Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JeyWM7x3fGIHJRDn91JL2gC1Gp0.roa
File:                     JeyWM7x3fGIHJRDn91JL2gC1Gp0.roa (raw, json)
Hash identifier:          4WyGHwo5bQXxi3rOyLFkuf4Je8jDvTrQLqGZaZO+OdQ=
Subject key identifier:   25:EC:96:33:BC:77:7C:62:07:25:10:E7:F7:52:4B:DA:00:B5:1A:9D
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018E2D6DFBF36C5C2719C5FCFA12663059D7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JeyWM7x3fGIHJRDn91JL2gC1Gp0.roa
Signing time:             Mon 11 Mar 2024 12:12:46 +0000
ROA not before:           Mon 11 Mar 2024 12:12:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        5.1.46.0/24 maxlen: 24
                          31.216.60.0/24 maxlen: 24
                          31.222.237.0/24 maxlen: 24
                          31.222.246.0/24 maxlen: 24
                          37.140.255.0/24 maxlen: 24
                          45.84.178.0/24 maxlen: 24
                          45.129.1.0/24 maxlen: 24
                          45.129.129.0/24 maxlen: 24
                          45.129.130.0/24 maxlen: 24
                          45.129.131.0/24 maxlen: 24
                          45.132.51.0/24 maxlen: 24
                          45.135.34.0/24 maxlen: 24
                          45.138.4.0/24 maxlen: 24
                          45.138.5.0/24 maxlen: 24
                          45.138.6.0/24 maxlen: 24
                          45.138.156.0/24 maxlen: 24
                          45.138.159.0/24 maxlen: 24
                          45.140.66.0/24 maxlen: 24
                          45.140.67.0/24 maxlen: 24
                          45.142.37.0/24 maxlen: 24
                          45.144.0.0/24 maxlen: 24
                          45.146.26.0/24 maxlen: 24
                          45.159.85.0/24 maxlen: 24
                          62.3.4.0/24 maxlen: 24
                          62.3.23.0/24 maxlen: 24
                          62.106.69.0/24 maxlen: 24
                          62.204.38.0/24 maxlen: 24
                          77.246.244.0/24 maxlen: 24
                          80.68.148.0/24 maxlen: 24
                          80.68.150.0/24 maxlen: 24
                          80.73.242.0/24 maxlen: 24
                          80.73.244.0/24 maxlen: 24
                          80.91.212.0/24 maxlen: 24
                          84.246.81.0/24 maxlen: 24
                          89.107.12.0/24 maxlen: 24
                          89.248.68.0/24 maxlen: 24
                          91.242.237.0/24 maxlen: 24
                          91.247.78.0/24 maxlen: 24
                          92.119.192.0/24 maxlen: 24
                          93.93.206.0/24 maxlen: 24
                          93.157.111.0/24 maxlen: 24
                          93.190.120.0/24 maxlen: 24
                          94.103.179.0/24 maxlen: 24
                          94.103.190.0/24 maxlen: 24
                          94.124.75.0/24 maxlen: 24
                          94.124.77.0/24 maxlen: 24
                          94.143.224.0/24 maxlen: 24
                          146.19.10.0/24 maxlen: 24
                          146.19.15.0/24 maxlen: 24
                          146.19.25.0/24 maxlen: 24
                          146.19.31.0/24 maxlen: 24
                          146.19.64.0/24 maxlen: 24
                          146.19.68.0/24 maxlen: 24
                          146.19.72.0/24 maxlen: 24
                          146.19.76.0/24 maxlen: 24
                          146.19.96.0/24 maxlen: 24
                          146.19.107.0/24 maxlen: 24
                          146.19.126.0/24 maxlen: 24
                          176.100.47.0/24 maxlen: 24
