Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/FCrACTpRX3lbpWZz8Qk5uScieU8.roa
File:                     FCrACTpRX3lbpWZz8Qk5uScieU8.roa (raw, json)
Hash identifier:          i/1DE5Np/KvXhZy7/kx1hwHh0ytpbbEb2zDQA3LKD+U=
Subject key identifier:   14:2A:C0:09:3A:51:5F:79:5B:A5:66:73:F1:09:39:B9:27:22:79:4F
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       018ECC4487145DF27B92662DC71FFCFE7732
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/FCrACTpRX3lbpWZz8Qk5uScieU8.roa
Signing time:             Thu 11 Apr 2024 08:27:06 +0000
ROA not before:           Thu 11 Apr 2024 08:27:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25229
IP address blocks:        77.120.0.0/20 maxlen: 21
                          77.120.4.0/24 maxlen: 24
                          77.120.6.0/24 maxlen: 24
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          77.120.52.0/22 maxlen: 23
                          77.120.60.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/20 maxlen: 21
                          77.120.96.0/19 maxlen: 20
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 24
                          77.120.192.0/21 maxlen: 24
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 24
                          77.120.211.0/24 maxlen: 24
                          77.120.212.0/23 maxlen: 24
                          77.120.214.0/23 maxlen: 24
                          77.120.216.0/22 maxlen: 23
                          77.120.220.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.240.0/20 maxlen: 21
                          77.120.248.0/21 maxlen: 22
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          77.121.12.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.17.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.27.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.64.0/21 maxlen: 22
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.96.0/20 maxlen: 21
                          77.121.112.0/20 maxlen: 21
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.192.0/19 maxlen: 20
                          77.121.192.0/20 maxlen: 21
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.122.128.0/17 maxlen: 18
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.64.0/19 maxlen: 20
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          77.123.160.0/19 maxlen: 20
                          77.244.32.0/20 maxlen: 21
                          82.144.192.0/19 maxlen: 20
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/19 maxlen: 20
                          95.69.192.0/20 maxlen: 21
                          95.69.208.0/20 maxlen: 24
                          95.69.224.0/21 maxlen: 22
                          95.69.232.0/24 maxlen: 24
                          95.69.240.0/21 maxlen: 22
                          95.69.252.0/24 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          109.201.224.0/24 maxlen: 24
                          109.201.225.0/24 maxlen: 24
                          109.201.226.0/24 maxlen: 24
                          109.201.227.0/24 maxlen: 24
                          109.201.228.0/22 maxlen: 23
                          109.201.232.0/22 maxlen: 23
                          109.201.236.0/23 maxlen: 24
                          109.201.238.0/23 maxlen: 24
                          109.201.240.0/20 maxlen: 21
                          141.170.224.0/23 maxlen: 24
                          141.170.226.0/23 maxlen: 24
                          141.170.226.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.228.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.236.0/24 maxlen: 24
                          141.170.237.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          141.170.239.0/24 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          141.170.244.0/22 maxlen: 23
                          141.170.248.0/21 maxlen: 22
