Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/kZEgAGNHS8KpxpUVJ4NxAdThKc8.roa
File:                     kZEgAGNHS8KpxpUVJ4NxAdThKc8.roa (raw, json)
Hash identifier:          F9MEd9A3adPukJ45cmOQZMpDKwv8yH0idfiKLbsVqEY=
Subject key identifier:   91:91:20:00:63:47:4B:C2:A9:C6:95:15:27:83:71:01:D4:E1:29:CF
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       019421B25407A90213E42FF255E63F63D66F
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/kZEgAGNHS8KpxpUVJ4NxAdThKc8.roa
Signing time:             Wed 01 Jan 2025 11:48:42 +0000
ROA not before:           Wed 01 Jan 2025 11:48:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     54825
IP address blocks:        45.11.244.0/23 maxlen: 23
                          86.109.0.0/24 maxlen: 24
                          86.109.1.0/24 maxlen: 24
                          86.109.2.0/23 maxlen: 23
                          86.109.2.0/24 maxlen: 24
                          86.109.3.0/24 maxlen: 24
                          86.109.4.0/23 maxlen: 23
                          86.109.4.0/24 maxlen: 24
                          86.109.5.0/24 maxlen: 24
                          86.109.6.0/24 maxlen: 24
                          86.109.7.0/24 maxlen: 24
                          86.109.8.0/24 maxlen: 24
                          86.109.9.0/24 maxlen: 24
                          86.109.10.0/23 maxlen: 23
                          86.109.12.0/24 maxlen: 24
                          86.109.13.0/24 maxlen: 24
                          86.109.14.0/23 maxlen: 23
                          93.187.216.0/23 maxlen: 23
                          93.187.218.0/23 maxlen: 23
                          136.144.48.0/23 maxlen: 23
                          136.144.50.0/23 maxlen: 23
                          136.144.52.0/23 maxlen: 23
                          136.144.54.0/23 maxlen: 23
                          136.144.56.0/23 maxlen: 23
                          136.144.58.0/23 maxlen: 23
                          136.144.60.0/23 maxlen: 23
                          136.144.62.0/23 maxlen: 23
                          139.178.64.0/22 maxlen: 22
                          139.178.68.0/22 maxlen: 22
                          139.178.72.0/22 maxlen: 22
                          139.178.72.0/23 maxlen: 23
                          139.178.74.0/23 maxlen: 23
                          139.178.76.0/22 maxlen: 22
                          139.178.76.0/23 maxlen: 23
                          139.178.78.0/23 maxlen: 23
                          139.178.80.0/21 maxlen: 21
                          139.178.88.0/22 maxlen: 22
                          139.178.92.0/23 maxlen: 23
                          139.178.94.0/23 maxlen: 23
                          145.40.64.0/23 maxlen: 23
                          145.40.66.0/24 maxlen: 24
                          145.40.67.0/24 maxlen: 24
                          145.40.68.0/24 maxlen: 24
                          145.40.69.0/24 maxlen: 24
                          145.40.70.0/23 maxlen: 23
                          145.40.72.0/24 maxlen: 24
                          145.40.73.0/24 maxlen: 24
                          145.40.74.0/23 maxlen: 23
                          145.40.75.0/24 maxlen: 24
                          145.40.76.0/23 maxlen: 23
                          145.40.78.0/24 maxlen: 24
                          145.40.79.0/24 maxlen: 24
                          145.40.79.0/26 maxlen: 26
                          145.40.80.0/23 maxlen: 23
                          145.40.82.0/23 maxlen: 23
                          145.40.84.0/23 maxlen: 23
                          145.40.86.0/23 maxlen: 23
                          145.40.88.0/24 maxlen: 24
                          145.40.89.0/24 maxlen: 24
