Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/aCoR_yD6NmPTESpnfYvq0wDP91E.roa
File:                     aCoR_yD6NmPTESpnfYvq0wDP91E.roa (raw, json)
Hash identifier:          s2t4rwQwyKHW+5618rWmTHqHC4i7VudySs/2jsSgyDk=
Subject key identifier:   68:2A:11:FF:20:FA:36:63:D3:11:2A:67:7D:8B:EA:D3:00:CF:F7:51
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       018CC3B6C4B41851454412C1923137EC7849
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/aCoR_yD6NmPTESpnfYvq0wDP91E.roa
Signing time:             Mon 01 Jan 2024 06:29:44 +0000
ROA not before:           Mon 01 Jan 2024 06:29:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44477
IP address blocks:        185.231.205.0/24 maxlen: 24
                          185.231.204.0/24 maxlen: 24
                          185.231.206.0/24 maxlen: 24
                          185.231.207.0/24 maxlen: 24
                          45.84.0.0/24 maxlen: 24
                          193.43.147.0/24 maxlen: 24
                          193.43.146.0/24 maxlen: 24
                          45.84.1.0/24 maxlen: 24
                          45.67.35.0/24 maxlen: 24
                          45.67.34.0/24 maxlen: 24
                          92.119.200.0/22 maxlen: 24
                          45.93.8.0/24 maxlen: 24
                          45.93.11.0/24 maxlen: 24
                          45.93.10.0/24 maxlen: 24
                          45.93.9.0/24 maxlen: 24
                          45.8.145.0/24 maxlen: 24
                          45.8.144.0/24 maxlen: 24
                          45.8.147.0/24 maxlen: 24
                          45.8.146.0/24 maxlen: 24
                          193.46.57.0/24 maxlen: 24
                          193.46.56.0/24 maxlen: 24
                          194.116.172.0/24 maxlen: 24
                          194.116.173.0/24 maxlen: 24
                          194.116.191.0/24 maxlen: 24
                          194.116.190.0/24 maxlen: 24
                          141.98.170.0/24 maxlen: 24
                          141.98.169.0/24 maxlen: 24
                          141.98.168.0/24 maxlen: 24
                          188.119.122.0/24 maxlen: 24
                          188.119.121.0/24 maxlen: 24
                          188.119.125.0/24 maxlen: 24
                          188.119.124.0/24 maxlen: 24
                          188.119.123.0/24 maxlen: 24
                          45.89.55.0/24 maxlen: 24
                          45.89.54.0/24 maxlen: 24
                          45.89.52.0/24 maxlen: 24
                          45.159.250.0/24 maxlen: 24
                          45.159.249.0/24 maxlen: 24
                          45.159.248.0/24 maxlen: 24
                          45.159.251.0/24 maxlen: 24
                          5.182.37.0/24 maxlen: 24
                          5.182.36.0/24 maxlen: 24
                          5.182.38.0/24 maxlen: 24
                          5.182.39.0/24 maxlen: 24
                          193.57.138.0/24 maxlen: 24
                          193.57.137.0/24 maxlen: 24
                          193.57.136.0/24 maxlen: 24
                          193.57.139.0/24 maxlen: 24
                          93.185.166.0/24 maxlen: 24
                          45.87.152.0/24 maxlen: 24
                          45.87.153.0/24 maxlen: 24
                          45.87.155.0/24 maxlen: 24
                          45.87.154.0/24 maxlen: 24
                          194.4.48.0/24 maxlen: 24
                          194.4.51.0/24 maxlen: 24
                          194.4.50.0/24 maxlen: 24
