Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/44xJhVYcdqpNLNp8OZE6MsaCBTU.roa
File:                     44xJhVYcdqpNLNp8OZE6MsaCBTU.roa (raw, json)
Hash identifier:          DkD7B1GHCcN3bNQGs3BI0NEVF2UEgRZ+Gycuw4YoUXw=
Subject key identifier:   E3:8C:49:85:56:1C:76:AA:4D:2C:DA:7C:39:91:3A:32:C6:82:05:35
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       0185728C895A73CB95BE2A20EB8BB1C8BD14
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/44xJhVYcdqpNLNp8OZE6MsaCBTU.roa
Signing time:             Mon 02 Jan 2023 12:54:50 +0000
ROA not before:           Mon 02 Jan 2023 12:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20845
IP address blocks:        79.120.160.0/21 maxlen: 24
                          79.120.172.0/22 maxlen: 24
                          79.120.170.0/23 maxlen: 24
                          89.147.96.0/22 maxlen: 24
                          89.147.112.0/21 maxlen: 24
                          212.40.72.0/21 maxlen: 24
                          212.40.80.0/20 maxlen: 24
                          79.120.252.0/22 maxlen: 24
                          79.120.248.0/23 maxlen: 24
                          85.66.0.0/15 maxlen: 24
                          77.234.64.0/19 maxlen: 24
                          176.241.0.0/18 maxlen: 24
                          92.52.224.0/19 maxlen: 24
                          89.147.64.0/20 maxlen: 24
                          193.226.192.0/23 maxlen: 24
                          89.186.96.0/23 maxlen: 24
                          89.186.102.0/23 maxlen: 24
                          193.226.212.0/22 maxlen: 24
                          89.186.112.0/22 maxlen: 24
                          89.186.108.0/22 maxlen: 24
                          89.186.106.0/23 maxlen: 24
                          89.186.118.0/23 maxlen: 24
                          193.226.226.0/23 maxlen: 24
                          193.226.232.0/23 maxlen: 24
                          89.186.120.0/21 maxlen: 24
                          193.226.240.0/23 maxlen: 24
                          193.226.238.0/23 maxlen: 24
                          81.17.176.0/20 maxlen: 24
                          193.226.244.0/22 maxlen: 24
                          193.226.248.0/23 maxlen: 24
                          195.38.96.0/19 maxlen: 24
                          94.247.88.0/21 maxlen: 24
                          62.77.196.0/22 maxlen: 24
                          82.131.184.0/21 maxlen: 24
                          82.131.182.0/23 maxlen: 24
                          82.131.198.0/24 maxlen: 24
                          82.131.196.0/23 maxlen: 24
                          82.131.128.0/19 maxlen: 24
                          62.165.192.0/18 maxlen: 24
                          82.131.200.0/21 maxlen: 24
                          62.77.240.0/23 maxlen: 24
                          82.131.216.0/21 maxlen: 24
                          82.131.224.0/19 maxlen: 24
                          62.77.248.0/21 maxlen: 24
                          91.83.154.0/23 maxlen: 24
                          178.164.128.0/17 maxlen: 24
                          91.83.184.0/21 maxlen: 24
                          91.83.180.0/22 maxlen: 24
                          91.83.192.0/20 maxlen: 24
                          91.83.94.0/23 maxlen: 24
                          91.83.102.0/23 maxlen: 24
                          91.83.110.0/23 maxlen: 24
                          91.83.120.0/23 maxlen: 24
                          91.83.136.0/21 maxlen: 24
                          87.97.0.0/18 maxlen: 24
                          92.245.64.0/19 maxlen: 24
                          91.83.144.0/23 maxlen: 24
