Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/JTwSsf2XBmsehH1LVZMg3vWAick.roa
File:                     JTwSsf2XBmsehH1LVZMg3vWAick.roa (raw, json)
Hash identifier:          0K7EJjZJrEFGKyKs/Oci7hEs9lyhiT3RpbPlBVGfvt4=
Subject key identifier:   25:3C:12:B1:FD:97:06:6B:1E:84:7D:4B:55:93:20:DE:F5:80:89:C9
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       018EC7C61AF23FC60362EAF5E8C2F1F39A9E
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/JTwSsf2XBmsehH1LVZMg3vWAick.roa
Signing time:             Wed 10 Apr 2024 11:30:32 +0000
ROA not before:           Wed 10 Apr 2024 11:30:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29066
IP address blocks:        37.61.208.0/20 maxlen: 20
                          62.75.130.0/24 maxlen: 24
                          62.75.136.0/24 maxlen: 24
                          62.75.167.0/24 maxlen: 24
                          62.75.179.0/24 maxlen: 24
                          62.75.181.0/24 maxlen: 24
                          62.75.182.0/23 maxlen: 24
                          62.75.194.0/23 maxlen: 24
                          62.75.196.0/23 maxlen: 24
                          62.75.198.0/24 maxlen: 24
                          62.75.201.0/24 maxlen: 24
                          62.75.202.0/23 maxlen: 24
                          62.75.203.0/24 maxlen: 24
                          62.75.204.0/24 maxlen: 24
                          62.75.207.0/24 maxlen: 24
                          62.75.213.0/24 maxlen: 24
                          62.75.214.0/23 maxlen: 24
                          62.75.216.0/21 maxlen: 24
                          62.75.224.0/24 maxlen: 24
                          62.75.228.0/23 maxlen: 24
                          62.75.230.0/24 maxlen: 24
                          62.75.232.0/22 maxlen: 24
                          62.75.236.0/23 maxlen: 24
                          62.75.238.0/24 maxlen: 24
                          62.75.252.0/22 maxlen: 24
                          62.138.0.0/22 maxlen: 24
                          62.138.5.0/24 maxlen: 24
                          62.138.6.0/23 maxlen: 24
                          62.138.10.0/23 maxlen: 24
                          62.138.12.0/24 maxlen: 24
                          62.138.14.0/24 maxlen: 24
                          62.138.16.0/24 maxlen: 24
                          62.138.18.0/23 maxlen: 24
                          62.138.24.0/24 maxlen: 24
                          62.138.26.0/24 maxlen: 24
                          78.138.96.0/21 maxlen: 21
                          78.138.104.0/22 maxlen: 22
                          78.138.118.0/24 maxlen: 24
                          78.138.126.0/23 maxlen: 23
                          80.86.81.0/24 maxlen: 24
                          80.86.82.0/23 maxlen: 24
                          80.86.84.0/22 maxlen: 24
                          80.86.90.0/23 maxlen: 24
                          80.86.92.0/22 maxlen: 24
                          85.25.1.0/24 maxlen: 24
                          85.25.8.0/21 maxlen: 24
                          85.25.20.0/24 maxlen: 24
                          85.25.27.0/24 maxlen: 24
                          85.25.40.0/21 maxlen: 24
                          85.25.43.0/24 maxlen: 24
                          85.25.48.0/20 maxlen: 24
                          85.25.64.0/24 maxlen: 24
                          85.25.66.0/23 maxlen: 24
                          85.25.71.0/24 maxlen: 24
                          85.25.72.0/21 maxlen: 24
                          85.25.92.0/22 maxlen: 24
                          85.25.98.0/23 maxlen: 24
                          85.25.100.0/24 maxlen: 24
                          85.25.102.0/23 maxlen: 24
                          85.25.103.0/24 maxlen: 24
                          85.25.104.0/22 maxlen: 24
                          85.25.108.0/23 maxlen: 24
                          85.25.110.0/24 maxlen: 24
                          85.25.116.0/22 maxlen: 24
                          85.25.120.0/24 maxlen: 24
                          85.25.122.0/23 maxlen: 24
                          85.25.124.0/22 maxlen: 24
                          85.25.128.0/20 maxlen: 24
                          85.25.144.0/21 maxlen: 24
                          85.25.152.0/22 maxlen: 24
                          85.25.156.0/23 maxlen: 24
                          85.25.159.0/24 maxlen: 24
                          85.25.160.0/24 maxlen: 24
                          85.25.172.0/23 maxlen: 24
                          85.25.174.0/24 maxlen: 24
                          85.25.176.0/20 maxlen: 24
                          85.25.192.0/21 maxlen: 24
                          85.25.200.0/22 maxlen: 24
