Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6Rlwy2_5_IY8l-qz4d5DYK8cFXk.roa
File:                     6Rlwy2_5_IY8l-qz4d5DYK8cFXk.roa (raw, json)
Hash identifier:          iKOqEPNgF7WzjIag1CGDNAmOpBkChODMlvVgcGfO/sY=
Subject key identifier:   E9:19:70:CB:6F:F9:FC:86:3C:97:EA:B3:E1:DE:43:60:AF:1C:15:79
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018F9B0A0E4D027F3DD59A80C90819FB4409
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6Rlwy2_5_IY8l-qz4d5DYK8cFXk.roa
Signing time:             Tue 21 May 2024 12:04:38 +0000
ROA not before:           Tue 21 May 2024 12:04:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        2.56.112.0/24 maxlen: 24
                          2.56.113.0/24 maxlen: 24
                          5.183.128.0/24 maxlen: 24
                          31.222.248.0/24 maxlen: 24
                          45.157.136.0/24 maxlen: 24
                          62.68.83.0/24 maxlen: 24
                          62.68.86.0/24 maxlen: 24
                          62.68.87.0/24 maxlen: 24
                          62.204.36.0/24 maxlen: 24
                          62.204.57.0/24 maxlen: 24
                          62.233.35.0/24 maxlen: 24
                          62.233.45.0/24 maxlen: 24
                          62.233.49.0/24 maxlen: 24
                          62.233.56.0/24 maxlen: 24
                          62.233.60.0/24 maxlen: 24
                          80.68.145.0/24 maxlen: 24
                          80.68.158.0/24 maxlen: 24
                          80.91.209.0/24 maxlen: 24
                          80.91.210.0/24 maxlen: 24
                          91.213.117.0/24 maxlen: 24
                          91.226.247.0/24 maxlen: 24
                          91.242.225.0/24 maxlen: 24
                          91.242.227.0/24 maxlen: 24
                          91.242.236.0/24 maxlen: 24
                          91.242.238.0/24 maxlen: 24
                          93.177.104.0/24 maxlen: 24
                          93.177.105.0/24 maxlen: 24
                          93.177.107.0/24 maxlen: 24
                          94.143.226.0/24 maxlen: 24
                          94.158.191.0/24 maxlen: 24
                          130.193.79.0/24 maxlen: 24
                          130.255.169.0/24 maxlen: 24
                          146.19.108.0/24 maxlen: 24
                          146.19.137.0/24 maxlen: 24
                          146.19.148.0/24 maxlen: 24
                          146.19.150.0/24 maxlen: 24
                          146.19.152.0/24 maxlen: 24
                          146.19.185.0/24 maxlen: 24
                          146.19.187.0/24 maxlen: 24
                          146.19.190.0/24 maxlen: 24
                          146.19.194.0/24 maxlen: 24
                          176.56.37.0/24 maxlen: 24
                          176.56.38.0/24 maxlen: 24
                          178.211.140.0/24 maxlen: 24
                          185.122.206.0/24 maxlen: 24
                          185.140.172.0/24 maxlen: 24
                          185.155.101.0/24 maxlen: 24
                          185.198.153.0/24 maxlen: 24
                          185.218.1.0/24 maxlen: 24
                          185.232.47.0/24 maxlen: 24
                          193.3.22.0/24 maxlen: 24
                          193.141.53.0/24 maxlen: 24
                          193.239.209.0/24 maxlen: 24
                          194.26.216.0/24 maxlen: 24
                          194.26.221.0/24 maxlen: 24
                          194.32.243.0/24 maxlen: 24
                          195.64.106.0/24 maxlen: 24
                          195.64.109.0/24 maxlen: 24
                          195.64.110.0/24 maxlen: 24
                          195.64.112.0/24 maxlen: 24
