Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/eauHugoUNpZEadZP8JyXV204aU4.roa
File:                     eauHugoUNpZEadZP8JyXV204aU4.roa (raw, json)
Hash identifier:          GQCmhwOapnELdMjLYZWjuZ76T4Hw/u/e3mMqaHtaTUA=
Subject key identifier:   79:AB:87:BA:0A:14:36:96:44:69:D6:4F:F0:9C:97:57:6D:38:69:4E
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       018CC64B72A797DDE2E5E7E1B2E14491ED8B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/eauHugoUNpZEadZP8JyXV204aU4.roa
Signing time:             Mon 01 Jan 2024 18:31:22 +0000
ROA not before:           Mon 01 Jan 2024 18:31:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     46261
IP address blocks:        185.214.242.0/23 maxlen: 24
                          185.225.12.0/23 maxlen: 24
                          185.225.14.0/23 maxlen: 24
                          185.147.156.0/22 maxlen: 24
                          195.245.74.0/23 maxlen: 24
                          185.147.158.0/24 maxlen: 24
                          79.110.176.0/21 maxlen: 24
                          79.110.181.0/24 maxlen: 24
                          160.238.96.0/22 maxlen: 24
                          185.238.115.0/24 maxlen: 24
                          121.46.124.0/22 maxlen: 24
                          185.214.240.0/23 maxlen: 24
                          185.214.240.0/24 maxlen: 24
                          103.205.84.0/22 maxlen: 24
                          185.157.232.0/22 maxlen: 24
                          185.235.120.0/22 maxlen: 24
                          185.235.123.0/24 maxlen: 24
                          185.235.122.0/24 maxlen: 24
                          85.8.148.0/22 maxlen: 24
                          185.227.254.0/24 maxlen: 24
                          185.227.254.0/23 maxlen: 24
                          185.214.140.0/22 maxlen: 24
                          185.214.142.0/23 maxlen: 24
                          193.187.180.0/22 maxlen: 24
                          185.228.44.0/22 maxlen: 24
                          103.207.160.0/22 maxlen: 24
                          103.207.163.0/24 maxlen: 24
                          185.227.252.0/23 maxlen: 24
                          185.227.252.0/24 maxlen: 24
                          103.203.40.0/22 maxlen: 24
                          193.31.112.0/22 maxlen: 24
                          193.31.114.0/24 maxlen: 24
                          185.176.88.0/22 maxlen: 24
                          185.176.90.0/24 maxlen: 24
                          185.213.16.0/23 maxlen: 24
                          185.213.18.0/23 maxlen: 24
                          59.152.124.0/22 maxlen: 24
                          91.132.84.0/24 maxlen: 24
                          91.132.85.0/24 maxlen: 24
                          91.132.86.0/24 maxlen: 24
                          91.132.87.0/24 maxlen: 24
                          195.216.148.0/22 maxlen: 24
                          185.190.56.0/22 maxlen: 24
                          193.176.116.0/22 maxlen: 24
                          217.18.56.0/22 maxlen: 24
                          61.14.224.0/22 maxlen: 24
                          193.163.35.0/24 maxlen: 24
                          185.158.136.0/22 maxlen: 24
                          194.50.192.0/22 maxlen: 24
                          185.145.44.0/22 maxlen: 24
                          185.202.44.0/23 maxlen: 24
                          185.202.46.0/23 maxlen: 24
                          185.219.20.0/22 maxlen: 24
                          185.219.23.0/24 maxlen: 24
                          185.242.185.0/24 maxlen: 24
                          185.118.135.0/24 maxlen: 24
                          185.209.128.0/24 maxlen: 24
                          185.209.128.0/23 maxlen: 24
                          185.209.130.0/23 maxlen: 24
                          185.196.24.0/23 maxlen: 24
                          185.196.26.0/23 maxlen: 24
                          85.202.172.0/22 maxlen: 24
                          85.202.173.0/24 maxlen: 24
                          185.206.22.0/23 maxlen: 24
                          185.118.132.0/22 maxlen: 24
                          185.105.10.0/24 maxlen: 24
                          185.206.20.0/24 maxlen: 24
                          185.206.20.0/23 maxlen: 24
                          2a07:a900::/29 maxlen: 128