                          145.40.90.0/24 maxlen: 24
                          145.40.91.0/24 maxlen: 24
                          145.40.92.0/22 maxlen: 22
                          145.40.96.0/23 maxlen: 23
                          145.40.98.0/23 maxlen: 23
                          145.40.100.0/24 maxlen: 24
                          145.40.101.0/24 maxlen: 24
                          145.40.102.0/23 maxlen: 23
                          145.40.102.0/24 maxlen: 24
                          145.40.103.0/24 maxlen: 24
                          145.40.104.0/22 maxlen: 22
                          145.40.108.0/22 maxlen: 22
                          145.40.112.0/22 maxlen: 22
                          145.40.116.0/22 maxlen: 22
                          145.40.120.0/22 maxlen: 22
                          145.40.124.0/22 maxlen: 22
                          147.28.128.0/23 maxlen: 23
                          147.28.131.0/24 maxlen: 24
                          147.28.132.0/22 maxlen: 22
                          147.28.136.0/23 maxlen: 23
                          147.28.138.0/23 maxlen: 23
                          147.28.140.0/24 maxlen: 24
                          147.28.141.0/24 maxlen: 24
                          147.28.142.0/23 maxlen: 23
                          147.28.144.0/23 maxlen: 23
                          147.28.146.0/23 maxlen: 23
                          147.28.148.0/23 maxlen: 23
                          147.28.150.0/23 maxlen: 23
                          147.28.152.0/24 maxlen: 24
                          147.28.153.0/24 maxlen: 24
                          147.28.154.0/23 maxlen: 23
                          147.28.156.0/23 maxlen: 23
                          147.28.158.0/23 maxlen: 23
                          147.28.160.0/23 maxlen: 23
                          147.28.162.0/23 maxlen: 23
                          147.28.164.0/23 maxlen: 23
                          147.28.166.0/23 maxlen: 23
                          147.28.168.0/23 maxlen: 23
                          147.28.170.0/23 maxlen: 23
                          147.28.172.0/23 maxlen: 23
                          147.28.174.0/23 maxlen: 23
                          147.28.176.0/23 maxlen: 23
                          147.28.178.0/23 maxlen: 23
                          147.28.180.0/23 maxlen: 23
                          147.28.182.0/23 maxlen: 23
                          147.28.184.0/23 maxlen: 23
                          147.28.186.0/23 maxlen: 23
                          147.28.188.0/24 maxlen: 24
                          147.28.189.0/24 maxlen: 24
                          147.28.190.0/23 maxlen: 23
                          147.28.192.0/22 maxlen: 22
                          147.28.192.0/24 maxlen: 24
                          147.28.193.0/24 maxlen: 24
                          147.28.194.0/24 maxlen: 24
                          147.28.195.0/24 maxlen: 24
                          147.28.196.0/23 maxlen: 23
                          147.28.198.0/24 maxlen: 24
                          147.28.199.0/24 maxlen: 24
                          147.28.200.0/24 maxlen: 24
                          147.28.201.0/24 maxlen: 24
                          147.28.202.0/24 maxlen: 24
                          147.28.203.0/24 maxlen: 24
                          147.28.204.0/23 maxlen: 23
                          147.28.206.0/23 maxlen: 23
                          147.28.208.0/23 maxlen: 23
                          147.28.210.0/23 maxlen: 23
                          147.28.212.0/24 maxlen: 24
                          147.28.214.0/23 maxlen: 23
                          147.28.216.0/23 maxlen: 23
                          147.28.218.0/24 maxlen: 24