                          195.64.114.0/24 maxlen: 24
                          195.64.117.0/24 maxlen: 24
                          195.93.249.0/24 maxlen: 24
                          195.96.136.0/24 maxlen: 24
                          195.96.146.0/24 maxlen: 24
                          195.96.148.0/24 maxlen: 24
                          195.96.155.0/24 maxlen: 24
                          195.96.157.0/24 maxlen: 24
                          212.18.96.0/24 maxlen: 24
                          212.18.103.0/24 maxlen: 24
                          212.52.5.0/24 maxlen: 24
                          217.114.32.0/24 maxlen: 24
                          217.119.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 12:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:0a:0e:4d:02:7f:3d:d5:9a:80:c9:08:19:fb:44:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: May 21 12:04:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e91970cb6ff9fc863c97eab3e1de4360af1c1579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:3c:c7:47:11:d7:63:fa:3c:30:9b:c1:bb:
                    df:13:54:91:69:5d:47:80:30:a5:1d:ce:99:81:45:
                    c0:0d:1f:a9:d9:a4:ba:2e:a2:b5:c1:1f:89:8b:40:
                    b5:43:ab:8e:93:d3:91:eb:ac:e1:7b:13:cf:b1:66:
                    9a:f6:af:1b:1e:50:fe:b1:23:a1:79:af:52:80:5b:
                    57:da:dc:b4:13:de:b2:e6:21:bf:e5:df:17:63:d9:
                    53:e0:fd:a9:ce:4f:6f:1a:2a:ab:85:c8:97:51:e1:
                    63:2b:7d:04:c6:9a:ce:d9:0a:d2:a5:18:b9:73:dc:
                    92:fa:77:1a:aa:bd:e9:73:ef:46:3a:ea:a4:91:88:
                    aa:60:51:77:93:87:16:4b:7f:4f:49:f9:5d:da:07:
                    b5:98:7e:a6:51:9b:16:8e:af:eb:73:4f:6e:5b:e4:
                    15:4c:41:8b:01:b6:2c:07:d5:3c:66:82:ac:73:51:
                    6e:5e:ae:e2:dc:c7:47:df:a1:19:b5:e3:24:3c:f9:
                    1d:9b:f3:4a:72:28:f0:b7:29:a9:a5:05:aa:a5:b7:
                    39:53:26:c9:c7:e3:ba:8e:48:3f:cc:65:a0:e8:fd:
                    c3:4a:3d:28:0d:7a:b8:c0:30:05:3d:a3:de:61:6e:
                    0e:a5:61:69:a1:30:7d:a2:de:d2:e9:1b:56:b2:07:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:19:70:CB:6F:F9:FC:86:3C:97:EA:B3:E1:DE:43:60:AF:1C:15:79
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/6Rlwy2_5_IY8l-qz4d5DYK8cFXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.112.0/23
                  5.183.128.0/24
                  31.222.248.0/24
                  45.157.136.0/24
                  62.68.83.0/24
                  62.68.86.0/23
                  62.204.36.0/24
                  62.204.57.0/24
                  62.233.35.0/24
                  62.233.45.0/24
                  62.233.49.0/24
                  62.233.56.0/24
                  62.233.60.0/24
                  80.68.145.0/24
                  80.68.158.0/24
                  80.91.209.0-80.91.210.255
                  91.213.117.0/24
                  91.226.247.0/24
                  91.242.225.0/24
                  91.242.227.0/24
                  91.242.236.0/24
                  91.242.238.0/24
                  93.177.104.0/23
                  93.177.107.0/24
                  94.143.226.0/24
                  94.158.191.0/24
                  130.193.79.0/24
                  130.255.169.0/24
                  146.19.108.0/24
                  146.19.137.0/24
                  146.19.148.0/24
                  146.19.150.0/24
                  146.19.152.0/24
                  146.19.185.0/24
                  146.19.187.0/24
                  146.19.190.0/24
                  146.19.194.0/24
                  176.56.37.0-176.56.38.255
                  178.211.140.0/24
                  185.122.206.0/24
                  185.140.172.0/24
                  185.155.101.0/24