                          82.144.164.0/22 maxlen: 24
                          82.144.172.0/22 maxlen: 24
                          82.144.176.0/23 maxlen: 24
                          82.144.188.0/23 maxlen: 24
                          78.131.0.0/17 maxlen: 24
                          87.97.80.0/20 maxlen: 24
                          87.97.96.0/19 maxlen: 24
                          91.83.252.0/23 maxlen: 24
                          91.82.188.0/22 maxlen: 24
                          213.197.72.0/21 maxlen: 24
                          213.197.80.0/20 maxlen: 24
                          91.82.212.0/22 maxlen: 24
                          91.82.210.0/23 maxlen: 24
                          91.82.232.0/22 maxlen: 24
                          91.82.228.0/22 maxlen: 24
                          91.82.240.0/22 maxlen: 24
                          91.82.144.0/22 maxlen: 24
                          91.82.172.0/23 maxlen: 24
                          91.82.168.0/22 maxlen: 24
                          91.82.176.0/21 maxlen: 24
                          185.62.128.0/22 maxlen: 24
                          217.197.176.0/20 maxlen: 24
                          185.29.80.0/22 maxlen: 24
                          91.83.52.0/22 maxlen: 24
                          193.110.56.0/21 maxlen: 24
                          85.238.64.0/19 maxlen: 24
                          91.82.250.0/23 maxlen: 24
                          91.83.0.0/19 maxlen: 24
                          91.83.32.0/21 maxlen: 24
                          91.82.0.0/21 maxlen: 24
                          91.82.24.0/21 maxlen: 24
                          80.95.64.0/19 maxlen: 24
                          188.142.128.0/19 maxlen: 24
                          91.82.82.0/23 maxlen: 24
                          188.143.0.0/17 maxlen: 24
                          91.82.132.0/22 maxlen: 24
                          91.82.130.0/23 maxlen: 24
                          91.82.32.0/21 maxlen: 24
                          91.82.56.0/23 maxlen: 24
                          91.82.64.0/21 maxlen: 24
                          91.82.60.0/23 maxlen: 24
                          84.236.0.0/17 maxlen: 24
                          92.249.128.0/17 maxlen: 24
                          81.0.82.0/23 maxlen: 24
                          81.0.84.0/22 maxlen: 24
                          81.0.90.0/23 maxlen: 24
                          81.0.92.0/22 maxlen: 24
                          81.0.98.0/23 maxlen: 24
                          89.148.64.0/18 maxlen: 24
                          94.21.0.0/16 maxlen: 24
                          81.0.108.0/23 maxlen: 24
                          81.0.122.0/23 maxlen: 24
                          81.0.126.0/23 maxlen: 24
                          2a01:368::/32 maxlen: 32
                          2a01:368::/29 maxlen: 30

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:8c:89:5a:73:cb:95:be:2a:20:eb:8b:b1:c8:bd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: Jan  2 12:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e38c4985561c76aa4d2cda7c39913a32c6820535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:a4:35:ba:6d:8e:e0:b3:82:2d:94:5e:c8:
                    87:c4:e3:77:91:a9:eb:02:d3:2c:18:ec:8f:99:78:
                    db:d8:bf:1a:be:6c:18:39:ec:e2:73:14:e3:79:0c:
                    8f:df:27:70:a2:da:cc:a1:d2:dc:4a:0a:ca:ce:c6:
                    ff:ae:e0:d7:3d:d5:31:bd:ab:5f:3c:a6:9d:f3:a3:
                    3a:bc:e8:b1:0f:dd:b5:73:8b:c2:dd:5e:82:1d:6a:
                    f0:a2:8d:8d:f9:cf:5b:68:22:92:d1:b9:3b:72:97:
                    b2:10:03:5c:b4:ab:12:e8:b5:ca:31:a8:12:0b:7b:
                    96:1b:08:37:89:64:1d:5e:06:77:e4:05:58:a7:19:
                    c9:b2:a0:f0:c4:9f:95:e4:76:d2:82:dd:fd:3f:40:
                    14:6c:9f:ce:30:89:51:17:8e:f3:b4:0b:fe:35:d5:
                    8e:4f:bf:a6:c8:fa:56:b3:13:ef:93:e9:48:71:f5:
                    60:df:ba:2a:ec:4c:75:d9:1a:8b:8a:eb:2c:2d:1e:
                    b4:81:d4:36:cf:12:0d:a6:1a:be:47:1e:2a:74:cc:
                    12:1f:7a:fd:8e:b9:5c:d8:40:bd:27:3e:16:18:18:
                    3f:44:3e:53:78:3d:8a:e6:14:7e:6e:c8:5d:f8:8b:
                    e4:27:3b:0f:bf:98:97:b4:be:06:a8:fb:50:30:4a:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:49:85:56:1C:76:AA:4D:2C:DA:7C:39:91:3A:32:C6:82:05:35
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/44xJhVYcdqpNLNp8OZE6MsaCBTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.77.196.0/22
                  62.77.240.0/23
                  62.77.248.0/21
                  62.165.192.0/18
                  77.234.64.0/19
                  78.131.0.0/17
                  79.120.160.0/21
                  79.120.170.0-79.120.175.255
                  79.120.248.0/23
                  79.120.252.0/22
                  80.95.64.0/19
                  81.0.82.0-81.0.87.255
                  81.0.90.0-81.0.95.255
                  81.0.98.0/23
                  81.0.108.0/23
                  81.0.122.0/23
                  81.0.126.0/23
                  81.17.176.0/20
                  82.131.128.0/19
                  82.131.182.0-82.131.191.255
                  82.131.196.0-82.131.198.255
                  82.131.200.0/21
                  82.131.216.0-82.131.255.255
                  82.144.164.0/22
                  82.144.172.0-82.144.177.255
                  82.144.188.0/23
                  84.236.0.0/17
                  85.66.0.0/15
                  85.238.64.0/19
                  87.97.0.0/18
                  87.97.80.0-87.97.127.255
                  89.147.64.0/20
                  89.147.96.0/22
                  89.147.112.0/21
                  89.148.64.0/18
                  89.186.96.0/23
                  89.186.102.0/23
                  89.186.106.0-89.186.115.255
                  89.186.118.0-89.186.127.255
                  91.82.0.0/21
                  91.82.24.0-91.82.39.255
                  91.82.56.0/23
                  91.82.60.0/23
                  91.82.64.0/21
                  91.82.82.0/23
                  91.82.130.0-91.82.135.255
                  91.82.144.0/22
                  91.82.168.0-91.82.173.255
                  91.82.176.0/21
                  91.82.188.0/22
                  91.82.210.0-91.82.215.255
                  91.82.228.0-91.82.235.255
                  91.82.240.0/22
                  91.82.250.0/23
                  91.83.0.0-91.83.39.255
                  91.83.52.0/22
                  91.83.94.0/23
                  91.83.102.0/23
                  91.83.110.0/23
                  91.83.120.0/23
                  91.83.136.0-91.83.145.255
                  91.83.154.0/23
                  91.83.180.0-91.83.207.255
                  91.83.252.0/23
                  92.52.224.0/19
                  92.245.64.0/19
                  92.249.128.0/17
                  94.21.0.0/16
                  94.247.88.0/21
                  176.241.0.0/18
                  178.164.128.0/17
                  185.29.80.0/22
                  185.62.128.0/22
                  188.142.128.0/19
                  188.143.0.0/17
                  193.110.56.0/21
                  193.226.192.0/23
                  193.226.212.0/22
                  193.226.226.0/23
                  193.226.232.0/23