                          194.4.49.0/24 maxlen: 24
                          92.118.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 14:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:c4:b4:18:51:45:44:12:c1:92:31:37:ec:78:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jan  1 06:29:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=682a11ff20fa3663d3112a677d8bead300cff751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:81:4c:d4:07:1f:93:f1:e2:ba:8a:01:ce:a9:
                    b2:85:1f:a8:55:ff:94:9b:38:66:83:3e:1a:41:d8:
                    19:4e:95:b3:08:b6:30:4d:1b:78:0b:bb:03:75:cc:
                    e0:d5:1e:1f:d8:65:58:8a:73:cd:52:a5:ad:67:cd:
                    ac:ec:9c:83:d8:97:9e:a9:aa:9c:e6:ff:8d:41:84:
                    66:c2:db:33:16:25:35:5a:80:a9:33:ac:6f:ec:a2:
                    d3:2d:6c:cc:cf:ba:76:3a:ff:b3:3a:91:29:18:71:
                    5e:db:7d:52:fb:f6:7e:9b:23:2f:3d:48:4f:b5:03:
                    27:0c:4b:d1:20:33:99:39:d3:f3:9d:02:18:d1:4f:
                    ca:cf:6d:3b:ed:9f:2d:4c:32:e4:95:09:45:31:34:
                    5e:51:27:e9:02:5c:54:f0:7e:ee:80:23:6e:f5:6a:
                    be:48:77:a3:ee:68:b6:3a:de:3c:8d:4e:fe:81:cf:
                    7a:c8:fd:8e:54:a1:79:5d:7d:40:e1:4a:47:ce:1d:
                    76:bc:6c:2f:88:94:67:87:7f:9e:ba:dc:2a:5f:a3:
                    70:d4:96:9a:17:56:c3:cf:25:2e:12:c8:e7:a0:66:
                    7d:d7:a8:3c:2b:07:2a:d2:cf:06:f4:18:0f:1c:6d:
                    43:dc:38:52:5b:5b:9c:43:54:d7:a4:4b:15:30:cb:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2A:11:FF:20:FA:36:63:D3:11:2A:67:7D:8B:EA:D3:00:CF:F7:51
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/aCoR_yD6NmPTESpnfYvq0wDP91E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.36.0/22
                  45.8.144.0/22
                  45.67.34.0/23
                  45.84.0.0/23
                  45.87.152.0/22
                  45.89.52.0/24
                  45.89.54.0/23
                  45.93.8.0/22
                  45.159.248.0/22
                  92.118.88.0/22
                  92.119.200.0/22
                  93.185.166.0/24
                  141.98.168.0-141.98.170.255
                  185.231.204.0/22
                  188.119.121.0-188.119.125.255
                  193.43.146.0/23
                  193.46.56.0/23
                  193.57.136.0/22
                  194.4.48.0/22
                  194.116.172.0/23
                  194.116.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:42:1a:8e:30:14:0c:59:54:4d:e3:de:ee:00:a8:6d:04:c8:
         14:0e:4c:12:f4:12:be:0a:b8:a6:57:d4:8f:32:d1:d9:4a:b3:
         7d:da:e4:31:7c:05:f9:20:05:c0:16:92:c2:34:ed:b2:c9:ce:
         ba:6c:d8:14:bd:7c:26:07:37:8c:3e:a2:8b:be:aa:a6:4e:84:
         8d:55:6b:f9:5c:74:bd:a9:a0:54:01:0d:08:06:f6:2f:bc:b0:
         5f:84:ee:c5:88:84:8c:74:ab:95:f6:ba:8a:ba:9f:85:a0:98:
         a7:3c:6b:25:b5:99:1b:37:68:0e:6f:9b:d3:34:a3:1c:b6:2e:
         1c:b7:1c:4c:f4:74:98:c5:1c:5a:40:65:75:63:2b:16:c1:c0:
         7f:fe:57:9e:5c:9c:08:e5:ea:11:f6:36:08:cc:94:cb:91:c1:
         17:54:b6:c4:9a:3a:21:59:da:d3:ea:87:d1:fe:a2:fc:b3:1b:
         27:ca:45:9f:0c:a5:e4:ff:c9:41:12:74:97:f7:cf:7c:f8:04:
         1f:c2:1a:17:da:c5:f5:3e:9a:19:e6:64:7f:f0:ea:e3:af:19:
         07:91:d0:77:1b:c3:8a:6d:57:b5:35:71:5a:ab:39:60:9e:8e:
         0e:e0:aa:ab:59:72:a3:f3:e9:4a:eb:33:dd:20:16:44:08:cd:
         11:bc:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:18 2024 by rpki-client on console-ams.rpki-client.org