                          147.28.219.0/24 maxlen: 24
                          147.28.220.0/23 maxlen: 23
                          147.28.222.0/23 maxlen: 23
                          147.28.224.0/24 maxlen: 24
                          147.28.225.0/24 maxlen: 24
                          147.28.226.0/23 maxlen: 23
                          147.28.228.0/24 maxlen: 24
                          147.28.229.0/24 maxlen: 24
                          147.28.230.0/24 maxlen: 24
                          147.28.231.0/24 maxlen: 24
                          147.28.232.0/24 maxlen: 24
                          147.28.233.0/24 maxlen: 24
                          147.28.234.0/24 maxlen: 24
                          147.28.235.0/24 maxlen: 24
                          147.28.240.0/24 maxlen: 24
                          147.28.241.0/24 maxlen: 24
                          147.28.242.0/24 maxlen: 24
                          147.75.32.0/23 maxlen: 23
                          147.75.34.0/24 maxlen: 24
                          147.75.35.0/24 maxlen: 24
                          147.75.36.0/22 maxlen: 22
                          147.75.40.0/23 maxlen: 23
                          147.75.42.0/24 maxlen: 24
                          147.75.43.0/24 maxlen: 24
                          147.75.44.0/24 maxlen: 24
                          147.75.45.0/24 maxlen: 24
                          147.75.46.0/24 maxlen: 24
                          147.75.47.0/24 maxlen: 24
                          147.75.48.0/24 maxlen: 24
                          147.75.49.0/24 maxlen: 24
                          147.75.50.0/23 maxlen: 23
                          147.75.50.0/24 maxlen: 24
                          147.75.51.0/24 maxlen: 24
                          147.75.52.0/24 maxlen: 24
                          147.75.53.0/24 maxlen: 24
                          147.75.54.0/24 maxlen: 24
                          147.75.55.0/24 maxlen: 24
                          147.75.56.0/23 maxlen: 23
                          147.75.56.0/24 maxlen: 24
                          147.75.57.0/24 maxlen: 24
                          147.75.58.0/24 maxlen: 24
                          147.75.59.0/24 maxlen: 24
                          147.75.60.0/24 maxlen: 24
                          147.75.61.0/24 maxlen: 24
                          147.75.62.0/24 maxlen: 24
                          147.75.63.0/24 maxlen: 24
                          147.75.64.0/22 maxlen: 22
                          147.75.68.0/22 maxlen: 22
                          147.75.72.0/21 maxlen: 21
                          147.75.72.0/24 maxlen: 24
                          147.75.73.0/24 maxlen: 24
                          147.75.74.0/24 maxlen: 24
                          147.75.75.0/24 maxlen: 24
                          147.75.76.0/24 maxlen: 24
                          147.75.77.0/24 maxlen: 24
                          147.75.78.0/24 maxlen: 24
                          147.75.79.0/24 maxlen: 24
                          147.75.80.0/22 maxlen: 22
                          147.75.84.0/23 maxlen: 23
                          147.75.86.0/23 maxlen: 23
                          147.75.88.0/22 maxlen: 22
                          147.75.92.0/22 maxlen: 22
                          147.75.96.0/22 maxlen: 22
                          147.75.96.0/24 maxlen: 24
                          147.75.97.0/24 maxlen: 24
                          147.75.98.0/24 maxlen: 24
                          147.75.99.0/24 maxlen: 24
                          147.75.100.0/22 maxlen: 22
                          147.75.104.0/22 maxlen: 22
                          147.75.108.0/23 maxlen: 23
                          147.75.110.0/23 maxlen: 23
                          147.75.192.0/21 maxlen: 21
