Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/6J12vK9g0aHXTLAX5uEHzWtmEnQ.roa
File:                     6J12vK9g0aHXTLAX5uEHzWtmEnQ.roa (raw, json)
Hash identifier:          1YAVWpCEVy86mDeovXJ8mz2HvgmNzkXSvwdlB8XIhUs=
Subject key identifier:   E8:9D:76:BC:AF:60:D1:A1:D7:4C:B0:17:E6:E1:07:CD:6B:66:12:74
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       018D9D0BF0CA30DA5A96B419EF07CF3E5D33
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/6J12vK9g0aHXTLAX5uEHzWtmEnQ.roa
Signing time:             Mon 12 Feb 2024 11:20:21 +0000
ROA not before:           Mon 12 Feb 2024 11:20:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25003
IP address blocks:        80.74.96.0/19 maxlen: 19
                          80.74.96.0/22 maxlen: 22
                          80.74.96.0/23 maxlen: 23
                          80.74.96.0/24 maxlen: 24
                          80.74.97.0/24 maxlen: 24
                          80.74.99.0/24 maxlen: 24
                          80.74.100.0/22 maxlen: 22
                          80.74.100.0/23 maxlen: 23
                          80.74.100.0/24 maxlen: 24
                          80.74.101.0/24 maxlen: 24
                          80.74.102.0/23 maxlen: 23
                          80.74.102.0/24 maxlen: 24
                          80.74.103.0/24 maxlen: 24
                          80.74.104.0/22 maxlen: 22
                          80.74.104.0/23 maxlen: 23
                          80.74.104.0/24 maxlen: 24
                          80.74.105.0/24 maxlen: 24
                          80.74.106.0/23 maxlen: 23
                          80.74.106.0/24 maxlen: 24
                          80.74.107.0/24 maxlen: 24
                          80.74.108.0/22 maxlen: 22
                          80.74.108.0/23 maxlen: 23
                          80.74.108.0/24 maxlen: 24
                          80.74.109.0/24 maxlen: 24
                          80.74.110.0/23 maxlen: 23
                          80.74.110.0/24 maxlen: 24
                          80.74.111.0/24 maxlen: 24
                          80.74.112.0/20 maxlen: 20
                          80.74.112.0/21 maxlen: 21
                          80.74.112.0/22 maxlen: 22
                          80.74.112.0/23 maxlen: 23
                          80.74.112.0/24 maxlen: 24
                          80.74.113.0/24 maxlen: 24
                          80.74.114.0/24 maxlen: 24
                          80.74.115.0/24 maxlen: 24
                          80.74.116.0/22 maxlen: 22
                          80.74.116.0/23 maxlen: 23
                          80.74.116.0/24 maxlen: 24
                          80.74.117.0/24 maxlen: 24
                          80.74.118.0/23 maxlen: 23
                          80.74.118.0/24 maxlen: 24
                          80.74.119.0/24 maxlen: 24
                          80.74.120.0/22 maxlen: 22
                          80.74.120.0/24 maxlen: 24
                          80.74.121.0/24 maxlen: 24
                          80.74.122.0/23 maxlen: 23
                          80.74.122.0/24 maxlen: 24
                          80.74.123.0/24 maxlen: 24
                          80.74.124.0/22 maxlen: 22
                          91.143.224.0/20 maxlen: 20
                          91.143.224.0/22 maxlen: 22
                          91.143.224.0/23 maxlen: 23
                          91.143.224.0/24 maxlen: 24
                          91.143.226.0/23 maxlen: 23
                          91.143.226.0/24 maxlen: 24
