Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Syvlp_rknLvsDKrIvrAsl7qb8ww.roa
File:                     Syvlp_rknLvsDKrIvrAsl7qb8ww.roa (raw, json)
Hash identifier:          8QZoy+G8ta8fiicwbgTACLkgno6jbxCxWD0m4FE4eJU=
Subject key identifier:   4B:2B:E5:A7:FA:E4:9C:BB:EC:0C:AA:C8:BE:B0:2C:97:BA:9B:F3:0C
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018DF412CD68EEC3FEDF6CFAAC82A31FC9F4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Syvlp_rknLvsDKrIvrAsl7qb8ww.roa
Signing time:             Thu 29 Feb 2024 08:54:49 +0000
ROA not before:           Thu 29 Feb 2024 08:54:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        5.1.46.0/24 maxlen: 24
                          31.216.60.0/24 maxlen: 24
                          31.222.237.0/24 maxlen: 24
                          37.140.255.0/24 maxlen: 24
                          45.84.178.0/24 maxlen: 24
                          45.129.1.0/24 maxlen: 24
                          45.129.129.0/24 maxlen: 24
                          45.129.130.0/24 maxlen: 24
                          45.129.131.0/24 maxlen: 24
                          45.132.51.0/24 maxlen: 24
                          45.135.34.0/24 maxlen: 24
                          45.138.4.0/24 maxlen: 24
                          45.138.5.0/24 maxlen: 24
                          45.138.6.0/24 maxlen: 24
                          45.138.156.0/24 maxlen: 24
                          45.138.159.0/24 maxlen: 24
                          45.140.66.0/24 maxlen: 24
                          45.140.67.0/24 maxlen: 24
                          45.142.37.0/24 maxlen: 24
                          45.144.0.0/24 maxlen: 24
                          45.146.26.0/24 maxlen: 24
                          45.159.85.0/24 maxlen: 24
                          62.3.4.0/24 maxlen: 24
                          62.3.23.0/24 maxlen: 24
                          62.106.69.0/24 maxlen: 24
                          62.204.38.0/24 maxlen: 24
                          77.246.244.0/24 maxlen: 24
                          80.68.148.0/24 maxlen: 24
                          80.68.150.0/24 maxlen: 24
                          80.73.242.0/24 maxlen: 24
                          80.73.244.0/24 maxlen: 24
                          84.246.81.0/24 maxlen: 24
                          89.107.12.0/24 maxlen: 24
                          89.248.68.0/24 maxlen: 24
                          91.247.78.0/24 maxlen: 24
                          92.119.192.0/24 maxlen: 24
                          93.93.206.0/24 maxlen: 24
                          94.103.179.0/24 maxlen: 24
                          94.103.190.0/24 maxlen: 24
                          94.143.224.0/24 maxlen: 24
                          146.19.25.0/24 maxlen: 24
                          146.19.76.0/24 maxlen: 24
                          146.19.107.0/24 maxlen: 24
                          176.100.47.0/24 maxlen: 24
                          176.116.12.0/24 maxlen: 24
                          176.222.58.0/24 maxlen: 24
                          178.212.136.0/24 maxlen: 24
                          185.81.71.0/24 maxlen: 24
                          185.207.213.0/24 maxlen: 24
                          185.222.41.0/24 maxlen: 24
                          193.32.164.0/24 maxlen: 24
                          193.32.165.0/24 maxlen: 24
                          193.32.166.0/24 maxlen: 24
                          193.32.167.0/24 maxlen: 24
                          193.36.231.0/24 maxlen: 24
                          193.53.169.0/24 maxlen: 24
                          193.58.176.0/24 maxlen: 24
                          193.58.177.0/24 maxlen: 24
                          193.160.216.0/24 maxlen: 24
                          193.160.217.0/24 maxlen: 24
                          193.160.218.0/24 maxlen: 24
                          193.163.16.0/24 maxlen: 24
                          193.163.18.0/24 maxlen: 24
                          193.201.127.0/24 maxlen: 24
                          194.104.142.0/24 maxlen: 24
                          194.104.238.0/24 maxlen: 24
                          195.225.99.0/24 maxlen: 24
                          212.52.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 14:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f4:12:cd:68:ee:c3:fe:df:6c:fa:ac:82:a3:1f:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb 29 08:54:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4b2be5a7fae49cbbec0caac8beb02c97ba9bf30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:70:69:b7:e4:87:74:5c:8b:e7:5c:3a:b0:
                    33:59:f0:91:6e:13:48:27:a9:db:1f:5a:b9:d7:3b:
                    6d:a4:6e:a2:4b:e6:fb:d4:35:a6:af:92:50:aa:8c:
                    af:c2:48:90:0c:6c:a9:73:7c:fa:39:87:9a:58:8c:
                    fc:97:18:3d:1d:f5:c0:05:eb:4c:2a:46:2f:7b:b4:
                    b1:67:8c:0e:6b:c8:10:01:54:0f:63:8b:28:83:df:
                    b3:05:f9:b1:aa:01:a5:5b:d1:8b:7d:99:98:1e:b9:
                    32:64:df:90:1a:53:1b:29:50:90:77:33:8f:bb:52:
                    ca:96:99:b2:ab:8a:ef:8d:f6:60:43:3c:db:46:86:
                    50:45:23:38:e1:80:09:b1:db:52:2f:80:4e:dc:32:
                    2d:27:d7:bb:c6:85:0b:02:23:65:fc:fc:47:91:1d:
                    8e:87:34:46:2b:e9:99:62:c1:7f:97:bd:90:19:c2:
                    36:f2:96:34:9b:15:81:87:39:0e:0d:61:ba:1f:4e:
                    d0:61:c8:32:11:cc:86:23:47:14:03:2d:da:8e:12:
                    aa:cf:a9:62:f2:34:67:7e:15:e4:be:79:53:f2:1b:
                    6d:aa:05:a1:f4:ef:58:37:7e:f1:1a:a8:5b:89:e4:
                    5a:f1:a6:cd:7b:3d:f2:b2:36:81:66:61:de:bb:a8:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:E5:A7:FA:E4:9C:BB:EC:0C:AA:C8:BE:B0:2C:97:BA:9B:F3:0C
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Syvlp_rknLvsDKrIvrAsl7qb8ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.46.0/24
                  31.216.60.0/24
                  31.222.237.0/24
                  37.140.255.0/24
                  45.84.178.0/24
                  45.129.1.0/24
                  45.129.129.0-45.129.131.255
                  45.132.51.0/24
                  45.135.34.0/24
                  45.138.4.0-45.138.6.255
                  45.138.156.0/24
                  45.138.159.0/24
                  45.140.66.0/23
                  45.142.37.0/24
                  45.144.0.0/24
                  45.146.26.0/24
                  45.159.85.0/24
                  62.3.4.0/24
                  62.3.23.0/24
                  62.106.69.0/24
                  62.204.38.0/24
                  77.246.244.0/24
                  80.68.148.0/24
                  80.68.150.0/24
                  80.73.242.0/24
                  80.73.244.0/24
                  84.246.81.0/24
                  89.107.12.0/24
                  89.248.68.0/24
                  91.247.78.0/24
                  92.119.192.0/24
                  93.93.206.0/24
                  94.103.179.0/24
                  94.103.190.0/24
                  94.143.224.0/24
                  146.19.25.0/24
                  146.19.76.0/24
                  146.19.107.0/24
                  176.100.47.0/24
                  176.116.12.0/24
                  176.222.58.0/24
                  178.212.136.0/24
                  185.81.71.0/24
                  185.207.213.0/24
                  185.222.41.0/24
                  193.32.164.0/22
                  193.36.231.0/24
                  193.53.169.0/24
                  193.58.176.0/23
                  193.160.216.0-193.160.218.255
                  193.163.16.0/24
                  193.163.18.0/24
                  193.201.127.0/24
                  194.104.142.0/24
                  194.104.238.0/24
                  195.225.99.0/24
                  212.52.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:2e:ad:6a:12:f6:de:0a:12:78:93:54:85:06:b2:03:84:
         75:3f:37:bd:a9:c5:82:51:36:d8:11:fe:cb:7e:3f:6b:27:73:
         80:02:77:47:77:64:eb:e8:2c:41:fd:f7:f0:c0:82:8c:b8:f0:
         56:9e:c7:02:e3:25:0f:91:cd:bc:f7:97:b8:bb:6d:48:61:6f:
         2e:1f:e9:23:5b:72:53:71:b7:10:4e:a9:55:07:8c:f3:dc:63:
         a6:9b:a7:46:84:55:82:f0:42:9d:c1:6e:1c:40:d6:42:4b:3e:
         f7:47:10:f2:35:24:b2:77:7f:86:f1:14:96:3f:4e:f4:ac:ac:
         56:e3:99:94:a9:d2:41:60:d4:5b:b9:38:9e:23:45:d9:b8:01:
         52:21:83:50:b0:3d:c6:13:8d:7f:66:1d:3b:31:51:27:41:c9:
         f3:fc:24:ef:09:ee:47:1d:8f:74:88:b3:ae:8a:86:0b:7d:69:
         d1:95:c3:f0:e7:3a:a6:43:ea:32:50:b3:53:50:86:0c:f2:15:
         7f:3f:c6:88:14:b5:df:67:4c:a1:97:05:ce:cd:24:26:88:5d:
         51:dc:b7:e9:57:31:6d:a5:d6:82:97:f7:2f:f6:1c:e8:a0:14:
         37:da:b5:e0:42:7c:f2:e4:2b:e5:b0:89:0b:bc:a6:90:1c:25:
         96:34:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org