Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa
File:                     1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa (raw, json)
Hash identifier:          0KKR4k7Y23ji6xXLVXqIVKMGq3NwEr27XzJ69VJ49yY=
Subject key identifier:   F8:0A:FC:87:52:82:5B:C0:22:55:FD:8B:83:DC:EC:FF:9F:A3:DB:FE
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       018CC86FBDACE0D48C56F955BA532B7A856D
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa
Signing time:             Tue 02 Jan 2024 04:30:15 +0000
ROA not before:           Tue 02 Jan 2024 04:30:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        81.161.12.0/22 maxlen: 22
                          176.107.64.0/20 maxlen: 24
                          93.120.112.0/21 maxlen: 21
                          93.120.124.0/22 maxlen: 22
                          89.46.112.0/23 maxlen: 24
                          91.235.166.0/24 maxlen: 24
                          91.235.167.0/24 maxlen: 24
                          195.80.142.0/23 maxlen: 24
                          188.213.233.0/24 maxlen: 24
                          93.120.64.0/21 maxlen: 21
                          31.133.192.0/24 maxlen: 24
                          193.221.82.0/23 maxlen: 24
                          31.133.193.0/24 maxlen: 24
                          31.133.195.0/24 maxlen: 24
                          31.133.199.0/24 maxlen: 24
                          93.120.76.0/22 maxlen: 22
                          31.133.196.0/23 maxlen: 23
                          31.133.194.0/24 maxlen: 24
                          93.120.75.0/24 maxlen: 24
                          93.120.72.0/23 maxlen: 23
                          31.133.198.0/24 maxlen: 24
                          93.120.84.0/24 maxlen: 24
                          93.120.80.0/22 maxlen: 22
                          93.120.85.0/24 maxlen: 24
                          91.234.222.0/23 maxlen: 23
                          91.234.220.0/23 maxlen: 23
                          93.120.90.0/24 maxlen: 24
                          93.120.88.0/23 maxlen: 23
                          93.120.86.0/23 maxlen: 23
                          93.120.94.0/23 maxlen: 23
                          93.120.92.0/23 maxlen: 23
                          91.234.150.0/23 maxlen: 23
                          93.120.28.0/23 maxlen: 23
                          93.120.27.0/24 maxlen: 24
                          93.120.30.0/24 maxlen: 24
                          93.120.33.0/24 maxlen: 24
                          93.120.48.0/20 maxlen: 20
                          171.25.223.0/24 maxlen: 24
                          176.112.84.0/22 maxlen: 22
                          91.246.188.0/22 maxlen: 22
                          91.246.196.0/22 maxlen: 22
                          91.246.201.0/24 maxlen: 24
                          89.45.92.0/23 maxlen: 24
                          178.159.152.0/21 maxlen: 21
                          178.159.148.0/22 maxlen: 22
                          91.233.202.0/23 maxlen: 23
                          91.240.156.0/22 maxlen: 22
                          77.232.192.0/23 maxlen: 24
                          77.232.196.0/22 maxlen: 22
                          185.104.196.0/22 maxlen: 24
                          77.232.194.0/23 maxlen: 23
                          77.232.204.0/22 maxlen: 22
                          77.232.200.0/22 maxlen: 22
                          77.232.208.0/21 maxlen: 21
                          176.124.176.0/22 maxlen: 22
                          86.104.132.0/23 maxlen: 24
                          176.124.180.0/22 maxlen: 22
                          176.118.88.0/22 maxlen: 22
                          77.232.220.0/22 maxlen: 22
                          176.118.92.0/22 maxlen: 22
                          91.239.178.0/24 maxlen: 24
                          176.98.56.0/22 maxlen: 22
                          176.98.60.0/22 maxlen: 22
                          91.233.2.0/23 maxlen: 23
                          89.44.100.0/23 maxlen: 24
                          91.225.35.0/24 maxlen: 24
                          91.231.226.0/24 maxlen: 24
