Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BeP4-bjbzyqmjw7ZH3xhhQQ_XRw.roa
File:                     BeP4-bjbzyqmjw7ZH3xhhQQ_XRw.roa (raw, json)
Hash identifier:          PaKjRkH4QDxbTiyhYlhbgj0IxerKr0TAkOK4jxYTsQQ=
Subject key identifier:   05:E3:F8:F9:B8:DB:CF:2A:A6:8F:0E:D9:1F:7C:61:85:04:3F:5D:1C
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018F78158130DC0694590D1F5E8E358A83D6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BeP4-bjbzyqmjw7ZH3xhhQQ_XRw.roa
Signing time:             Tue 14 May 2024 17:10:26 +0000
ROA not before:           Tue 14 May 2024 17:10:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        2.56.112.0/24 maxlen: 24
                          2.56.113.0/24 maxlen: 24
                          5.183.128.0/24 maxlen: 24
                          31.222.248.0/24 maxlen: 24
                          45.157.136.0/24 maxlen: 24
                          62.68.83.0/24 maxlen: 24
                          62.68.86.0/24 maxlen: 24
                          62.68.87.0/24 maxlen: 24
                          62.204.36.0/24 maxlen: 24
                          62.204.57.0/24 maxlen: 24
                          62.233.35.0/24 maxlen: 24
                          62.233.49.0/24 maxlen: 24
                          62.233.56.0/24 maxlen: 24
                          62.233.60.0/24 maxlen: 24
                          80.68.145.0/24 maxlen: 24
                          80.68.158.0/24 maxlen: 24
                          80.91.209.0/24 maxlen: 24
                          80.91.210.0/24 maxlen: 24
                          91.213.117.0/24 maxlen: 24
                          91.226.247.0/24 maxlen: 24
                          91.242.225.0/24 maxlen: 24
                          91.242.227.0/24 maxlen: 24
                          91.242.236.0/24 maxlen: 24
                          91.242.238.0/24 maxlen: 24
                          93.177.105.0/24 maxlen: 24
                          94.143.226.0/24 maxlen: 24
                          94.158.191.0/24 maxlen: 24
                          130.193.79.0/24 maxlen: 24
                          130.255.169.0/24 maxlen: 24
                          146.19.137.0/24 maxlen: 24
                          146.19.148.0/24 maxlen: 24
                          146.19.150.0/24 maxlen: 24
                          146.19.152.0/24 maxlen: 24
                          146.19.185.0/24 maxlen: 24
                          146.19.187.0/24 maxlen: 24
                          146.19.190.0/24 maxlen: 24
                          146.19.194.0/24 maxlen: 24
                          176.56.38.0/24 maxlen: 24
                          178.211.140.0/24 maxlen: 24
                          185.122.206.0/24 maxlen: 24
                          185.140.172.0/24 maxlen: 24
                          185.155.101.0/24 maxlen: 24
                          185.198.153.0/24 maxlen: 24
                          185.218.1.0/24 maxlen: 24
                          185.232.47.0/24 maxlen: 24
                          193.3.22.0/24 maxlen: 24
                          193.141.53.0/24 maxlen: 24
                          193.239.209.0/24 maxlen: 24
                          194.26.216.0/24 maxlen: 24
                          194.26.221.0/24 maxlen: 24
                          194.32.243.0/24 maxlen: 24
                          195.64.106.0/24 maxlen: 24
                          195.64.109.0/24 maxlen: 24
                          195.64.110.0/24 maxlen: 24
                          195.64.112.0/24 maxlen: 24
                          195.64.114.0/24 maxlen: 24
                          195.64.117.0/24 maxlen: 24
                          195.93.249.0/24 maxlen: 24
                          195.96.136.0/24 maxlen: 24
                          195.96.146.0/24 maxlen: 24
                          195.96.155.0/24 maxlen: 24
                          195.96.157.0/24 maxlen: 24
                          212.18.96.0/24 maxlen: 24
                          212.18.103.0/24 maxlen: 24
                          212.52.5.0/24 maxlen: 24
                          217.114.32.0/24 maxlen: 24
                          217.119.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 15:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:78:15:81:30:dc:06:94:59:0d:1f:5e:8e:35:8a:83:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: May 14 17:10:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=05e3f8f9b8dbcf2aa68f0ed91f7c6185043f5d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:1b:3b:05:9c:52:9d:b9:81:21:1d:97:9a:
                    57:5a:8a:60:98:cd:09:e6:09:ac:ee:5c:7f:b2:48:
                    db:c2:6b:01:3b:a3:df:dc:94:f1:15:b4:4f:de:d4:
                    9f:a6:ae:d6:5f:9a:7b:6a:41:c1:4c:94:cf:c3:dd:
                    d4:86:e0:dd:e1:6f:11:33:d7:9e:7e:e9:8e:fa:73:
                    a3:b7:4d:b8:4c:7a:1d:30:12:00:e0:7f:13:2a:80:
                    c6:c9:a0:18:0a:86:0c:ef:93:c0:f2:67:1a:73:48:
                    53:0c:e7:b3:c1:68:db:b6:ce:97:38:68:a2:aa:ac:
                    1e:ac:75:3d:c2:78:fe:00:24:76:07:2b:b8:c6:68:
                    3a:9b:bb:b6:a9:26:79:04:e0:66:30:ee:bb:c8:d1:
                    56:3f:e6:2d:a1:ad:52:d0:d8:71:75:36:2e:0e:b6:
                    9c:a2:da:3f:ab:42:d1:47:85:ad:a3:f8:54:1f:99:
                    97:dd:6a:f8:2d:0b:c8:74:39:d8:c2:a1:b7:a3:50:
                    c3:59:23:24:01:e5:f3:11:8d:b0:bb:be:68:54:fc:
                    c0:57:e5:4c:25:4c:1a:26:de:fa:ae:66:fc:93:df:
                    40:43:16:02:79:3a:b6:1c:d9:bc:e2:99:18:57:d1:
                    3c:cb:2f:31:c4:0f:47:31:ff:38:39:f7:fc:cf:06:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:F8:F9:B8:DB:CF:2A:A6:8F:0E:D9:1F:7C:61:85:04:3F:5D:1C
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BeP4-bjbzyqmjw7ZH3xhhQQ_XRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.112.0/23
                  5.183.128.0/24
                  31.222.248.0/24
                  45.157.136.0/24
                  62.68.83.0/24
                  62.68.86.0/23
                  62.204.36.0/24
                  62.204.57.0/24
                  62.233.35.0/24
                  62.233.49.0/24
                  62.233.56.0/24
                  62.233.60.0/24
                  80.68.145.0/24
                  80.68.158.0/24
                  80.91.209.0-80.91.210.255
                  91.213.117.0/24
                  91.226.247.0/24
                  91.242.225.0/24
                  91.242.227.0/24
                  91.242.236.0/24
                  91.242.238.0/24
                  93.177.105.0/24
                  94.143.226.0/24
                  94.158.191.0/24
                  130.193.79.0/24
                  130.255.169.0/24
                  146.19.137.0/24
                  146.19.148.0/24
                  146.19.150.0/24
                  146.19.152.0/24
                  146.19.185.0/24
                  146.19.187.0/24
                  146.19.190.0/24
                  146.19.194.0/24
                  176.56.38.0/24
                  178.211.140.0/24
                  185.122.206.0/24
                  185.140.172.0/24
                  185.155.101.0/24
                  185.198.153.0/24
                  185.218.1.0/24
                  185.232.47.0/24
                  193.3.22.0/24
                  193.141.53.0/24
                  193.239.209.0/24
                  194.26.216.0/24
                  194.26.221.0/24
                  194.32.243.0/24
                  195.64.106.0/24
                  195.64.109.0-195.64.110.255
                  195.64.112.0/24
                  195.64.114.0/24
                  195.64.117.0/24
                  195.93.249.0/24
                  195.96.136.0/24
                  195.96.146.0/24
                  195.96.155.0/24
                  195.96.157.0/24
                  212.18.96.0/24
                  212.18.103.0/24
                  212.52.5.0/24
                  217.114.32.0/24
                  217.119.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:79:73:66:5c:a1:78:ed:1a:fa:73:b7:85:0b:92:94:64:bd:
         f8:fc:2c:41:4c:42:9d:19:26:98:d7:ef:be:c1:3a:24:1a:89:
         17:1d:c4:fb:47:34:c7:10:24:dc:ef:5f:b6:a8:69:24:5b:19:
         ec:21:68:dd:e1:f2:cc:d0:8b:39:52:78:17:17:e8:6c:94:72:
         66:3c:4a:70:d8:a8:bc:0d:08:57:94:4c:48:ea:75:d1:73:ea:
         31:84:8d:cf:18:aa:c5:ed:8e:73:3b:61:f4:a3:e5:1e:4c:ad:
         e3:1b:ec:ce:3a:8e:1f:25:4f:f2:3d:ec:f7:75:93:41:a1:2d:
         c0:2c:29:fc:b1:86:6e:24:b0:a9:3a:90:60:17:90:4d:b7:d6:
         df:72:56:53:82:83:de:28:de:df:08:78:88:97:74:fe:d3:97:
         fb:bd:a1:97:42:61:cc:bd:a8:67:32:9d:4d:9f:0e:03:74:11:
         f4:06:38:2f:2b:7f:f0:ed:74:e0:ef:b3:b8:ef:d0:f6:60:0b:
         65:35:a9:c2:61:c1:0e:d9:9b:f0:65:b3:57:4f:73:e5:9a:c3:
         86:82:ea:93:1e:f0:fd:66:83:8a:a5:43:ca:d5:e6:58:f5:3a:
         f5:52:c0:80:60:74:97:f3:23:8a:17:e7:aa:ab:17:62:98:d0:
         d6:e4:b7:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org