                          2a07:4580::/29 maxlen: 29
                          2a07:4580:b0d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 00:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:72:a7:97:dd:e2:e5:e7:e1:b2:e1:44:91:ed:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: Jan  1 18:31:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79ab87ba0a1436964469d64ff09c97576d38694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:59:76:9a:51:09:c6:2a:ff:3e:0d:d8:b3:
                    09:c2:c1:f7:be:64:12:25:f7:76:d0:2d:38:8c:24:
                    85:4d:8a:9c:9d:ea:e9:95:04:a4:7b:0e:65:a9:15:
                    ee:4a:c8:0c:ec:f4:50:01:b5:f5:dc:a1:77:4b:ea:
                    43:47:2d:c0:2a:63:bc:58:bb:cd:c2:2e:05:cc:b3:
                    24:db:cb:50:76:9d:b9:af:5e:c8:be:30:5e:76:90:
                    f1:c9:0e:71:34:3b:04:b3:d0:a1:60:5f:dd:c1:2f:
                    e7:e0:d8:98:b5:0f:26:9e:1d:23:0d:aa:d2:47:0b:
                    1b:78:70:64:b5:80:31:41:3a:33:48:e3:46:0e:2d:
                    43:dc:4b:5c:98:4c:54:9d:37:53:35:f6:ac:3a:53:
                    d6:f1:31:ac:7c:5f:e1:f0:12:1e:40:ed:3a:a3:f9:
                    50:da:64:45:3c:2c:30:67:b0:49:3f:48:83:bf:ae:
                    30:34:f0:db:83:93:55:84:0a:5b:a9:14:1f:88:b6:
                    97:5e:9d:97:c6:7d:cc:1e:51:6b:94:d1:47:41:e5:
                    52:75:ef:d4:05:82:0c:e9:87:43:45:cd:4c:c3:a5:
                    e2:22:8a:37:eb:78:ca:b6:45:00:28:d6:89:41:83:
                    0e:97:dc:f2:de:c5:dc:c6:5b:1c:f6:72:4e:28:e4:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:87:BA:0A:14:36:96:44:69:D6:4F:F0:9C:97:57:6D:38:69:4E
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/eauHugoUNpZEadZP8JyXV204aU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.152.124.0/22
                  61.14.224.0/22
                  79.110.176.0/21
                  85.8.148.0/22
                  85.202.172.0/22
                  91.132.84.0/22
                  103.203.40.0/22
                  103.205.84.0/22
                  103.207.160.0/22
                  121.46.124.0/22
                  160.238.96.0/22
                  185.105.10.0/24
                  185.118.132.0/22
                  185.145.44.0/22
                  185.147.156.0/22
                  185.157.232.0/22
                  185.158.136.0/22
                  185.176.88.0/22
                  185.190.56.0/22
                  185.196.24.0/22
                  185.202.44.0/22
                  185.206.20.0/22
                  185.209.128.0/22
                  185.213.16.0/22
                  185.214.140.0/22
                  185.214.240.0/22
                  185.219.20.0/22
                  185.225.12.0/22
                  185.227.252.0/22
                  185.228.44.0/22
                  185.235.120.0/22
                  185.238.115.0/24
                  185.242.185.0/24
                  193.31.112.0/22
                  193.163.35.0/24
                  193.176.116.0/22
                  193.187.180.0/22
                  194.50.192.0/22
                  195.216.148.0/22
                  195.245.74.0/23
                  217.18.56.0/22
                IPv6:
                  2a07:4580::/29
                  2a07:a900::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:39:ee:8a:20:ec:a1:8b:7a:ff:4b:08:76:79:f6:a3:4e:
         cb:58:98:40:01:1d:ed:96:24:b4:b2:03:90:0d:22:5a:85:81:
         f0:c6:f7:2b:c6:95:54:b8:63:50:bd:04:1b:40:de:56:4d:0c:
         b0:d3:f5:b5:ea:9e:6f:87:0e:e6:e9:23:d3:d0:14:eb:a2:82:
         e8:4d:fb:9c:e1:28:59:32:cd:7c:68:f7:73:51:a6:ce:77:c2:
         96:d6:fb:a1:da:90:e5:da:43:78:f2:5b:21:6b:9c:89:a8:fa:
         9a:96:57:48:a6:ba:b7:6a:95:49:88:24:1d:bf:84:98:7d:24:
         30:af:cc:99:55:52:cf:b7:ae:31:7a:86:f4:af:59:e5:3e:83:
         fe:c4:b8:a6:75:31:78:0d:d8:f1:9f:bb:3b:cd:66:19:2b:fe:
         27:6c:42:0a:d6:bc:c4:79:0f:f7:6f:a8:23:cc:20:dc:6a:b6:
         0f:33:2c:fb:93:56:7a:16:d9:49:4e:6b:c5:74:fc:dd:32:b5:
         0d:86:c8:a6:09:f5:b6:72:f9:f8:27:ce:31:72:e1:8d:e7:38:
         86:bb:2f:f1:3b:a0:d3:6e:30:cb:70:02:a8:4e:b7:83:76:2f:
         94:8f:3c:1e:64:66:a2:d9:61:e0:4d:78:3f:de:bb:f8:85:48:
         73:8c:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:24 2024 by rpki-client on console-ams.rpki-client.org