                          176.116.8.0/24 maxlen: 24
                          176.116.12.0/24 maxlen: 24
                          176.116.24.0/24 maxlen: 24
                          176.222.58.0/24 maxlen: 24
                          178.212.136.0/24 maxlen: 24
                          178.212.138.0/24 maxlen: 24
                          185.81.71.0/24 maxlen: 24
                          185.140.174.0/24 maxlen: 24
                          185.187.16.0/24 maxlen: 24
                          185.207.213.0/24 maxlen: 24
                          185.222.41.0/24 maxlen: 24
                          193.32.164.0/24 maxlen: 24
                          193.32.165.0/24 maxlen: 24
                          193.32.166.0/24 maxlen: 24
                          193.32.167.0/24 maxlen: 24
                          193.36.231.0/24 maxlen: 24
                          193.53.169.0/24 maxlen: 24
                          193.58.176.0/24 maxlen: 24
                          193.58.177.0/24 maxlen: 24
                          193.160.216.0/24 maxlen: 24
                          193.160.217.0/24 maxlen: 24
                          193.160.218.0/24 maxlen: 24
                          193.163.16.0/24 maxlen: 24
                          193.163.18.0/24 maxlen: 24
                          193.201.127.0/24 maxlen: 24
                          194.26.136.0/24 maxlen: 24
                          194.26.233.0/24 maxlen: 24
                          194.104.142.0/24 maxlen: 24
                          194.104.238.0/24 maxlen: 24
                          195.64.111.0/24 maxlen: 24
                          195.96.149.0/24 maxlen: 24
                          195.225.99.0/24 maxlen: 24
                          212.52.27.0/24 maxlen: 24
                          212.52.31.0/24 maxlen: 24
                          213.109.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 15:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2d:6d:fb:f3:6c:5c:27:19:c5:fc:fa:12:66:30:59:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Mar 11 12:12:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=25ec9633bc777c62072510e7f7524bda00b51a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:54:a9:67:a8:06:93:22:33:d0:f7:cc:02:
                    14:99:20:cb:0f:bf:fc:3c:41:c8:5c:c3:9c:7e:93:
                    83:d5:65:2e:35:7e:19:16:6f:dd:95:e8:ad:1a:06:
                    00:a5:6d:f3:66:1c:0c:2b:4e:7e:bd:e8:7d:d0:f7:
                    94:60:4e:a4:06:4d:8a:33:cd:49:e3:08:16:ea:b1:
                    a8:10:34:18:8e:b1:12:7a:0b:99:4f:7a:27:35:86:
                    4e:98:f1:b3:ad:ea:fa:31:9b:b8:be:e2:ca:3e:58:
                    00:be:a4:45:d8:78:bc:50:0f:f9:5f:9a:08:f5:22:
                    fa:ab:27:82:9a:37:ec:2b:b6:c6:d4:a4:46:a4:63:
                    cd:a3:55:94:6e:7f:bc:30:29:69:f6:f5:51:11:86:
                    11:54:1f:7b:ce:4d:21:0d:9c:cf:05:3c:ae:3d:f3:
                    79:78:d0:88:54:d6:9f:1e:02:01:45:cd:3e:26:e7:
                    8a:33:71:ab:2c:03:64:e1:3f:fe:05:a8:4c:19:44:
                    e9:15:de:d6:4d:69:94:73:10:0d:94:34:ea:cc:03:
                    7c:83:d5:c8:5a:74:f3:e4:6a:da:3e:0b:5f:98:ff:
                    05:c0:76:8c:cd:4f:a2:88:e0:f1:2e:65:5f:0e:bb:
                    9b:9b:4d:46:87:9a:1c:00:f7:56:13:c2:fa:93:43:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EC:96:33:BC:77:7C:62:07:25:10:E7:F7:52:4B:DA:00:B5:1A:9D
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JeyWM7x3fGIHJRDn91JL2gC1Gp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.46.0/24
                  31.216.60.0/24
                  31.222.237.0/24
                  31.222.246.0/24
                  37.140.255.0/24