                  193.226.238.0-193.226.241.255
                  193.226.244.0-193.226.249.255
                  195.38.96.0/19
                  212.40.72.0-212.40.95.255
                  213.197.72.0-213.197.95.255
                  217.197.176.0/20
                IPv6:
                  2a01:368::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:59:1e:ee:87:90:3e:5d:e9:08:bf:3a:83:80:45:1a:5c:ea:
         9e:32:ec:39:dd:b0:91:5a:11:b2:7d:58:46:0d:48:de:e5:4d:
         9c:68:cb:87:28:2e:b7:4a:eb:81:c9:dc:d5:84:b6:60:0c:2f:
         48:0f:00:af:e4:c8:a8:47:1a:ad:30:e9:64:aa:58:a9:7d:05:
         ba:03:5e:18:91:73:ea:29:d2:74:20:2c:a0:ee:e2:0a:93:9d:
         d8:df:fa:d7:38:56:a8:02:3f:b6:33:76:ba:68:f2:23:73:6a:
         07:a3:f0:f8:ec:6a:af:4b:30:9e:69:77:fe:db:4c:18:3c:3d:
         12:bb:83:79:96:c1:b2:2a:9a:49:a9:51:80:47:a8:10:41:2a:
         64:1a:0c:50:67:dd:bb:fb:ba:a7:80:85:35:aa:33:7e:f0:04:
         3f:b7:1f:f4:f8:a6:e8:35:4b:e9:34:2d:34:43:64:92:19:c4:
         b6:77:98:5a:10:ea:28:10:19:2d:6e:c4:fe:c5:c1:8c:6f:63:
         87:46:83:60:41:de:41:58:3f:29:be:61:e6:21:61:f6:bc:72:
         7a:7b:5d:df:05:97:f1:39:82:eb:c4:22:c9:db:fb:6f:db:be:
         1a:57:c4:7c:a4:5e:95:91:2d:e6:03:4f:c7:aa:65:25:e6:68:
         ec:86:02:9f
-----BEGIN CERTIFICATE-----
MIIHwDCCBqigAwIBAgISAYVyjIlac8uVviog64uxyL0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh
OGMxNDAwHhcNMjMwMTAyMTI1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzhjNDk4NTU2MWM3NmFhNGQyY2RhN2MzOTkxM2EzMmM2ODIwNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmakNbptjuCzgi2UXsiHxON3kanr
AtMsGOyPmXjb2L8avmwYOezicxTjeQyP3ydwotrModLcSgrKzsb/ruDXPdUxvatf
PKad86M6vOixD921c4vC3V6CHWrwoo2N+c9baCKS0bk7cpeyEANctKsS6LXKMagS
C3uWGwg3iWQdXgZ35AVYpxnJsqDwxJ+V5HbSgt39P0AUbJ/OMIlRF47ztAv+NdWO
T7+myPpWsxPvk+lIcfVg37oq7Ex12RqLiussLR60gdQ2zxINphq+Rx4qdMwSH3r9
jrlc2EC9Jz4WGBg/RD5TeD2K5hR+bshd+IvkJzsPv5iXtL4GqPtQMEr8xQIDAQAB
o4IEzDCCBMgwHQYDVR0OBBYEFOOMSYVWHHaqTSzafDmROjLGggU1MB8GA1UdIwQY
MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt
YmU3YTFhMDAxY2NmLzEvNDR4SmhWWWNkcXBOTE5wOE9aRTZNc2FDQlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm
LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC4AYIKwYBBQUHAQcBAf8EggLPMIICyzCCArgEAgABMIIC
sAMEAj5NxAMEAT5N8AMEAz5N+AMEBj6lwAMEBU3qQAMEB06DAAMEA094oDAMAwQB
T3iqAwQET3igAwQBT3j4AwQCT3j8AwQFUF9AMAwDBAFRAFIDBANRAFAwDAMEAVEA
WgMEBVEAQAMEAVEAYgMEAVEAbAMEAVEAegMEAVEAfgMEBFERsAMEBVKDgDAMAwQB
UoO2AwQGUoOAMAwDBAJSg8QDBABSg8YDBANSg8gwCwMEA1KD2AMDAlKAAwQCUpCk
MAwDBAJSkKwDBAFSkLADBAFSkLwDBAdU7AADAwFVQgMEBVXuQAMEBldhADAMAwQE
V2FQAwQHV2EAAwQEWZNAAwQCWZNgAwQDWZNwAwQGWZRAAwQBWbpgAwQBWbpmMAwD
BAFZumoDBAJZunAwDAMEAVm6dgMEB1m6AAMEA1tSADAMAwQDW1IYAwQDW1IgAwQB
W1I4AwQBW1I8AwQDW1JAAwQBW1JSMAwDBAFbUoIDBANbUoADBAJbUpAwDAMEA1tS
qAMEAVtSrAMEA1tSsAMEAltSvDAMAwQBW1LSAwQDW1LQMAwDBAJbUuQDBAJbUugD
BAJbUvADBAFbUvowCwMDAFtTAwQDW1MgAwQCW1M0AwQBW1NeAwQBW1NmAwQBW1Nu
AwQBW1N4MAwDBANbU4gDBAFbU5ADBAFbU5owDAMEAltTtAMEBFtTwAMEAVtT/AME
BVw04AMEBVz1QAMEB1z5gAMDAF4VAwQDXvdYAwQGsPEAAwQHsqSAAwQCuR1QAwQC
uT6AAwQFvI6AAwQHvI8AAwQDwW44AwQBweLAAwQCweLUAwQBweLiAwQBweLoMAwD
BAHB4u4DBAHB4vAwDAMEAsHi9AMEAcHi+AMEBcMmYDAMAwQD1ChIAwQF1ChAMAwD
BAPVxUgDBAXVxUADBATZxbAwDQQCAAIwBwMFAyoBA2gwDQYJKoZIhvcNAQELBQAD
ggEBAIBZHu6HkD5d6Qi/OoOARRpc6p4y7DndsJFaEbJ9WEYNSN7lTZxoy4coLrdK
64HJ3NWEtmAML0gPAK/kyKhHGq0w6WSqWKl9BboDXhiRc+op0nQgLKDu4gqTndjf
+tc4VqgCP7Yzdrpo8iNzagej8Pjsaq9LMJ5pd/7bTBg8PRK7g3mWwbIqmkmpUYBH
qBBBKmQaDFBn3bv7uqeAhTWqM37wBD+3H/T4pug1S+k0LTRDZJIZxLZ3mFoQ6igQ
GS1uxP7FwYxvY4dGg2BB3kFYPym+YeYhYfa8cnp7Xd8Fl/E5guvEIsnb+2/bvhpX
xHykXpWRLeYDT8eqZSXmaOyGAp8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org