2a01:8b00::/32 maxlen: 32
                          2a02:a90::/32 maxlen: 32
Validation:               Failed, certificate revoked on Wed 01 Jan 2025 05:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:68:62:fd:87:db:6e:c1:8f:70:a2:62:b3:2a:ff:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Nov 22 10:26:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9e801ded84d33e29961caf08497f86c2d83dc9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:09:e6:ff:01:c1:34:25:a4:2b:ea:c6:f2:
                    68:19:dc:cb:7c:36:f7:03:78:fb:68:ca:4b:1c:64:
                    42:b8:3f:1a:89:7f:8b:b0:b9:20:cc:c8:10:81:3c:
                    17:2e:31:f2:45:bc:88:c0:e8:79:d1:07:9a:0e:1e:
                    5c:e9:42:bb:c8:1e:68:b2:e6:87:97:4d:bb:a9:b8:
                    47:25:56:a5:02:18:9f:bb:af:3a:a7:fb:23:0d:a8:
                    d6:6f:66:58:80:54:26:62:6a:a8:5b:99:d4:1d:5f:
                    ed:b6:f3:b5:fb:79:0f:5c:ba:d9:25:45:6f:20:4e:
                    a5:16:77:8d:0d:5c:1d:c3:96:6c:81:50:7f:5b:a4:
                    5e:0f:75:c9:f0:b8:2b:bd:c9:69:f4:51:20:6e:5f:
                    d4:d0:ac:c8:7e:d3:f7:99:0d:1b:74:d2:c3:32:a6:
                    b6:49:01:10:07:e1:a9:d9:bc:bc:8e:13:48:ae:35:
                    34:76:d3:6a:b4:69:da:97:12:ca:b3:e2:05:40:e3:
                    9b:35:8d:5e:8f:9b:6a:9a:76:58:f4:e7:b8:74:de:
                    ed:6d:1e:f7:19:ff:2c:a9:72:fe:07:5c:57:cc:7f:
                    20:31:ba:18:3a:03:f4:2a:03:c2:9d:fc:7c:a5:59:
                    5e:20:5b:35:05:ba:99:7e:19:55:e4:d6:e4:9d:4d:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:1D:ED:84:D3:3E:29:96:1C:AF:08:49:7F:86:C2:D8:3D:C9:C9
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/noAd7YTTPimWHK8ISX-Gwtg9yck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.245.144.0/21
                  78.110.128.0/20
                  91.216.229.0/24
                  138.187.0.0-138.188.255.255
                  138.190.0.0/16
                  164.128.0.0/16
                  185.39.92.0/22
                  185.84.76.0/22
                  185.106.64.0/22
                  188.92.48.0/21
                  193.5.0.0/24
                  193.5.3.0-193.5.7.255
                  193.5.20.0/24
                  193.5.36.0/24
                  193.5.38.0/24
                  193.5.52.0/24
                  193.5.59.0/24
                  193.5.61.0/24
                  193.5.63.0/24
                  193.5.224.0/20
                  193.47.232.0/24
                  193.134.36.0/22
                  193.134.248.0/23
                  193.134.255.0-193.135.1.255
                  193.135.3.0/24
                  193.135.26.0/23
                  193.135.100.0/24
                  193.135.111.0/24
                  193.135.128.0-193.135.133.255
                  193.135.136.0/24
                  193.135.140.0/24
                  193.135.142.0-193.135.145.255
                  193.135.148.0/23
                  193.135.173.0/24
                  193.135.214.0/23
                  193.135.218.0/24
                  193.135.255.0/24
                  193.222.64.0/19
                  193.223.16.0-193.223.63.255
                  193.246.0.0/23
                  193.246.8.0/22
                  193.246.16.0/21
                  193.246.32.0-193.246.50.255
                  193.246.56.0/23
                  193.246.99.0-193.246.100.255
                  193.246.104.0/23
                  193.246.113.0/24
                  193.246.127.0/24
                  193.246.202.0/23
                  193.246.246.0/24
                  193.246.248.0/22
                  193.247.36.0-193.247.47.255
                  193.247.86.0/24
                  193.247.90.0/24
                  193.247.104.0/23
                  193.247.151.0/24
                  193.247.166.0-193.247.179.255
                  193.247.193.0/24
                  193.247.212.0/24
                  193.247.217.0-193.247.219.255
                  193.247.224.0/21
                  193.247.244.0/22
                  193.247.250.0/24
                  193.247.255.0/24
                  194.6.160.0/19
                  194.11.96.0/20
                  194.11.144.0/21
                  194.209.0.0/16
                  195.35.121.0/24
                  195.65.0.0/16
                  195.144.32.0/19
                  195.176.128.0/19
                  195.176.192.0/19
                  212.117.96.0/19
                  212.243.0.0/16
                  217.192.0.0/15
                IPv6:
                  2001:918::/32
                  2001:91f::/32
                  2a01:8b00::/32
                  2a02:a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:56:43:cd:16:b8:e5:ba:1c:f8:a1:37:25:be:d2:25:cb:d4:
         ba:78:4e:4b:19:1b:73:bf:ae:6f:0d:cd:41:9e:74:af:86:78:
         c5:89:52:08:e5:09:a2:58:c9:2e:28:4b:b6:98:24:74:21:c6:
         6a:f4:cf:6c:76:69:34:f9:04:df:72:6d:0d:03:4a:09:51:a5:
         93:a0:90:89:f4:25:37:59:cd:28:71:48:34:79:69:c4:22:04:
         c8:dd:da:12:60:9c:fb:c6:68:19:71:dc:bd:ea:18:f2:55:9c:
         73:1b:7d:5f:52:66:d0:22:14:a8:ea:c2:ef:31:ec:44:a7:91:
         c3:bf:28:ca:44:4e:30:85:fb:10:14:14:10:ab:ef:89:01:8d:
         9a:cc:9b:d9:64:7b:03:f7:20:d9:27:d1:da:14:c0:3e:2d:01:
         1d:b3:71:4f:bf:bc:d7:c3:0f:fd:1f:ad:1c:32:d9:cc:f2:f0:
         f0:bd:96:f1:63:18:54:a1:4f:17:c0:40:e7:67:12:12:27:e1:
         2d:18:bd:a9:08:81:88:49:24:f4:a9:96:0e:21:9a:10:cb:f4:
         43:63:93:c7:db:c8:81:d7:5c:02:a7:0c:c6:51:07:0f:82:3e:
         30:d2:0a:ad:36:09:1e:e3:c3:30:70:85:21:fc:41:37:16:f9:
         54:cb:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:33:02 2025 by rpki-client