Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa
File:                     4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa (raw, json)
Hash identifier:          pKUQe0WUpNH+5KvXaf2hyfwS+RNQKTHbnAHZzVyGFIs=
Subject key identifier:   E0:C4:3C:75:E5:80:6B:FE:DD:73:0E:83:F4:38:39:73:85:F3:DA:C2
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018CC56E13E24749E80F932FF7BDFE140815
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa
Signing time:             Mon 01 Jan 2024 14:29:34 +0000
ROA not before:           Mon 01 Jan 2024 14:29:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200845
IP address blocks:        45.133.62.0/24 maxlen: 24
                          45.133.60.0/24 maxlen: 24
                          45.133.60.0/22 maxlen: 22
                          45.133.63.0/24 maxlen: 24
                          45.133.61.0/24 maxlen: 24
                          45.133.62.0/23 maxlen: 23
                          45.133.60.0/23 maxlen: 23
                          178.19.40.0/22 maxlen: 22
                          178.19.42.0/24 maxlen: 24
                          178.19.40.0/24 maxlen: 24
                          178.19.43.0/24 maxlen: 24
                          178.19.41.0/24 maxlen: 24
                          2.59.192.0/24 maxlen: 24
                          2.59.192.0/22 maxlen: 22
                          2.59.192.0/23 maxlen: 23
                          2.59.194.0/24 maxlen: 24
                          2.59.195.0/24 maxlen: 24
                          2.59.193.0/24 maxlen: 24
                          2.59.194.0/23 maxlen: 23
                          194.32.112.0/24 maxlen: 24
                          194.32.112.0/22 maxlen: 22
                          194.32.115.0/24 maxlen: 24
                          194.32.113.0/24 maxlen: 24
                          194.32.114.0/24 maxlen: 24
                          194.31.105.0/24 maxlen: 24
                          194.31.104.0/23 maxlen: 23
                          194.31.104.0/24 maxlen: 24
                          194.31.104.0/22 maxlen: 22
                          194.31.107.0/24 maxlen: 24
                          194.31.106.0/23 maxlen: 23
                          194.31.106.0/24 maxlen: 24
                          45.152.140.0/22 maxlen: 22
                          45.152.142.0/24 maxlen: 24
                          45.152.140.0/24 maxlen: 24
                          45.152.142.0/23 maxlen: 23
                          45.152.140.0/23 maxlen: 23
                          45.152.143.0/24 maxlen: 24
                          45.152.141.0/24 maxlen: 24
                          185.225.245.0/24 maxlen: 24
                          185.225.244.0/22 maxlen: 22
                          185.225.246.0/24 maxlen: 24
                          185.225.244.0/24 maxlen: 24
                          185.225.247.0/24 maxlen: 24
                          185.246.12.0/23 maxlen: 23
                          185.246.15.0/24 maxlen: 24
                          185.246.13.0/24 maxlen: 24
                          185.246.14.0/24 maxlen: 24
                          185.246.12.0/24 maxlen: 24
                          45.145.132.0/22 maxlen: 22
                          45.145.132.0/24 maxlen: 24
                          45.145.132.0/23 maxlen: 23
                          45.145.134.0/24 maxlen: 24
                          45.145.134.0/23 maxlen: 23
                          45.145.135.0/24 maxlen: 24
                          45.145.133.0/24 maxlen: 24
                          92.118.182.0/23 maxlen: 23
                          92.118.180.0/23 maxlen: 23
                          92.118.183.0/24 maxlen: 24
                          92.118.181.0/24 maxlen: 24
                          92.118.180.0/22 maxlen: 22
                          92.118.182.0/24 maxlen: 24
                          92.118.180.0/24 maxlen: 24
                          185.231.186.0/24 maxlen: 24
                          185.231.187.0/24 maxlen: 24
                          89.190.152.0/24 maxlen: 24
                          89.190.152.0/22 maxlen: 22
                          89.190.154.0/24 maxlen: 24
                          89.190.153.0/24 maxlen: 24
                          89.190.155.0/24 maxlen: 24
                          45.137.13.0/24 maxlen: 24
                          45.137.12.0/23 maxlen: 23
                          45.137.12.0/24 maxlen: 24
                          185.244.231.0/24 maxlen: 24
                          185.244.229.0/24 maxlen: 24
                          185.244.228.0/23 maxlen: 23
                          185.244.230.0/24 maxlen: 24
                          185.244.228.0/24 maxlen: 24
                          45.150.84.0/23 maxlen: 23
                          45.150.85.0/24 maxlen: 24
                          45.150.84.0/22 maxlen: 22
                          45.150.84.0/24 maxlen: 24
                          45.150.86.0/23 maxlen: 23
                          45.150.87.0/24 maxlen: 24
                          45.150.86.0/24 maxlen: 24
                          185.28.51.0/24 maxlen: 24
                          31.15.2.0/24 maxlen: 24
                          31.15.0.0/24 maxlen: 24
                          31.15.4.0/24 maxlen: 24
