Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EuACnSW-Wpp87nXdN4vryIT-LDY.roa
File:                     EuACnSW-Wpp87nXdN4vryIT-LDY.roa (raw, json)
Hash identifier:          xRQfrijIOMN1wXZ69KHTzUDbf8yXgqsRHPRaPif3fZ8=
Subject key identifier:   12:E0:02:9D:25:BE:5A:9A:7C:EE:75:DD:37:8B:EB:C8:84:FE:2C:36
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BED293286BDDE00A6E55A28C37FFE68D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EuACnSW-Wpp87nXdN4vryIT-LDY.roa
Signing time:             Mon 20 Nov 2023 14:36:21 +0000
ROA not before:           Mon 20 Nov 2023 14:36:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58057
IP address blocks:        194.50.94.0/24 maxlen: 24
                          194.50.92.0/24 maxlen: 24
                          45.136.136.0/22 maxlen: 24
                          94.177.122.0/24 maxlen: 24
                          45.12.68.0/22 maxlen: 24
                          31.42.183.0/24 maxlen: 24
                          93.88.200.0/21 maxlen: 24
                          193.163.85.0/24 maxlen: 24
                          193.163.86.0/24 maxlen: 24
                          139.28.96.0/22 maxlen: 24
                          45.131.184.0/22 maxlen: 24
                          77.81.50.0/23 maxlen: 24
                          185.232.117.0/24 maxlen: 24
                          85.202.203.0/24 maxlen: 24
                          109.61.104.0/21 maxlen: 24
                          2a0e:97c0:260::/44 maxlen: 44
                          2a04:ccc6::/32 maxlen: 48
                          2a0e:97c3:110::/44 maxlen: 48
                          2a0c:3b80::/32 maxlen: 48
                          2a04:ccc7::/32 maxlen: 48
                          2a04:ccc4::/32 maxlen: 48
                          2a0e:97c0:170::/48 maxlen: 48
                          2a0c:3b82::/32 maxlen: 48
                          2a10:2f00:193::/48 maxlen: 48
                          2a04:ccc5::/32 maxlen: 48
                          2a0e:b107:2220::/45 maxlen: 48
                          2a0e:97c0:1d0::/44 maxlen: 44
                          2a0e:b107:1165::/48 maxlen: 48
                          2a10:2f00:18d::/48 maxlen: 48
                          2a0e:b107:9f2::/48 maxlen: 48
                          2a0c:3b81::/32 maxlen: 48
                          2a10:cc40:250::/44 maxlen: 48
                          2a0f:e404:102::/48 maxlen: 48
                          2a0c:3b84::/32 maxlen: 48
                          2a04:ccc3::/32 maxlen: 48
                          2a0e:b107:1786::/48 maxlen: 48
                          2a0e:97c4:120::/44 maxlen: 48
                          2a10:ccc0:420::/44 maxlen: 48
                          2a0c:3b86::/32 maxlen: 48
                          2a0c:3b85::/32 maxlen: 48
                          2a0e:b107:21c0::/45 maxlen: 48
                          2a09:4c0::/29 maxlen: 64
                          2a04:ccc0:ffff::/48 maxlen: 48
                          2a10:cc45:130::/44 maxlen: 44
                          2a0c:3b83::/32 maxlen: 48
                          2a04:ccc1::/32 maxlen: 48
                          2a0e:97c1:200::/40 maxlen: 48
                          2a0e:b107:2228::/45 maxlen: 48
                          2a10:2f00:18f::/48 maxlen: 48
                          2a0e:97c4:100::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 23:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:29:32:86:bd:de:00:a6:e5:5a:28:c3:7f:fe:68:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 20 14:36:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12e0029d25be5a9a7cee75dd378bebc884fe2c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:bd:0f:b8:fd:8d:0d:13:41:58:32:d0:57:
                    bc:c8:fc:31:6a:b4:8b:20:92:9b:b4:10:03:86:55:
                    5f:b8:72:2a:a8:99:a5:eb:38:76:f1:b7:33:3f:2b:
                    df:b7:5d:2b:94:f9:d4:d6:a9:d0:e7:a1:07:f3:10:
                    c6:7e:42:cd:2e:13:14:06:59:2e:87:f8:44:0e:5c:
                    65:23:5c:02:6e:3e:7b:e8:bc:85:67:c1:5c:17:c2:
                    85:1c:9b:e4:96:1f:8f:97:6a:52:e9:ef:6f:1e:cb:
                    c6:d6:b2:f2:8b:ed:7f:f2:0e:4d:e2:33:10:42:67:
                    3c:87:c3:5f:13:aa:c4:d3:60:d9:1e:e5:1c:b5:f6:
                    26:a2:bd:1d:cd:39:26:e7:f4:aa:c7:f9:44:94:47:
                    d9:ef:d9:85:47:f6:75:71:f2:f0:30:fe:33:29:66:
                    c6:01:7e:52:4d:49:82:e1:de:4a:92:cd:b8:1e:8c:
                    e4:5d:6b:0c:64:b4:e0:c4:37:41:84:86:8f:c6:0f:
                    58:f3:9d:79:20:d3:69:2f:c9:db:d8:cb:d9:e3:2b:
                    1f:00:e9:05:24:c6:23:54:b8:0f:79:f8:ed:d4:cc:
                    3a:f5:0b:76:d6:53:fc:43:0f:db:a0:2b:87:53:88:
                    25:d8:88:00:ba:e2:c0:0c:9d:cc:9a:d3:92:f1:f4:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:02:9D:25:BE:5A:9A:7C:EE:75:DD:37:8B:EB:C8:84:FE:2C:36
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EuACnSW-Wpp87nXdN4vryIT-LDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.183.0/24
                  45.12.68.0/22
                  45.131.184.0/22
                  45.136.136.0/22
                  77.81.50.0/23
                  85.202.203.0/24
                  93.88.200.0/21
                  94.177.122.0/24
                  109.61.104.0/21
                  139.28.96.0/22
                  185.232.117.0/24
                  193.163.85.0-193.163.86.255
                  194.50.92.0/24
                  194.50.94.0/24
                IPv6:
                  2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
                  2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:4c0::/29
                  2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c0:170::/48
                  2a0e:97c0:1d0::/44
                  2a0e:97c0:260::/44
                  2a0e:97c1:200::/40
                  2a0e:97c3:110::/44
                  2a0e:97c4:100::/44
                  2a0e:97c4:120::/44
                  2a0e:b107:9f2::/48
                  2a0e:b107:1165::/48
                  2a0e:b107:1786::/48
                  2a0e:b107:21c0::/45
                  2a0e:b107:2220::/44
                  2a0f:e404:102::/48
                  2a10:2f00:18d::/48
                  2a10:2f00:18f::/48
                  2a10:2f00:193::/48
                  2a10:cc40:250::/44
                  2a10:cc45:130::/44
                  2a10:ccc0:420::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:cb:06:27:63:7f:db:99:f7:c4:8f:ba:64:a3:31:b6:41:
         0e:8a:16:e4:ac:52:97:42:eb:9f:59:22:60:0b:54:27:ba:01:
         60:0f:92:18:30:e1:2f:8d:b7:86:ab:5f:8d:02:05:93:49:a6:
         10:cf:59:96:87:cd:5e:46:c5:5c:e6:77:d5:91:85:ca:46:b8:
         93:47:5e:af:28:96:d7:25:e4:4b:1e:78:8d:3f:1a:86:d3:30:
         06:41:ce:4e:07:b2:79:29:f6:63:91:28:b6:8a:c0:dc:63:3f:
         eb:ab:b0:b9:91:ff:19:fb:30:50:66:66:a2:5f:9b:92:f1:96:
         19:ef:94:e2:a1:cf:64:df:38:be:80:f3:5c:8c:89:cd:25:db:
         c2:b8:db:14:d9:95:30:b6:4b:de:d2:e5:3c:00:1b:98:60:13:
         9e:a0:bd:3f:f6:07:be:05:b0:49:e9:e4:ea:92:0b:20:d9:70:
         a0:1c:45:43:09:bf:ea:39:ee:8e:3b:4f:84:5e:8e:ed:a1:13:
         ad:a6:40:32:0e:8b:df:5c:7f:cb:ff:8f:ea:7d:b0:aa:1d:ab:
         c5:30:b8:9c:12:b6:5d:63:7a:c1:a7:12:35:fc:72:ed:d5:a2:
         2c:ba:18:e3:12:f9:80:d8:ca:2d:9b:4e:49:54:99:02:75:b9:
         84:25:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org