                          147.75.192.0/24 maxlen: 24
                          147.75.193.0/24 maxlen: 24
                          147.75.194.0/23 maxlen: 23
                          147.75.196.0/24 maxlen: 24
                          147.75.197.0/24 maxlen: 24
                          147.75.198.0/24 maxlen: 24
                          147.75.199.0/24 maxlen: 24
                          147.75.200.0/22 maxlen: 22
                          147.75.204.0/23 maxlen: 23
                          147.75.206.0/24 maxlen: 24
                          147.75.207.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 22 Jan 2025 11:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:54:07:a9:02:13:e4:2f:f2:55:e6:3f:63:d6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Jan  1 11:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9191200063474bc2a9c6951527837101d4e129cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:3d:91:95:bf:00:1e:ff:3f:d6:41:b1:e3:
                    c9:6c:eb:da:fe:64:60:5c:13:63:54:b7:b8:d3:7d:
                    71:5d:2b:3c:eb:ec:79:32:c3:52:4d:d2:0e:37:2f:
                    5e:0e:ae:89:d5:7e:4f:fa:70:65:8e:6d:2b:ca:66:
                    d4:7d:be:1d:ae:d4:39:10:2e:81:8c:7d:ea:74:00:
                    1b:e6:10:a7:21:76:df:b5:06:1f:05:34:f7:4b:a1:
                    d3:08:36:aa:7a:6b:96:70:74:dc:7c:0a:7b:96:c3:
                    c6:d7:89:23:52:fd:76:8d:03:9a:21:55:2d:04:45:
                    0a:82:5e:e1:a0:d5:44:77:b0:0b:0b:a7:1e:9f:47:
                    86:4a:d3:38:7c:00:09:7f:74:06:3c:08:8a:1d:2d:
                    3e:c7:fa:fe:e1:3b:b1:d3:41:fb:f9:f8:36:63:9b:
                    27:0e:25:72:ae:07:0a:ae:1b:3e:46:7f:27:d8:18:
                    ae:60:29:38:f7:c3:30:12:8e:6c:1d:df:35:c8:2a:
                    9f:57:19:07:7d:aa:d9:15:19:1d:e2:c6:fe:30:e2:
                    7a:51:80:14:98:21:7b:da:0d:f2:91:24:5c:5d:c3:
                    3e:83:52:2a:4e:6a:33:70:e7:22:ca:1f:5c:f8:ad:
                    93:2e:a2:25:3f:1d:49:d3:7b:b2:f3:de:96:87:12:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:91:20:00:63:47:4B:C2:A9:C6:95:15:27:83:71:01:D4:E1:29:CF
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/kZEgAGNHS8KpxpUVJ4NxAdThKc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.244.0/23
                  86.109.0.0/20
                  93.187.216.0/22
                  136.144.48.0/20
                  139.178.64.0/19
                  145.40.64.0/18
                  147.28.128.0/23
                  147.28.131.0-147.28.212.255
                  147.28.214.0-147.28.235.255
                  147.28.240.0-147.28.242.255
                  147.75.32.0-147.75.111.255
                  147.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:ca:87:08:fe:80:01:47:24:c3:d6:10:6d:12:00:aa:fd:77:
         a7:d6:bc:36:95:fa:b2:2d:4c:0a:e6:05:a6:e0:5f:ba:bb:8a:
         74:9b:c4:75:b0:5b:2a:91:3c:97:ef:e0:c0:67:9f:03:2a:03:
         7c:a8:0b:1d:91:c2:26:2b:9a:8a:a4:92:d7:0c:b0:0a:c2:e4:
         73:7a:73:89:f5:21:64:97:a1:3c:f5:a8:2f:21:9a:fc:f5:7a:
         cd:41:e9:f4:be:b5:94:6c:e5:6c:f4:a8:83:83:53:b0:0e:04:
         13:db:6f:13:c6:fb:ea:e4:ef:10:10:46:84:49:76:65:a6:95:
         a9:16:f9:56:83:eb:d8:d0:7e:74:8d:51:c6:da:3e:2d:09:32:
         a5:94:39:5c:62:d9:02:d1:cb:ec:cb:4b:c9:a3:6c:69:1c:87:
         59:1e:e7:43:8e:93:a5:57:9a:7e:fe:25:ba:8d:29:17:99:93:
         a5:34:bb:30:7d:6c:71:df:7c:8e:a8:94:95:88:2b:3e:3e:f3:
         44:3f:e7:cb:20:8d:96:c8:6a:75:df:c5:78:c8:a0:7f:e9:70:
         d8:4a:4b:71:22:1d:11:6a:26:f2:b8:8d:6b:6a:57:04:e5:70:
         60:a0:da:9e:f1:37:f4:af:bf:e8:f7:78:a2:09:13:60:29:7c:
         39:35:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:33:55 2025 by rpki-client