Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/KPW5GpZLUcmxbYWfF9vaU6FDyeY.roa
File:                     KPW5GpZLUcmxbYWfF9vaU6FDyeY.roa (raw, json)
Hash identifier:          H5YmZihwdjtLZNjH8bZwVLkW31rSkcAF+HAB3V4RKko=
Subject key identifier:   28:F5:B9:1A:96:4B:51:C9:B1:6D:85:9F:17:DB:DA:53:A1:43:C9:E6
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       018F631B7C8CEB5E6B42CFBA443FDF0084E8
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/KPW5GpZLUcmxbYWfF9vaU6FDyeY.roa
Signing time:             Fri 10 May 2024 15:24:56 +0000
ROA not before:           Fri 10 May 2024 15:24:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25229
IP address blocks:        77.120.0.0/20 maxlen: 24
                          77.120.4.0/24 maxlen: 24
                          77.120.6.0/24 maxlen: 24
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          77.120.52.0/22 maxlen: 23
                          77.120.60.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/20 maxlen: 21
                          77.120.96.0/19 maxlen: 20
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 24
                          77.120.192.0/21 maxlen: 24
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 24
                          77.120.211.0/24 maxlen: 24
                          77.120.212.0/23 maxlen: 24
                          77.120.214.0/23 maxlen: 24
                          77.120.216.0/22 maxlen: 23
                          77.120.220.0/22 maxlen: 24
                          77.120.224.0/20 maxlen: 21
                          77.120.240.0/20 maxlen: 21
                          77.120.248.0/21 maxlen: 22
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          77.121.12.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.17.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.27.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.64.0/21 maxlen: 22
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.96.0/20 maxlen: 21
                          77.121.112.0/20 maxlen: 21
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.192.0/19 maxlen: 20
                          77.121.192.0/20 maxlen: 21
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.122.128.0/17 maxlen: 18
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.64.0/19 maxlen: 20
                          77.123.128.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          77.123.160.0/20 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          82.144.192.0/19 maxlen: 20
                          109.201.224.0/24 maxlen: 24
                          109.201.225.0/24 maxlen: 24
                          109.201.226.0/24 maxlen: 24
                          109.201.227.0/24 maxlen: 24
                          109.201.228.0/22 maxlen: 23
                          109.201.232.0/22 maxlen: 23
                          109.201.236.0/23 maxlen: 24
                          109.201.238.0/23 maxlen: 24
                          109.201.240.0/20 maxlen: 21
                          141.170.224.0/23 maxlen: 24
                          141.170.226.0/23 maxlen: 24
                          141.170.226.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.228.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.236.0/24 maxlen: 24
                          141.170.237.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          141.170.239.0/24 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          141.170.244.0/22 maxlen: 23
                          141.170.248.0/21 maxlen: 22
                          141.170.248.0/23 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.7.0/24 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          188.230.26.0/23 maxlen: 24
                          188.230.28.0/22 maxlen: 23
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          188.230.73.0/24 maxlen: 24
                          188.230.74.0/23 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.78.0/23 maxlen: 24
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.92.0/23 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.96.0/23 maxlen: 24
                          188.230.98.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.100.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.115.0/24 maxlen: 24
                          188.230.116.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 06:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:63:1b:7c:8c:eb:5e:6b:42:cf:ba:44:3f:df:00:84:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: May 10 15:24:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=28f5b91a964b51c9b16d859f17dbda53a143c9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:30:8c:c5:da:a6:03:b3:5c:58:d7:64:1b:
                    fa:2a:e4:42:8f:a2:86:0b:9d:59:d6:d6:02:67:7c:
                    45:01:e0:0b:33:c0:c3:42:76:17:fd:79:d6:f6:19:
                    77:bb:69:3e:7a:e5:6a:41:8d:a0:25:c5:ba:4d:8f:
                    76:29:9c:da:e4:31:43:eb:d1:e6:f9:05:bb:95:ff:
                    71:63:93:f3:51:10:98:32:d9:65:ea:22:d0:70:d5:
                    be:54:70:b5:58:5f:98:47:5d:64:2b:ee:d8:5b:7a:
                    69:31:d0:c7:e8:cc:16:8c:a9:cc:6e:b2:82:dd:1a:
                    b3:d6:be:90:38:07:e6:e0:32:d6:56:07:e9:d3:2e:
                    4f:7c:a6:f7:c5:4b:9e:08:53:54:cb:1d:99:9f:16:
                    63:9f:b8:46:22:3e:2b:80:1a:ec:98:da:2e:d3:f7:
                    f3:3f:54:b7:d2:70:14:6c:66:87:31:c1:0a:aa:d4:
                    24:1a:cf:da:7a:da:dd:66:be:be:01:b9:73:0b:d9:
                    f9:e7:68:38:15:67:16:c5:44:e0:da:d8:a8:fa:2d:
                    dc:e2:8d:ac:b2:8c:67:a1:5b:d5:95:01:53:00:5a:
                    25:23:3d:0c:e4:65:39:b4:f2:c3:f0:f1:c0:43:5f:
                    44:b8:a6:28:2d:b4:e6:66:6f:6a:ec:42:56:1b:3b:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:B9:1A:96:4B:51:C9:B1:6D:85:9F:17:DB:DA:53:A1:43:C9:E6
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/KPW5GpZLUcmxbYWfF9vaU6FDyeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.121.13.255
                  77.121.15.0-77.121.30.255
                  77.121.64.0-77.121.255.255
                  77.122.128.0-77.123.95.255
                  77.123.128.0-77.123.175.255
                  77.244.32.0/20
                  82.144.192.0/19
                  109.201.224.0/19
                  141.170.224.0/19
                  188.230.0.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.117.255

    Signature Algorithm: sha256WithRSAEncryption
         32:4e:ae:2f:ff:8d:ad:4b:86:7a:fd:0f:bf:f4:59:ce:b6:a4:
         71:6d:b5:63:56:6f:18:0e:4d:e6:94:1a:0e:9e:e5:86:08:35:
         45:8c:ba:e6:53:03:da:55:9a:44:a1:c6:18:0f:e0:3a:b4:42:
         d7:9c:0e:fb:1a:bf:58:ce:b1:f6:bb:6d:3e:7a:ad:13:28:31:
         f7:6a:a0:52:09:c1:57:10:71:03:4b:23:74:21:88:12:7f:49:
         53:be:91:99:3c:31:b1:c6:2f:dd:d3:6c:49:8b:1c:66:63:d1:
         37:36:9f:ec:ee:9b:28:42:20:b6:e4:da:46:61:1b:45:ee:b4:
         c8:f3:8c:af:d5:ba:e5:73:b8:14:4c:33:b8:21:bc:d0:83:bf:
         ee:58:57:2e:ba:13:cb:0d:f6:ad:4e:21:58:42:fb:88:28:01:
         dd:04:dd:84:d7:1a:a9:85:29:ef:71:4c:a2:e1:7c:29:19:80:
         0b:d6:5f:6d:b7:ee:81:c5:29:ba:ef:24:0e:dc:5a:c3:ac:0e:
         9f:dc:82:8d:a7:1c:07:0c:85:87:73:0e:99:f9:df:94:43:cc:
         98:f3:aa:95:3f:98:5f:54:29:b8:c4:0a:d8:a6:69:cd:41:b4:
         f2:9a:fc:f2:1c:7a:d0:26:9a:f8:e1:d6:6a:06:c2:ca:19:da:
         13:ca:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org