Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa
File:                     1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa (raw, json)
Hash identifier:          PNRPMSIUpp6GPhrTYreveKoxSnIrjP16/haDVMXMoLA=
Subject key identifier:   F8:0E:4F:FE:CE:0B:B8:A8:E4:5E:90:3A:8D:9A:9D:23:A6:74:9F:5B
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018DC28044C816D3255F590E95301E172269
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa
Signing time:             Mon 19 Feb 2024 17:53:22 +0000
ROA not before:           Mon 19 Feb 2024 17:53:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        45.84.178.0/24 maxlen: 24
                          45.129.1.0/24 maxlen: 24
                          45.129.129.0/24 maxlen: 24
                          45.129.130.0/24 maxlen: 24
                          45.129.131.0/24 maxlen: 24
                          45.132.51.0/24 maxlen: 24
                          45.138.4.0/24 maxlen: 24
                          45.138.5.0/24 maxlen: 24
                          45.138.6.0/24 maxlen: 24
                          45.142.37.0/24 maxlen: 24
                          45.146.26.0/24 maxlen: 24
                          45.159.85.0/24 maxlen: 24
                          62.3.23.0/24 maxlen: 24
                          80.68.148.0/24 maxlen: 24
                          80.68.150.0/24 maxlen: 24
                          91.247.78.0/24 maxlen: 24
                          92.119.192.0/24 maxlen: 24
                          93.93.206.0/24 maxlen: 24
                          94.103.179.0/24 maxlen: 24
                          146.19.76.0/24 maxlen: 24
                          176.222.58.0/24 maxlen: 24
                          185.81.71.0/24 maxlen: 24
                          185.207.213.0/24 maxlen: 24
                          185.222.41.0/24 maxlen: 24
                          193.32.164.0/24 maxlen: 24
                          193.32.165.0/24 maxlen: 24
                          193.32.166.0/24 maxlen: 24
                          193.32.167.0/24 maxlen: 24
                          193.36.231.0/24 maxlen: 24
                          193.53.169.0/24 maxlen: 24
                          193.58.176.0/24 maxlen: 24
                          193.58.177.0/24 maxlen: 24
                          193.163.16.0/24 maxlen: 24
                          195.225.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c2:80:44:c8:16:d3:25:5f:59:0e:95:30:1e:17:22:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb 19 17:53:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f80e4ffece0bb8a8e45e903a8d9a9d23a6749f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:14:1f:15:5d:48:49:19:b5:77:da:b7:98:
                    66:04:42:78:a3:db:0c:9b:7e:9c:5d:e4:87:6a:cb:
                    18:28:d3:82:32:2b:b5:5b:e8:54:e3:48:7a:68:44:
                    9f:c3:fe:6e:e3:93:a2:79:8d:b7:47:60:ab:e6:2c:
                    ef:9d:cf:0c:c9:9d:13:cd:56:5e:88:85:24:ec:59:
                    39:28:e7:52:a4:cc:88:c9:70:85:9d:c9:29:b3:cb:
                    50:d6:d3:07:74:94:8c:8a:fd:f0:a8:7d:6b:b3:83:
                    b1:3c:d9:84:bf:ac:10:3b:1f:14:e9:21:81:17:2b:
                    e9:c5:c0:e7:07:f6:2e:9a:2b:d3:b3:b8:c7:42:af:
                    77:8b:94:dc:b5:74:2a:96:b7:ae:fa:75:79:fb:ef:
                    2a:a7:c5:82:61:17:33:bf:a5:32:53:78:23:d1:bc:
                    94:d7:ee:9e:bf:13:90:18:73:3c:10:fc:68:3b:c8:
                    02:53:64:c8:70:9a:be:1f:88:fe:17:85:35:92:3c:
                    4b:df:18:6a:50:64:e9:95:93:61:99:c2:0b:13:b5:
                    53:94:e3:2d:e8:d8:ec:dd:21:d4:26:9a:fa:b6:b7:
                    6d:38:fd:ca:d3:ff:ce:69:e5:9d:7c:a8:0d:2d:6d:
                    6e:81:98:e0:92:c5:83:c9:09:40:b0:4e:40:07:4d:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:4F:FE:CE:0B:B8:A8:E4:5E:90:3A:8D:9A:9D:23:A6:74:9F:5B
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.178.0/24
                  45.129.1.0/24
                  45.129.129.0-45.129.131.255
                  45.132.51.0/24
                  45.138.4.0-45.138.6.255
                  45.142.37.0/24
                  45.146.26.0/24
                  45.159.85.0/24
                  62.3.23.0/24
                  80.68.148.0/24
                  80.68.150.0/24
                  91.247.78.0/24
                  92.119.192.0/24
                  93.93.206.0/24
                  94.103.179.0/24
                  146.19.76.0/24
                  176.222.58.0/24
                  185.81.71.0/24
                  185.207.213.0/24
                  185.222.41.0/24
                  193.32.164.0/22
                  193.36.231.0/24
                  193.53.169.0/24
                  193.58.176.0/23
                  193.163.16.0/24
                  195.225.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:96:50:25:3b:19:b7:3e:45:f2:a2:ef:a6:c3:6a:45:59:bb:
         7e:42:38:71:d6:f4:a8:4e:5a:61:e5:f9:9a:d7:7b:6b:a3:66:
         be:90:88:cd:91:ef:8c:c4:e4:c5:03:95:ce:69:a3:cb:b4:7f:
         69:80:0e:b8:01:e4:8b:65:dd:c5:26:d7:16:f0:33:fe:31:4b:
         fd:ac:aa:1a:8f:7f:78:0c:20:0e:b4:6a:ce:11:e7:b9:09:04:
         9d:3f:de:a3:b8:7b:f8:b3:ad:c0:a7:5b:6c:a5:6b:a6:fa:dc:
         0e:26:7b:5b:4e:8c:a0:1a:57:b7:ea:7a:d9:70:78:d7:51:8b:
         e2:84:16:c7:b3:ee:9c:b6:a5:01:f5:d0:fb:b9:43:d0:de:7e:
         38:44:f7:d1:9c:85:d8:90:28:d6:24:9b:14:4c:4c:40:88:0b:
         03:60:a7:4d:89:d9:97:e1:9a:e5:d3:fc:b7:7c:fe:0f:69:b3:
         ef:1e:84:a8:37:ef:bc:38:e2:3f:54:8d:1c:58:e2:ef:44:f9:
         d0:04:b9:9d:fb:01:af:c7:f3:43:24:a9:5d:a2:20:ce:21:ab:
         bf:e5:55:a2:bf:f9:b4:34:7a:c5:23:5e:f9:0a:e5:9b:57:de:
         42:4a:03:21:1d:89:f7:aa:d6:da:46:a3:4c:f8:4d:49:c5:b2:
         28:ce:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org