                          85.25.206.0/23 maxlen: 24
                          85.25.208.0/22 maxlen: 24
                          85.25.213.0/24 maxlen: 24
                          85.25.214.0/23 maxlen: 24
                          85.25.216.0/22 maxlen: 24
                          85.25.220.0/24 maxlen: 24
                          85.25.222.0/23 maxlen: 24
                          85.25.226.0/23 maxlen: 24
                          85.25.232.0/23 maxlen: 24
                          85.25.235.0/24 maxlen: 24
                          85.25.236.0/22 maxlen: 24
                          85.25.242.0/23 maxlen: 24
                          85.25.244.0/24 maxlen: 24
                          85.25.246.0/24 maxlen: 24
                          85.25.248.0/21 maxlen: 24
                          85.93.88.0/22 maxlen: 24
                          85.93.92.0/23 maxlen: 24
                          85.195.64.0/18 maxlen: 18
                          87.119.195.0/24 maxlen: 24
                          87.119.220.0/22 maxlen: 22
                          92.42.104.0/21 maxlen: 21
                          92.204.40.0/23 maxlen: 24
                          92.204.53.0/24 maxlen: 24
                          92.204.54.0/24 maxlen: 24
                          92.204.96.0/21 maxlen: 21
                          92.204.160.0/19 maxlen: 19
                          92.204.192.0/23 maxlen: 23
                          92.204.196.0/22 maxlen: 22
                          92.204.200.0/21 maxlen: 21
                          92.204.240.0/20 maxlen: 20
                          92.205.112.0/20 maxlen: 20
                          92.205.152.0/22 maxlen: 22
                          146.0.224.0/19 maxlen: 19
                          185.19.216.0/22 maxlen: 22
                          185.136.156.0/22 maxlen: 22
                          185.136.160.0/22 maxlen: 22
                          185.136.164.0/22 maxlen: 22
                          185.136.168.0/22 maxlen: 22
                          188.138.0.0/21 maxlen: 24
                          188.138.1.0/24 maxlen: 24
                          188.138.8.0/22 maxlen: 24
                          188.138.9.0/24 maxlen: 24
                          188.138.16.0/22 maxlen: 24
                          188.138.17.0/24 maxlen: 24
                          188.138.24.0/21 maxlen: 24
                          188.138.32.0/20 maxlen: 24
                          188.138.56.0/21 maxlen: 24
                          188.138.56.0/22 maxlen: 24
                          188.138.60.0/22 maxlen: 24
                          188.138.68.0/22 maxlen: 24
                          188.138.72.0/21 maxlen: 24
                          188.138.81.0/24 maxlen: 24
                          188.138.82.0/23 maxlen: 24
                          188.138.84.0/22 maxlen: 24
                          188.138.88.0/21 maxlen: 24
                          188.138.96.0/19 maxlen: 24
                          188.138.122.0/24 maxlen: 24
                          195.69.240.0/22 maxlen: 22
                          217.118.19.0/24 maxlen: 24
                          217.118.23.0/24 maxlen: 24
                          217.118.24.0/24 maxlen: 24
                          217.118.26.0/23 maxlen: 24
                          217.172.170.0/23 maxlen: 24
                          217.172.172.0/24 maxlen: 24
                          217.172.176.0/21 maxlen: 24
                          217.172.184.0/22 maxlen: 24
                          217.172.188.0/23 maxlen: 24
                          217.172.190.0/24 maxlen: 24
                          2a01:7a0::/29 maxlen: 29
                          2a01:7a7::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 09:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c7:c6:1a:f2:3f:c6:03:62:ea:f5:e8:c2:f1:f3:9a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Apr 10 11:30:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=253c12b1fd97066b1e847d4b559320def58089c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:01:c5:37:a9:ef:69:cc:c9:f7:3e:08:63:
                    dc:00:35:22:47:67:f2:e4:c7:31:5b:82:62:1b:3b:
                    3a:a0:e2:f6:d9:fd:1a:17:31:e9:38:a8:61:70:f3:
                    45:74:22:7a:6e:83:7f:46:79:77:c8:1c:61:74:4c:
                    20:57:53:f8:62:1f:03:bc:50:7b:73:da:1d:38:d6:
                    82:44:25:19:d5:05:dc:d2:3b:28:89:51:72:46:e6:
                    9b:b2:46:9c:84:13:84:78:4a:db:13:66:52:92:4d:
                    21:70:e8:9f:e0:90:07:47:78:5b:e4:c3:88:ab:0d:
                    68:c3:e6:a4:11:a6:51:e2:d8:f8:d0:6a:dd:90:d8:
                    7c:73:6f:7a:54:03:c3:d3:f9:aa:63:93:84:8c:6e:
                    1f:e8:f4:6a:66:a1:42:bc:7f:08:97:27:a0:b7:5a:
                    c2:70:c1:5b:53:9d:75:29:b3:6b:c1:88:2c:28:f1:
                    fe:02:63:1e:c8:cb:d6:43:82:90:c4:d7:0b:58:6f:
                    e5:29:e4:f6:10:bb:08:ad:a3:79:de:02:67:80:12:
                    f3:ad:76:4c:a4:e7:12:cc:1d:cc:63:3c:be:34:9f:
                    d9:5c:cd:e2:ae:18:16:89:11:c0:5b:78:51:f0:8b:
                    3f:2f:09:2e:32:83:aa:f4:1e:73:d4:27:c6:e2:e0:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3C:12:B1:FD:97:06:6B:1E:84:7D:4B:55:93:20:DE:F5:80:89:C9
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/JTwSsf2XBmsehH1LVZMg3vWAick.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.61.208.0/20
                  62.75.130.0/24
                  62.75.136.0/24
                  62.75.167.0/24
                  62.75.179.0/24
                  62.75.181.0-62.75.183.255
                  62.75.194.0-62.75.198.255
                  62.75.201.0-62.75.204.255
                  62.75.207.0/24
                  62.75.213.0-62.75.224.255
                  62.75.228.0-62.75.230.255
                  62.75.232.0-62.75.238.255
                  62.75.252.0/22
                  62.138.0.0/22
                  62.138.5.0-62.138.7.255
                  62.138.10.0-62.138.12.255
                  62.138.14.0/24
                  62.138.16.0/24
                  62.138.18.0/23
                  62.138.24.0/24
                  62.138.26.0/24
                  78.138.96.0-78.138.107.255
                  78.138.118.0/24
                  78.138.126.0/23
                  80.86.81.0-80.86.87.255
                  80.86.90.0-80.86.95.255
                  85.25.1.0/24
                  85.25.8.0/21
                  85.25.20.0/24
                  85.25.27.0/24
                  85.25.40.0-85.25.64.255
                  85.25.66.0/23
                  85.25.71.0-85.25.79.255
                  85.25.92.0/22
                  85.25.98.0-85.25.100.255
                  85.25.102.0-85.25.110.255
                  85.25.116.0-85.25.120.255
                  85.25.122.0-85.25.157.255
                  85.25.159.0-85.25.160.255
                  85.25.172.0-85.25.174.255
                  85.25.176.0-85.25.203.255
                  85.25.206.0-85.25.211.255
                  85.25.213.0-85.25.220.255
                  85.25.222.0/23
                  85.25.226.0/23
                  85.25.232.0/23
                  85.25.235.0-85.25.239.255
                  85.25.242.0-85.25.244.255
                  85.25.246.0/24
                  85.25.248.0/21
                  85.93.88.0-85.93.93.255
                  85.195.64.0/18
                  87.119.195.0/24
                  87.119.220.0/22
                  92.42.104.0/21
                  92.204.40.0/23
                  92.204.53.0-92.204.54.255
                  92.204.96.0/21
                  92.204.160.0-92.204.193.255
                  92.204.196.0-92.204.207.255
                  92.204.240.0/20
                  92.205.112.0/20
                  92.205.152.0/22
                  146.0.224.0/19
                  185.19.216.0/22
                  185.136.156.0-185.136.171.255
                  188.138.0.0-188.138.11.255
                  188.138.16.0/22
                  188.138.24.0-188.138.47.255
                  188.138.56.0/21
                  188.138.68.0-188.138.79.255
                  188.138.81.0-188.138.127.255
                  195.69.240.0/22
                  217.118.19.0/24
                  217.118.23.0-217.118.24.255
                  217.118.26.0/23
                  217.172.170.0-217.172.172.255
                  217.172.176.0-217.172.190.255
                IPv6:
                  2a01:7a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         b3:81:5a:19:c5:32:d3:12:18:46:7b:f2:79:b7:57:cd:1c:06:
         34:90:45:83:07:fd:bb:76:b0:05:45:0b:d3:fe:49:8d:7f:00:
         67:64:fe:23:3f:e6:a4:88:65:6a:02:62:f0:d2:e1:90:f4:12:
         76:87:e8:05:a1:62:98:c7:b6:a5:f0:4f:a7:2f:11:6d:47:f4:
         80:c9:31:5b:a9:7a:24:de:81:8f:d9:3b:94:ad:ba:75:58:d8:
         23:0e:84:25:1a:19:6b:80:f3:6d:be:3f:9c:89:7a:3c:66:e6:
         43:29:3e:bd:d6:94:9e:6d:50:58:ff:ca:74:6e:be:0a:10:e1:
         ae:53:21:1e:e4:9c:69:60:a2:d0:35:80:98:31:24:4a:dd:e1:
         43:46:a6:6a:96:cf:6a:69:c9:a6:be:35:cc:56:1d:1b:df:51:
         50:0b:14:88:a9:c4:54:50:a0:e7:4c:3f:0b:9d:17:1b:43:82:
         bf:f9:bb:87:bb:0a:31:c5:d5:d4:4f:4a:71:26:6a:ca:f2:7b:
         9e:dd:86:56:70:e3:60:3b:1f:b5:14:86:1a:80:af:4e:40:4c:
         97:0a:fa:dc:ac:5e:97:16:21:b7:02:9e:d4:a6:06:1f:78:47:
         26:24:33:f0:e0:dc:cf:31:5b:f4:82:38:f9:c3:c9:8c:99:a5:
         8d:da:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org