Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LV6_v5RsAgvkWB6kdGdRnifZF_o.roa
File:                     LV6_v5RsAgvkWB6kdGdRnifZF_o.roa (raw, json)
Hash identifier:          c8KqfrVebbOG7ixQlGn3kht3/AJrVK5MAx10deWz12Y=
Subject key identifier:   2D:5E:BF:BF:94:6C:02:0B:E4:58:1E:A4:74:67:51:9E:27:D9:17:FA
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01903528A5EE626A98F59879847CB23C3C00
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LV6_v5RsAgvkWB6kdGdRnifZF_o.roa
Signing time:             Thu 20 Jun 2024 10:19:34 +0000
ROA not before:           Thu 20 Jun 2024 10:19:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     28964
IP address blocks:        77.105.8.0/24 maxlen: 24
                          77.105.39.0/24 maxlen: 24
                          79.175.66.0/24 maxlen: 24
                          79.175.85.0/24 maxlen: 24
                          79.175.120.0/24 maxlen: 24
                          81.18.51.0/24 maxlen: 24
                          81.18.56.0/24 maxlen: 24
                          81.18.57.0/24 maxlen: 24
                          81.18.58.0/24 maxlen: 24
                          81.18.63.0/24 maxlen: 24
                          93.186.65.0/24 maxlen: 24
                          93.186.77.0/24 maxlen: 24
                          109.121.48.0/24 maxlen: 24
                          109.121.49.0/24 maxlen: 24
                          109.121.53.0/24 maxlen: 24
                          109.121.55.0/24 maxlen: 24
                          178.219.2.0/24 maxlen: 24
                          178.253.212.0/24 maxlen: 24
                          178.253.216.0/24 maxlen: 24
                          178.253.217.0/24 maxlen: 24
                          178.253.218.0/24 maxlen: 24
                          178.253.220.0/23 maxlen: 23
                          178.253.232.0/24 maxlen: 24
                          178.253.235.0/24 maxlen: 24
                          178.253.238.0/24 maxlen: 24
                          178.253.245.0/24 maxlen: 24
                          178.253.246.0/24 maxlen: 24
                          188.255.179.0/24 maxlen: 24
                          188.255.190.0/24 maxlen: 24
                          188.255.192.0/23 maxlen: 23
                          188.255.195.0/24 maxlen: 24
                          188.255.196.0/22 maxlen: 22
                          188.255.207.0/24 maxlen: 24
                          188.255.217.0/24 maxlen: 24
                          188.255.228.0/24 maxlen: 24
                          188.255.230.0/23 maxlen: 23
                          188.255.253.0/24 maxlen: 24
                          212.69.2.0/24 maxlen: 24
                          212.69.3.0/24 maxlen: 24
                          212.69.4.0/24 maxlen: 24
                          212.69.5.0/24 maxlen: 24
                          212.69.19.0/24 maxlen: 24
                          212.69.21.0/24 maxlen: 24
                          212.69.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 20:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:28:a5:ee:62:6a:98:f5:98:79:84:7c:b2:3c:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun 20 10:19:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2d5ebfbf946c020be4581ea47467519e27d917fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:6e:7a:6b:cb:69:45:1c:40:72:3b:60:58:
                    63:0f:9b:be:9c:dd:99:01:a8:31:c4:d1:cc:d5:e8:
                    f3:12:c0:05:a4:b9:3d:53:89:d0:3d:3f:a9:9f:8f:
                    1a:83:a2:d3:d1:0f:8a:b4:6d:02:9a:77:a1:3e:73:
                    4a:97:3f:92:b3:ee:b3:46:59:d2:80:5c:c6:d2:f3:
                    23:39:46:2f:e9:f6:45:d1:ac:bb:2f:23:b8:2f:51:
                    8c:ca:da:97:57:da:51:fc:1c:c5:e3:9f:c5:e5:ff:
                    e1:18:55:cc:dd:d5:9d:62:af:a3:3a:d0:22:e5:93:
                    f8:60:08:a5:ee:ec:f9:c8:5b:b9:05:6b:7e:30:da:
                    fc:97:0a:16:28:43:d1:b6:18:98:ee:80:d2:b3:4e:
                    1a:7b:37:fd:75:c5:49:18:b7:7b:93:c9:32:60:91:
                    23:28:7e:f5:4e:48:cd:92:4e:f5:ba:13:9f:c7:f0:
                    dc:7e:21:ce:fd:8b:5a:62:1f:bb:48:38:32:27:26:
                    ad:76:69:80:14:ea:5c:39:27:c3:93:04:89:b9:1c:
                    67:3e:7a:c3:e7:52:d7:d1:49:5d:45:4f:c6:00:86:
                    0d:dd:b4:93:25:30:d7:53:a7:b9:be:91:9e:ed:e0:
                    74:e8:9a:17:1f:8f:e9:7a:88:b7:85:0e:3c:ac:64:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:BF:BF:94:6C:02:0B:E4:58:1E:A4:74:67:51:9E:27:D9:17:FA
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LV6_v5RsAgvkWB6kdGdRnifZF_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.8.0/24
                  77.105.39.0/24
                  79.175.66.0/24
                  79.175.85.0/24
                  79.175.120.0/24
                  81.18.51.0/24
                  81.18.56.0-81.18.58.255
                  81.18.63.0/24
                  93.186.65.0/24
                  93.186.77.0/24
                  109.121.48.0/23
                  109.121.53.0/24
                  109.121.55.0/24
                  178.219.2.0/24
                  178.253.212.0/24
                  178.253.216.0-178.253.218.255
                  178.253.220.0/23
                  178.253.232.0/24
                  178.253.235.0/24
                  178.253.238.0/24
                  178.253.245.0-178.253.246.255
                  188.255.179.0/24
                  188.255.190.0/24
                  188.255.192.0/23
                  188.255.195.0-188.255.199.255
                  188.255.207.0/24
                  188.255.217.0/24
                  188.255.228.0/24
                  188.255.230.0/23
                  188.255.253.0/24
                  212.69.2.0-212.69.5.255
                  212.69.19.0/24
                  212.69.21.0/24
                  212.69.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:75:42:d5:5a:b4:95:5a:f0:cd:c1:f0:91:c1:f4:7a:bd:2e:
         35:a3:75:6d:9d:ac:12:82:1e:4b:34:16:1d:49:fb:ee:c0:3e:
         47:aa:5d:44:7f:34:65:b8:1c:22:49:ea:72:e5:e8:a4:27:60:
         f7:18:e5:cd:34:04:0e:fd:dc:99:a7:3c:1c:ef:c7:e7:cf:42:
         af:61:1a:83:37:3d:18:af:4d:b9:40:e8:0c:ed:d2:e3:fe:cd:
         1c:2b:79:a5:c0:28:b4:c4:2f:59:1c:e5:54:6c:29:21:cb:8f:
         06:fa:86:6e:f7:58:c9:e5:eb:27:bf:e4:63:51:ba:8f:5d:87:
         0c:19:25:93:3d:b3:72:cf:ff:61:bf:d3:5e:7f:ae:92:18:5a:
         75:ed:4d:be:2e:60:53:7f:37:e1:6b:51:d5:34:2f:71:46:87:
         91:e8:4d:8f:99:de:14:41:0e:49:ab:d8:84:7a:4f:2d:21:5b:
         1a:d6:7b:f3:dc:c3:24:2a:ec:be:d7:d6:ae:74:69:39:28:76:
         5f:59:00:05:94:38:78:30:ed:77:23:2b:30:4e:95:97:de:22:
         ec:51:4b:77:67:3d:d1:1a:e0:f3:81:07:e6:c8:b7:7a:ba:75:
         ad:a3:fe:e6:b5:49:17:b7:fc:7c:2b:c3:9c:17:37:31:82:9c:
         51:cb:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:23:26 2024 by rpki-client on console-ams.rpki-client.org