                          91.143.227.0/24 maxlen: 24
                          91.143.228.0/24 maxlen: 24
                          91.143.232.0/22 maxlen: 22
                          91.143.232.0/23 maxlen: 23
                          91.143.232.0/24 maxlen: 24
                          91.143.233.0/24 maxlen: 24
                          92.61.224.0/20 maxlen: 20
                          92.61.226.0/24 maxlen: 24
                          92.61.234.0/23 maxlen: 23
                          92.61.234.0/24 maxlen: 24
                          92.61.235.0/24 maxlen: 24
                          92.61.239.0/24 maxlen: 24
                          94.188.128.0/17 maxlen: 17
                          94.188.128.0/22 maxlen: 22
                          94.188.129.0/24 maxlen: 24
                          94.188.130.0/23 maxlen: 23
                          94.188.130.0/24 maxlen: 24
                          94.188.131.0/24 maxlen: 24
                          94.188.133.0/24 maxlen: 24
                          94.188.136.0/24 maxlen: 24
                          94.188.138.0/23 maxlen: 23
                          94.188.138.0/24 maxlen: 24
                          94.188.139.0/24 maxlen: 24
                          94.188.140.0/24 maxlen: 24
                          94.188.141.0/24 maxlen: 24
                          94.188.144.0/22 maxlen: 22
                          94.188.151.0/24 maxlen: 24
                          94.188.152.0/22 maxlen: 22
                          94.188.153.0/24 maxlen: 24
                          94.188.155.0/24 maxlen: 24
                          94.188.157.0/24 maxlen: 24
                          94.188.158.0/24 maxlen: 24
                          94.188.160.0/24 maxlen: 24
                          94.188.161.0/24 maxlen: 24
                          94.188.162.0/24 maxlen: 24
                          94.188.163.0/24 maxlen: 24
                          94.188.164.0/24 maxlen: 24
                          94.188.165.0/24 maxlen: 24
                          94.188.166.0/24 maxlen: 24
                          94.188.167.0/24 maxlen: 24
                          94.188.169.0/24 maxlen: 24
                          94.188.171.0/24 maxlen: 24
                          94.188.172.0/24 maxlen: 24
                          94.188.173.0/24 maxlen: 24
                          94.188.175.0/24 maxlen: 24
                          94.188.176.0/23 maxlen: 23
                          94.188.178.0/23 maxlen: 23
                          94.188.178.0/24 maxlen: 24
                          94.188.179.0/24 maxlen: 24
                          94.188.184.0/24 maxlen: 24
                          94.188.186.0/23 maxlen: 23
                          94.188.188.0/23 maxlen: 23
                          94.188.190.0/24 maxlen: 24
                          94.188.191.0/24 maxlen: 24
                          94.188.192.0/24 maxlen: 24
                          94.188.195.0/24 maxlen: 24
                          94.188.197.0/24 maxlen: 24
                          94.188.199.0/24 maxlen: 24
                          94.188.200.0/24 maxlen: 24
                          94.188.213.0/24 maxlen: 24
                          94.188.217.0/24 maxlen: 24
                          94.188.219.0/24 maxlen: 24
                          94.188.220.0/24 maxlen: 24
                          94.188.221.0/24 maxlen: 24
                          94.188.238.0/23 maxlen: 23
                          94.188.242.0/24 maxlen: 24
                          94.188.243.0/24 maxlen: 24