                          141.170.248.0/23 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.7.0/24 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          188.230.26.0/23 maxlen: 24
                          188.230.28.0/22 maxlen: 23
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          188.230.73.0/24 maxlen: 24
                          188.230.74.0/23 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.78.0/23 maxlen: 24
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.92.0/23 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.96.0/23 maxlen: 24
                          188.230.98.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.100.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.115.0/24 maxlen: 24
                          188.230.116.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 06:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:cc:44:87:14:5d:f2:7b:92:66:2d:c7:1f:fc:fe:77:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Apr 11 08:27:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=142ac0093a515f795ba56673f10939b92722794f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:9e:b6:c6:11:4d:60:7d:e5:bc:82:1b:63:
                    28:58:25:0b:15:63:03:cf:38:43:75:d6:c1:b3:46:
                    99:ea:8e:3a:21:2e:77:58:c0:0c:7e:4a:5f:f2:54:
                    2e:7a:49:27:63:21:63:4f:87:8e:8a:28:6b:27:87:
                    62:f2:be:51:67:e1:2f:aa:15:96:c8:67:7a:a6:e4:
                    0d:28:7e:f1:07:06:ab:6f:8d:96:ef:b6:84:b0:3c:
                    52:57:89:66:1f:2d:ce:57:64:ab:ef:ef:e4:1d:83:
                    8f:1b:1a:9b:59:09:10:0c:84:d4:01:3d:72:f2:aa:
                    84:e0:93:a7:1a:84:4c:d0:55:f8:e1:62:87:bc:a9:
                    d1:1f:ec:78:08:0a:04:28:88:87:fe:6b:6b:ae:87:
                    b5:3e:e1:3a:50:93:f6:91:d3:68:28:dd:b5:b1:bd:
                    e5:d7:57:6a:c1:27:f3:57:3e:18:ec:f7:11:5d:e2:
                    16:f9:3b:73:3f:8f:84:29:70:8d:74:79:31:2d:eb:
                    42:b2:3d:e7:88:96:26:6d:2d:43:e7:dd:56:9e:7f:
                    5a:de:ff:df:17:03:78:78:f3:cf:77:fc:2b:ff:4e:
                    22:20:63:2f:94:2e:61:5f:69:a7:e4:03:e0:83:67:
                    cb:be:79:c2:6b:71:00:9f:3a:6a:1a:4c:15:b8:8e:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:C0:09:3A:51:5F:79:5B:A5:66:73:F1:09:39:B9:27:22:79:4F
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/FCrACTpRX3lbpWZz8Qk5uScieU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.121.13.255
                  77.121.15.0-77.121.30.255
                  77.121.64.0-77.121.255.255
                  77.122.128.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  95.69.128.0-95.69.232.255
                  95.69.240.0/21
                  95.69.252.0/22
                  109.201.224.0/19
                  141.170.224.0/19
                  188.230.0.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.117.255

    Signature Algorithm: sha256WithRSAEncryption
         53:19:c4:93:70:1a:e3:8b:08:fe:c4:8e:bf:1f:7f:a0:2b:80:
         a6:c2:f2:fb:9d:7d:ca:9e:b6:39:fc:95:7b:55:cd:dd:7c:cc:
         a6:3f:de:b7:78:d2:43:4f:9e:dd:46:21:9a:3a:1e:2c:46:6d:
         d4:18:64:be:4d:db:01:3c:37:7b:e2:c8:c1:e0:17:7f:e1:73:
         f6:48:10:36:61:85:14:2f:fb:44:05:10:0a:66:f5:d6:d0:f8:
         70:50:70:ac:74:a1:43:18:66:17:92:b1:2f:c2:80:8d:05:21:
         6d:81:4f:f3:d8:a8:f2:f4:00:24:02:fa:09:de:40:f0:a5:32:
         16:92:13:16:f9:bf:08:e9:06:a2:b8:09:57:46:5f:5c:2a:c5:
         5b:c9:67:fb:ba:08:9f:8a:c6:7d:5e:bd:b9:33:f3:8f:6e:46:
         c7:50:05:de:88:dc:21:a0:73:4b:74:5d:e0:49:7f:1b:e1:e4:
         ef:7d:d1:8f:3b:89:9d:cc:74:94:eb:17:ca:62:c3:bd:d7:56:
         3a:8c:2a:f1:0b:ba:aa:dd:da:a6:50:d2:ab:bd:c7:ff:48:c3:
         8d:58:aa:90:5c:0f:00:4b:78:c7:e3:53:7f:0b:92:5a:16:ef:
         76:66:50:7c:e9:4d:c2:b7:76:a4:9a:45:43:37:bd:1b:57:d0:
         63:8a:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 07:40:18 2024 by rpki-client on console-fra.rpki-client.org