                  45.84.178.0/24
                  45.129.1.0/24
                  45.129.129.0-45.129.131.255
                  45.132.51.0/24
                  45.135.34.0/24
                  45.138.4.0-45.138.6.255
                  45.138.156.0/24
                  45.138.159.0/24
                  45.140.66.0/23
                  45.142.37.0/24
                  45.144.0.0/24
                  45.146.26.0/24
                  45.159.85.0/24
                  62.3.4.0/24
                  62.3.23.0/24
                  62.106.69.0/24
                  62.204.38.0/24
                  77.246.244.0/24
                  80.68.148.0/24
                  80.68.150.0/24
                  80.73.242.0/24
                  80.73.244.0/24
                  80.91.212.0/24
                  84.246.81.0/24
                  89.107.12.0/24
                  89.248.68.0/24
                  91.242.237.0/24
                  91.247.78.0/24
                  92.119.192.0/24
                  93.93.206.0/24
                  93.157.111.0/24
                  93.190.120.0/24
                  94.103.179.0/24
                  94.103.190.0/24
                  94.124.75.0/24
                  94.124.77.0/24
                  94.143.224.0/24
                  146.19.10.0/24
                  146.19.15.0/24
                  146.19.25.0/24
                  146.19.31.0/24
                  146.19.64.0/24
                  146.19.68.0/24
                  146.19.72.0/24
                  146.19.76.0/24
                  146.19.96.0/24
                  146.19.107.0/24
                  146.19.126.0/24
                  176.100.47.0/24
                  176.116.8.0/24
                  176.116.12.0/24
                  176.116.24.0/24
                  176.222.58.0/24
                  178.212.136.0/24
                  178.212.138.0/24
                  185.81.71.0/24
                  185.140.174.0/24
                  185.187.16.0/24
                  185.207.213.0/24
                  185.222.41.0/24
                  193.32.164.0/22
                  193.36.231.0/24
                  193.53.169.0/24
                  193.58.176.0/23
                  193.160.216.0-193.160.218.255
                  193.163.16.0/24
                  193.163.18.0/24
                  193.201.127.0/24
                  194.26.136.0/24
                  194.26.233.0/24
                  194.104.142.0/24
                  194.104.238.0/24
                  195.64.111.0/24
                  195.96.149.0/24
                  195.225.99.0/24
                  212.52.27.0/24
                  212.52.31.0/24
                  213.109.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:dc:f2:07:c7:b8:9f:3d:9e:64:02:91:33:37:59:5d:b6:
         ef:78:20:a4:8d:09:58:75:5c:88:38:a1:e9:d5:5b:26:3b:a8:
         ba:4b:87:9b:ce:21:a4:6b:0a:5e:33:bb:6d:94:59:30:fa:b6:
         7a:a2:c3:20:14:ff:03:63:29:09:cc:19:4a:9c:a4:cf:55:1f:
         a8:23:aa:ad:56:db:04:5b:88:22:d6:c6:0c:83:30:d5:b0:9f:
         27:13:cf:e1:27:18:1d:68:9e:31:c2:92:e0:a2:d8:53:18:2c:
         40:d8:ec:cd:ec:db:1a:36:2a:fc:69:de:a0:ea:6d:c4:5e:8a:
         72:01:3b:d0:b5:8b:8f:a5:0a:86:c0:fd:c2:f5:2c:8c:37:06:
         87:28:e1:76:cf:14:15:1e:4c:f9:81:ac:23:15:e4:67:05:0f:
         f5:52:49:f4:f3:ca:6c:08:07:bd:49:62:e2:c1:05:ec:23:04:
         15:ef:89:14:ff:73:82:4c:69:37:2d:9e:39:e9:20:19:0a:d0:
         83:0b:57:bb:c0:14:a7:b5:23:1b:79:cf:18:72:1a:1f:4e:f4:
         47:fd:6f:64:ee:00:ec:d6:35:bf:9b:76:ef:7d:88:a3:4a:71:
         f2:ec:2d:55:12:2a:8a:d8:dc:6a:22:e2:6c:ea:68:84:48:93:
         bd:3b:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:24:02 2024 by rpki-client on console-fra.rpki-client.org