                          94.188.244.0/23 maxlen: 23
                          94.188.246.0/23 maxlen: 23
                          94.188.247.0/24 maxlen: 24
                          94.188.248.0/22 maxlen: 22
                          94.188.248.0/23 maxlen: 23
                          94.188.248.0/24 maxlen: 24
                          94.188.251.0/24 maxlen: 24
                          94.188.252.0/23 maxlen: 23
                          94.188.254.0/23 maxlen: 23
                          2a02:23b8::/32 maxlen: 32
                          2a02:23b8:2::/52 maxlen: 52
                          2a02:23b8:1a00::/56 maxlen: 56
Validation:               Failed, certificate revoked on Tue 13 Feb 2024 06:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9d:0b:f0:ca:30:da:5a:96:b4:19:ef:07:cf:3e:5d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Feb 12 11:20:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e89d76bcaf60d1a1d74cb017e6e107cd6b661274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:a0:f5:4a:39:d3:6f:43:7e:5e:ca:4f:e0:
                    26:6b:e6:6a:e4:7c:6e:5c:72:6d:84:f9:c1:2f:94:
                    50:45:12:91:5c:25:ad:80:b4:ce:a9:80:a8:ea:8c:
                    97:7f:f7:cf:c1:a6:37:68:e6:38:2b:e8:2b:e6:03:
                    4b:d6:d6:09:15:ad:64:5a:6a:c3:ca:32:5b:0b:ee:
                    87:2e:65:44:e9:2f:75:d9:66:59:08:6c:2a:35:4b:
                    16:10:49:88:0d:71:8f:24:68:45:80:05:d9:5b:95:
                    03:78:f2:4c:81:af:fc:78:9d:75:22:50:1b:0a:da:
                    60:bb:94:f3:05:75:a3:99:d2:ce:0d:c1:8d:df:87:
                    2a:94:5c:06:16:7a:1e:06:ab:51:2d:3d:46:5f:da:
                    32:8f:d0:82:ee:7f:46:a3:ed:3c:47:8b:cc:5f:61:
                    ab:33:16:43:46:2a:fc:ef:d4:fb:f1:cd:42:b9:a0:
                    99:a5:b6:ce:56:be:6f:46:05:ac:91:8e:38:4c:76:
                    82:9d:f6:a4:da:69:8c:eb:8f:3b:de:7b:9b:0a:96:
                    a6:1c:21:0c:91:26:d2:32:e5:51:8f:25:91:22:47:
                    7c:7e:0c:1c:06:81:a7:ad:48:bc:46:50:78:f7:e5:
                    ce:37:72:01:b1:77:a7:32:36:71:14:a1:01:65:ea:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:76:BC:AF:60:D1:A1:D7:4C:B0:17:E6:E1:07:CD:6B:66:12:74
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/6J12vK9g0aHXTLAX5uEHzWtmEnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.74.96.0/19
                  91.143.224.0/20
                  92.61.224.0/20
                  94.188.128.0/17
                IPv6:
                  2a02:23b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:03:2d:2b:06:bf:ae:1c:11:52:ec:2e:15:de:22:f4:6f:
         ae:89:64:e0:43:0b:a4:03:88:c7:7a:a0:4b:bc:3b:25:5e:31:
         c5:ae:30:5f:59:7a:49:f3:3e:ae:ed:41:49:94:cd:e5:36:c2:
         9a:d6:ac:57:9b:e6:3e:83:5e:1e:9b:2d:e9:a8:b9:57:c6:4a:
         88:5f:1a:12:fd:e2:36:ee:92:21:2b:ef:1b:33:62:0c:e8:13:
         13:82:26:aa:ae:b2:2f:f2:7b:98:95:eb:a8:2c:ff:ab:2e:eb:
         fa:eb:24:49:eb:23:a9:c4:12:9d:6e:4f:0b:45:2f:b5:1c:f3:
         a4:b4:62:be:86:a1:7d:92:7a:df:f5:af:88:f5:ed:fb:44:d5:
         79:e3:63:d2:46:d9:32:3c:ab:03:11:e8:85:4c:bd:c9:35:99:
         56:c9:05:70:d8:78:cd:24:6b:06:00:7d:10:56:61:4c:3c:99:
         2e:51:21:72:26:e4:07:5b:55:67:1b:f2:51:b7:07:67:17:7f:
         6e:50:78:04:09:1c:6c:4a:35:a4:38:82:55:1e:7b:13:d0:bf:
         ee:ed:db:e8:69:20:7b:cc:39:af:1b:b1:04:70:4a:a3:da:d0:
         7d:89:80:41:06:c8:98:72:2d:c4:29:1a:30:74:ff:37:10:fb:
         56:93:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:46 2025 by rpki-client