                  185.198.153.0/24
                  185.218.1.0/24
                  185.232.47.0/24
                  193.3.22.0/24
                  193.141.53.0/24
                  193.239.209.0/24
                  194.26.216.0/24
                  194.26.221.0/24
                  194.32.243.0/24
                  195.64.106.0/24
                  195.64.109.0-195.64.110.255
                  195.64.112.0/24
                  195.64.114.0/24
                  195.64.117.0/24
                  195.93.249.0/24
                  195.96.136.0/24
                  195.96.146.0/24
                  195.96.148.0/24
                  195.96.155.0/24
                  195.96.157.0/24
                  212.18.96.0/24
                  212.18.103.0/24
                  212.52.5.0/24
                  217.114.32.0/24
                  217.119.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:56:ea:5f:d5:d1:c3:75:66:a3:62:d0:1f:a2:5c:ec:2f:
         51:6b:de:9b:f8:c8:26:d4:5c:68:62:83:40:56:e7:ab:c3:3c:
         98:d1:e2:db:87:0a:d1:5f:05:da:19:e1:3b:6e:77:12:09:30:
         54:a1:c6:b2:8b:3f:4d:87:ac:5a:7f:21:0f:13:10:24:6e:04:
         87:e1:78:9e:c0:37:19:bf:04:c0:8d:c8:94:4c:11:0a:f1:02:
         5f:f7:a6:44:dd:47:dd:31:18:13:e3:fe:4c:19:6f:9b:fb:37:
         74:1a:6c:49:8f:e0:32:94:fc:b4:4a:4b:05:ec:1f:b0:63:55:
         ba:db:10:14:6a:b5:5d:39:56:03:54:6e:79:32:a2:c3:bc:0f:
         25:d8:85:51:e6:d1:45:5e:90:9f:99:76:3a:fb:6f:45:0a:38:
         4b:75:76:87:28:1a:d6:61:74:93:0b:fc:4e:d4:6b:4e:95:ba:
         41:09:31:8c:cb:79:bf:0e:8f:fd:8d:5c:38:6c:c1:24:9a:ef:
         db:e1:2d:55:02:7a:3f:85:80:06:8c:3c:aa:f1:d1:c0:3c:8f:
         62:c3:69:9e:87:4a:95:16:9b:61:7c:ac:5f:d2:13:50:2a:20:
         e6:e9:e9:5d:de:49:fd:eb:eb:cf:49:ed:42:8e:2a:9d:44:d9:
         0b:70:92:95
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgISAY+bCg5NAn891ZqAyQgZ+0QJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwNTIxMTIwNDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTE5NzBjYjZmZjlmYzg2M2M5N2VhYjNlMWRlNDM2MGFmMWMxNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs208x0cR12P6PDCbwbvfE1SRaV1H
gDClHc6ZgUXADR+p2aS6LqK1wR+Ji0C1Q6uOk9OR66zhexPPsWaa9q8bHlD+sSOh
ea9SgFtX2ty0E96y5iG/5d8XY9lT4P2pzk9vGiqrhciXUeFjK30ExprO2QrSpRi5
c9yS+ncaqr3pc+9GOuqkkYiqYFF3k4cWS39PSfld2ge1mH6mUZsWjq/rc09uW+QV
TEGLAbYsB9U8ZoKsc1FuXq7i3MdH36EZteMkPPkdm/NKcijwtymppQWqpbc5UybJ
x+O6jkg/zGWg6P3DSj0oDXq4wDAFPaPeYW4OpWFpoTB9ot7S6RtWsgcUowIDAQAB
o4IDtzCCA7MwHQYDVR0OBBYEFOkZcMtv+fyGPJfqs+HeQ2CvHBV5MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvNlJsd3kyXzVfSVk4bC1xejRkNURZSzhjRlhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBywYIKwYBBQUHAQcBAf8EggG6MIIBtjCCAbIEAgABMIIB
qgMEAQI4cAMEAAW3gAMEAB/e+AMEAC2diAMEAD5EUwMEAT5EVgMEAD7MJAMEAD7M
OQMEAD7pIwMEAD7pLQMEAD7pMQMEAD7pOAMEAD7pPAMEAFBEkQMEAFBEnjAMAwQA
UFvRAwQAUFvSAwQAW9V1AwQAW+L3AwQAW/LhAwQAW/LjAwQAW/LsAwQAW/LuAwQB
XbFoAwQAXbFrAwQAXo/iAwQAXp6/AwQAgsFPAwQAgv+pAwQAkhNsAwQAkhOJAwQA
khOUAwQAkhOWAwQAkhOYAwQAkhO5AwQAkhO7AwQAkhO+AwQAkhPCMAwDBACwOCUD
BACwOCYDBACy04wDBAC5es4DBAC5jKwDBAC5m2UDBAC5xpkDBAC52gEDBAC56C8D
BADBAxYDBADBjTUDBADB79EDBADCGtgDBADCGt0DBADCIPMDBADDQGowDAMEAMNA
bQMEAMNAbgMEAMNAcAMEAMNAcgMEAMNAdQMEAMNd+QMEAMNgiAMEAMNgkgMEAMNg
lAMEAMNgmwMEAMNgnQMEANQSYAMEANQSZwMEANQ0BQMEANlyIAMEANl3gjANBgkq
hkiG9w0BAQsFAAOCAQEACeNW6l/V0cN1ZqNi0B+iXOwvUWvem/jIJtRcaGKDQFbn
q8M8mNHi24cK0V8F2hnhO253EgkwVKHGsos/TYesWn8hDxMQJG4Eh+F4nsA3Gb8E
wI3IlEwRCvECX/emRN1H3TEYE+P+TBlvm/s3dBpsSY/gMpT8tEpLBewfsGNVutsQ
FGq1XTlWA1RueTKiw7wPJdiFUebRRV6Qn5l2OvtvRQo4S3V2hyga1mF0kwv8TtRr
TpW6QQkxjMt5vw6P/Y1cOGzBJJrv2+EtVQJ6P4WABow8qvHRwDyPYsNpnodKlRab
YXysX9ITUCog5unpXd5J/evrz0ntQo4qnUTZC3CSlQ==
-----END CERTIFICATE-----
Generated at Mon Jun 24 16:22:17 2024 by rpki-client on console-ams.rpki-client.org