                          31.15.0.0/22 maxlen: 22
                          31.15.1.0/24 maxlen: 24
                          31.15.3.0/24 maxlen: 25
                          31.15.2.0/23 maxlen: 23
                          31.15.0.0/23 maxlen: 23
                          31.15.6.0/24 maxlen: 24
                          31.15.7.0/24 maxlen: 24
                          31.15.5.0/24 maxlen: 24
                          45.155.56.0/22 maxlen: 22
                          45.155.58.0/24 maxlen: 24
                          45.155.56.0/24 maxlen: 24
                          45.155.58.0/23 maxlen: 23
                          45.155.56.0/23 maxlen: 23
                          45.155.57.0/24 maxlen: 24
                          45.155.59.0/24 maxlen: 24
                          45.81.125.0/24 maxlen: 24
                          45.81.124.0/23 maxlen: 23
                          45.81.124.0/24 maxlen: 24
                          45.81.124.0/22 maxlen: 22
                          45.81.127.0/24 maxlen: 24
                          45.81.126.0/23 maxlen: 23
                          45.81.126.0/24 maxlen: 24
                          185.229.216.0/22 maxlen: 22
                          185.229.218.0/24 maxlen: 24
                          185.229.216.0/24 maxlen: 24
                          185.229.218.0/23 maxlen: 23
                          185.229.216.0/23 maxlen: 23
                          185.229.219.0/24 maxlen: 24
                          185.229.217.0/24 maxlen: 24
                          45.81.105.0/24 maxlen: 24
                          45.81.104.0/23 maxlen: 23
                          45.81.104.0/24 maxlen: 24
                          45.81.104.0/22 maxlen: 22
                          45.81.107.0/24 maxlen: 24
                          45.81.106.0/23 maxlen: 23
                          45.81.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 17:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:13:e2:47:49:e8:0f:93:2f:f7:bd:fe:14:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 14:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e0c43c75e5806bfedd730e83f438397385f3dac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:21:7b:21:d0:cd:fd:b1:dc:03:b4:36:52:
                    e1:6e:b6:39:9b:9e:9f:9d:f8:bd:0e:f8:b0:78:8d:
                    12:d2:f6:26:5d:0f:ff:2e:08:84:ab:fe:29:cd:86:
                    c6:30:c4:9d:2b:20:fc:92:2a:10:32:02:8d:31:04:
                    09:0b:bb:05:eb:d4:be:92:9d:3c:e6:ac:8c:7a:c9:
                    8e:4a:ad:95:79:ba:53:9c:65:85:69:05:73:27:e4:
                    30:13:33:8a:d1:1f:eb:ff:73:95:0c:47:de:4b:17:
                    72:7c:3c:d8:77:3b:5e:54:29:fe:48:fe:f8:fc:67:
                    eb:d0:42:73:04:da:bf:5c:30:40:d2:10:be:8f:b6:
                    06:d7:9c:83:62:9e:c0:69:74:f9:12:96:62:aa:03:
                    7f:4e:6b:5c:8a:80:c4:f2:a3:64:1e:14:04:f7:32:
                    5d:27:10:35:49:eb:8b:0a:26:81:86:32:b0:f3:98:
                    13:f5:f6:35:da:ef:bc:1e:61:cb:13:bc:a6:63:be:
                    8a:dd:0f:cd:48:bc:7e:03:18:87:73:0b:19:c9:bf:
                    d5:2d:78:b6:52:b9:94:7e:15:f5:08:7c:f7:97:2f:
                    4e:fb:44:aa:fb:34:2f:f7:11:cc:b6:30:d1:54:f9:
                    3d:8c:a2:9d:d4:b0:4e:1a:45:3b:af:1a:a6:71:6d:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C4:3C:75:E5:80:6B:FE:DD:73:0E:83:F4:38:39:73:85:F3:DA:C2
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4MQ8deWAa_7dcw6D9Dg5c4Xz2sI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.192.0/22
                  31.15.0.0/21
                  45.81.104.0/22
                  45.81.124.0/22
                  45.133.60.0/22
                  45.137.12.0/23
                  45.145.132.0/22
                  45.150.84.0/22
                  45.152.140.0/22
                  45.155.56.0/22
                  89.190.152.0/22
                  92.118.180.0/22
                  178.19.40.0/22
                  185.28.51.0/24
                  185.225.244.0/22
                  185.229.216.0/22
                  185.231.186.0/23
                  185.244.228.0/22
                  185.246.12.0/22
                  194.31.104.0/22
                  194.32.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:43:76:22:b3:b6:89:5e:e9:d1:ea:30:de:73:86:94:b0:0f:
         62:65:c7:a2:2c:b1:3a:b9:91:1d:cb:52:74:53:0f:63:21:38:
         d2:27:cb:6a:e2:db:7b:a7:ce:48:09:51:ba:23:d5:c3:37:50:
         8f:11:56:e1:27:2c:8b:fb:96:db:a6:bb:68:bd:d1:b1:c9:80:
         5c:95:c0:67:cd:c7:bb:e7:5d:50:ee:bf:41:8a:53:e7:71:6b:
         2b:4f:07:e0:23:3b:c9:dd:70:ce:a4:ab:0c:4d:39:f5:29:8a:
         5b:06:5b:cd:8d:1f:7a:53:80:93:07:0a:2e:12:44:8f:32:3e:
         b6:cc:08:e3:73:4e:e2:4e:11:2d:71:e2:08:42:5f:05:9b:4c:
         7e:75:09:ce:60:e2:61:55:75:28:4f:df:78:67:59:ea:16:56:
         a6:87:06:15:90:fd:d0:62:ae:0d:cd:bf:c1:d9:a2:48:0f:29:
         a3:1a:79:45:67:af:ca:01:cd:23:85:2a:8e:91:68:58:55:22:
         72:06:c1:dc:a2:fb:14:11:10:51:eb:4a:35:8a:3f:73:a3:64:
         5e:00:4a:0f:a6:79:dc:ab:ff:04:08:5e:b3:53:9b:1b:14:58:
         b9:cb:bb:65:f8:4a:4c:c2:ba:88:ef:b5:0f:25:bc:1f:8a:cc:
         ba:5a:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 20:09:18 2024 by rpki-client on console-ams.rpki-client.org