                          91.225.34.0/24 maxlen: 24
                          91.231.224.0/23 maxlen: 23
                          91.231.223.0/24 maxlen: 24
                          64.43.66.0/23 maxlen: 23
                          64.43.68.0/22 maxlen: 22
                          64.43.76.0/24 maxlen: 24
                          64.43.80.0/21 maxlen: 21
                          64.43.88.0/22 maxlen: 22
                          77.36.52.0/23 maxlen: 23
                          176.110.106.0/24 maxlen: 24
                          77.36.80.0/21 maxlen: 21
                          176.110.107.0/24 maxlen: 24
                          77.36.88.0/24 maxlen: 24
                          77.36.90.0/23 maxlen: 23
                          85.204.196.0/23 maxlen: 24
                          77.36.89.0/24 maxlen: 24
                          176.110.114.0/23 maxlen: 23
                          77.36.96.0/20 maxlen: 20
                          77.36.92.0/22 maxlen: 22
                          91.245.176.0/21 maxlen: 21
                          37.97.122.0/23 maxlen: 23
                          185.9.240.0/22 maxlen: 22
                          185.9.236.0/22 maxlen: 22
                          176.111.4.0/22 maxlen: 22
                          176.111.0.0/22 maxlen: 22
                          91.239.0.0/22 maxlen: 22
                          176.97.144.0/22 maxlen: 22
                          176.97.148.0/22 maxlen: 22
                          188.191.248.0/22 maxlen: 22
                          91.232.16.0/23 maxlen: 23
                          91.232.20.0/24 maxlen: 24
                          31.131.12.0/22 maxlen: 22
                          193.36.192.0/21 maxlen: 21
                          193.36.202.0/24 maxlen: 24
                          176.96.56.0/21 maxlen: 21
                          91.237.194.0/23 maxlen: 23
                          77.36.8.0/21 maxlen: 21
                          176.96.176.0/22 maxlen: 22
                          176.96.180.0/22 maxlen: 22
                          77.36.30.0/24 maxlen: 24
                          77.36.28.0/23 maxlen: 23
                          77.36.32.0/22 maxlen: 22
                          77.36.36.0/23 maxlen: 23
                          89.42.232.0/23 maxlen: 24
                          77.36.40.0/21 maxlen: 21
                          77.36.38.0/23 maxlen: 23
                          77.36.48.0/22 maxlen: 22
                          176.116.40.0/21 maxlen: 21
                          31.135.1.0/24 maxlen: 24
                          31.135.3.0/24 maxlen: 24
                          31.135.7.0/24 maxlen: 24
                          91.229.16.0/23 maxlen: 23
                          91.229.31.0/24 maxlen: 24
                          176.121.96.0/21 maxlen: 21
                          193.0.190.0/24 maxlen: 24
                          91.229.156.0/23 maxlen: 23
                          91.229.159.0/24 maxlen: 24
                          91.229.158.0/24 maxlen: 24
                          89.34.74.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 14:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:bd:ac:e0:d4:8c:56:f9:55:ba:53:2b:7a:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jan  2 04:30:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f80afc8752825bc02255fd8b83dcecff9fa3dbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:1e:6d:3b:e6:4b:8d:85:24:d9:64:9e:a8:
                    c5:d4:0d:4b:f0:27:22:52:44:d8:9f:ad:a8:ea:61:
                    80:e0:86:df:ed:a6:2f:11:42:8f:0c:16:43:d0:0b:
                    3f:e4:e8:65:3e:54:d1:3d:40:f3:e4:d1:8c:f6:e4:
                    2b:aa:bb:fa:91:d4:97:a7:a2:31:49:ee:3e:e3:29:
                    e7:7d:6d:af:25:66:06:3b:2e:e2:26:e6:62:21:7c:
                    d4:28:6a:2a:50:ad:d3:05:a6:70:c2:3f:13:df:b9:
                    a3:76:cc:8d:34:64:ae:ff:e4:9d:f1:5f:5e:f0:ea:
                    fe:52:bf:a3:22:72:41:ef:53:f2:1d:4e:7d:88:55:
                    6c:91:9e:a3:4f:d4:8e:c0:cd:ec:57:b0:39:6d:bb:
                    7d:cb:bc:d8:24:a3:a0:9f:f4:dc:2e:ee:ac:1c:a6:
                    ad:f4:c2:95:db:30:59:d0:41:44:91:3d:82:71:51:
                    6d:9c:ae:72:44:4d:5d:43:0e:6b:97:23:5e:a4:eb:
                    36:16:7c:89:66:2b:47:f4:2f:f5:a8:b6:46:f0:8c:
                    50:d8:c5:4e:30:0c:b9:d8:f9:79:91:99:27:b2:e7:
                    99:2f:d7:0f:7d:ec:47:66:15:5c:63:e6:ad:06:6b:
                    c6:7d:d1:25:29:65:05:55:6d:fe:b2:a4:c3:91:df:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:FC:87:52:82:5B:C0:22:55:FD:8B:83:DC:EC:FF:9F:A3:DB:FE
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-Ar8h1KCW8AiVf2Lg9zs_5-j2_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.131.12.0/22
                  31.133.192.0/21
                  31.135.1.0/24
                  31.135.3.0/24
                  31.135.7.0/24
                  37.97.122.0/23
                  64.43.66.0-64.43.71.255
                  64.43.76.0/24
                  64.43.80.0-64.43.91.255
                  77.36.8.0/21
                  77.36.28.0-77.36.30.255
                  77.36.32.0-77.36.53.255
                  77.36.80.0-77.36.111.255
                  77.232.192.0-77.232.215.255
                  77.232.220.0/22
                  81.161.12.0/22
                  85.204.196.0/23
                  86.104.132.0/23
                  89.34.74.0/23
                  89.42.232.0/23
                  89.44.100.0/23
                  89.45.92.0/23
                  89.46.112.0/23
                  91.225.34.0/23
                  91.229.16.0/23
                  91.229.31.0/24
                  91.229.156.0/22
                  91.231.223.0-91.231.226.255
                  91.232.16.0/23
                  91.232.20.0/24
                  91.233.2.0/23
                  91.233.202.0/23
                  91.234.150.0/23
                  91.234.220.0/22
                  91.235.166.0/23
                  91.237.194.0/23
                  91.239.0.0/22
                  91.239.178.0/24
                  91.240.156.0/22
                  91.245.176.0/21
                  91.246.188.0/22
                  91.246.196.0/22
                  91.246.201.0/24
                  93.120.27.0-93.120.30.255
                  93.120.33.0/24
                  93.120.48.0-93.120.73.255
                  93.120.75.0-93.120.90.255
                  93.120.92.0/22
                  93.120.112.0/21
                  93.120.124.0/22
                  171.25.223.0/24
                  176.96.56.0/21
                  176.96.176.0/21
                  176.97.144.0/21
                  176.98.56.0/21
                  176.107.64.0/20
                  176.110.106.0/23
                  176.110.114.0/23
                  176.111.0.0/21
                  176.112.84.0/22
                  176.116.40.0/21
                  176.118.88.0/21
                  176.121.96.0/21
                  176.124.176.0/21
                  178.159.148.0-178.159.159.255
                  185.9.236.0-185.9.243.255
                  185.104.196.0/22
                  188.191.248.0/22
                  188.213.233.0/24
                  193.0.190.0/24
                  193.36.192.0/21
                  193.36.202.0/24
                  193.221.82.0/23
                  195.80.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:a8:6e:70:a6:4d:12:53:ca:49:ef:60:b1:ed:29:07:b7:
         ee:b7:39:54:1a:a3:d7:23:87:22:eb:b4:ba:76:e4:cc:6a:76:
         0f:dd:17:56:7d:15:b6:bb:c3:76:55:cb:be:35:b4:d1:35:db:
         9b:2d:ac:b3:bf:02:a1:bc:80:20:f1:31:ce:9b:f2:39:cf:2d:
         e8:1d:3f:de:82:ea:b2:97:ee:7d:31:ea:2f:8b:95:d4:c9:8b:
         c9:0d:a1:e7:14:db:96:74:50:20:41:9a:21:e5:3b:19:ce:64:
         d5:0f:a4:e9:aa:39:5b:ea:f5:02:86:29:50:65:78:0f:cd:af:
         d8:00:56:b8:9a:72:d5:3a:89:2c:50:c8:ce:a7:f1:a8:9e:a9:
         f4:f6:9a:41:17:d4:ae:76:1d:68:95:65:56:80:41:3d:52:1c:
         85:e9:91:6c:8d:1d:21:1d:40:cd:b0:9c:3c:5c:2d:75:48:11:
         a3:20:9d:93:86:24:9d:91:05:7f:20:4c:8e:9c:29:ac:8c:0d:
         08:81:0d:9e:1d:60:60:f2:54:dc:c0:94:ec:ec:9c:93:d1:aa:
         96:14:ca:ee:d0:9a:62:6e:a3:6f:d2:fa:9c:23:34:3c:e0:b6:
         0c:37:f1:3b:47:bb:80:87:61:6c:de:4c:51:23:0e:5a:43:71:
         60:4a:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org