Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6DCkntc2_tbBJEL-0Q9UOa61lXI.roa
File:                     6DCkntc2_tbBJEL-0Q9UOa61lXI.roa (raw, json)
Hash identifier:          2xqzXeCHWKURnLTp14bxtocEWd8PZyRPSwqTyIghGC0=
Subject key identifier:   E8:30:A4:9E:D7:36:FE:D6:C1:24:42:FE:D1:0F:54:39:AE:B5:95:72
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018BB01BDC25840C22F71199485054A56884
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6DCkntc2_tbBJEL-0Q9UOa61lXI.roa
Signing time:             Wed 08 Nov 2023 18:04:57 +0000
ROA not before:           Wed 08 Nov 2023 18:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200845
IP address blocks:        45.133.62.0/24 maxlen: 24
                          45.133.60.0/24 maxlen: 24
                          45.133.60.0/22 maxlen: 22
                          45.133.63.0/24 maxlen: 24
                          45.133.61.0/24 maxlen: 24
                          45.133.62.0/23 maxlen: 23
                          45.133.60.0/23 maxlen: 23
                          178.19.40.0/22 maxlen: 22
                          178.19.42.0/24 maxlen: 24
                          178.19.40.0/24 maxlen: 24
                          178.19.43.0/24 maxlen: 24
                          178.19.41.0/24 maxlen: 24
                          2.59.192.0/24 maxlen: 24
                          2.59.192.0/22 maxlen: 22
                          2.59.192.0/23 maxlen: 23
                          2.59.194.0/24 maxlen: 24
                          2.59.195.0/24 maxlen: 24
                          2.59.193.0/24 maxlen: 24
                          2.59.194.0/23 maxlen: 23
                          194.32.112.0/24 maxlen: 24
                          194.32.112.0/22 maxlen: 22
                          194.32.115.0/24 maxlen: 24
                          194.32.113.0/24 maxlen: 24
                          194.32.114.0/24 maxlen: 24
                          194.31.105.0/24 maxlen: 24
                          194.31.104.0/23 maxlen: 23
                          194.31.104.0/24 maxlen: 24
                          194.31.104.0/22 maxlen: 22
                          194.31.107.0/24 maxlen: 24
                          194.31.106.0/23 maxlen: 23
                          194.31.106.0/24 maxlen: 24
                          45.152.140.0/22 maxlen: 22
                          45.152.142.0/24 maxlen: 24
                          45.152.140.0/24 maxlen: 24
                          45.152.142.0/23 maxlen: 23
                          45.152.140.0/23 maxlen: 23
                          45.152.143.0/24 maxlen: 24
                          45.152.141.0/24 maxlen: 24
                          185.225.245.0/24 maxlen: 24
                          185.225.244.0/22 maxlen: 22
                          185.225.246.0/24 maxlen: 24
                          185.225.244.0/24 maxlen: 24
                          185.225.247.0/24 maxlen: 24
                          185.246.12.0/23 maxlen: 23
                          185.246.15.0/24 maxlen: 24
                          185.246.13.0/24 maxlen: 24
                          185.246.14.0/24 maxlen: 24
                          185.246.12.0/24 maxlen: 24
                          45.145.132.0/22 maxlen: 22
                          45.145.132.0/24 maxlen: 24
                          45.145.132.0/23 maxlen: 23
                          45.145.134.0/24 maxlen: 24
                          45.145.134.0/23 maxlen: 23
                          45.145.135.0/24 maxlen: 24
                          45.145.133.0/24 maxlen: 24
                          92.118.182.0/23 maxlen: 23
                          92.118.180.0/23 maxlen: 23
                          92.118.183.0/24 maxlen: 24
                          92.118.181.0/24 maxlen: 24
                          92.118.180.0/22 maxlen: 22
                          92.118.182.0/24 maxlen: 24
                          92.118.180.0/24 maxlen: 24
                          185.231.186.0/24 maxlen: 24
                          185.231.187.0/24 maxlen: 24
                          89.190.152.0/24 maxlen: 24
                          89.190.152.0/22 maxlen: 22
                          89.190.154.0/24 maxlen: 24
                          89.190.153.0/24 maxlen: 24
                          89.190.155.0/24 maxlen: 24
                          45.137.13.0/24 maxlen: 24
                          45.137.12.0/23 maxlen: 23
                          45.137.12.0/24 maxlen: 24
                          185.244.231.0/24 maxlen: 24
                          185.244.229.0/24 maxlen: 24
                          185.244.228.0/23 maxlen: 23
                          185.244.230.0/24 maxlen: 24
                          185.244.228.0/24 maxlen: 24
                          45.150.84.0/23 maxlen: 23
                          45.150.85.0/24 maxlen: 24
                          45.150.84.0/22 maxlen: 22
                          45.150.84.0/24 maxlen: 24
                          45.150.86.0/23 maxlen: 23
                          45.150.87.0/24 maxlen: 24
                          45.150.86.0/24 maxlen: 24
                          185.28.51.0/24 maxlen: 24
                          31.15.2.0/24 maxlen: 24
                          31.15.0.0/24 maxlen: 24
                          31.15.4.0/24 maxlen: 24
                          31.15.0.0/22 maxlen: 22
                          31.15.1.0/24 maxlen: 24
                          31.15.3.0/24 maxlen: 25
                          31.15.2.0/23 maxlen: 23
                          31.15.0.0/23 maxlen: 23
                          31.15.6.0/24 maxlen: 24
                          31.15.7.0/24 maxlen: 24
                          31.15.5.0/24 maxlen: 24
                          45.155.56.0/22 maxlen: 22
                          45.155.58.0/24 maxlen: 24
                          45.155.56.0/24 maxlen: 24
                          45.155.58.0/23 maxlen: 23
                          45.155.56.0/23 maxlen: 23
                          45.155.57.0/24 maxlen: 24
                          45.155.59.0/24 maxlen: 24
                          45.81.125.0/24 maxlen: 24
                          45.81.124.0/23 maxlen: 23
                          45.81.124.0/24 maxlen: 24
                          45.81.124.0/22 maxlen: 22
                          45.81.127.0/24 maxlen: 24
                          45.81.126.0/23 maxlen: 23
                          45.81.126.0/24 maxlen: 24
                          185.229.216.0/22 maxlen: 22
                          185.229.218.0/24 maxlen: 24
                          185.229.216.0/24 maxlen: 24
                          185.229.218.0/23 maxlen: 23
                          185.229.216.0/23 maxlen: 23
                          185.229.219.0/24 maxlen: 24
                          185.229.217.0/24 maxlen: 24
                          45.81.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b0:1b:dc:25:84:0c:22:f7:11:99:48:50:54:a5:68:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Nov  8 18:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e830a49ed736fed6c12442fed10f5439aeb59572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:4e:f6:50:c5:b6:4a:dd:21:15:ae:00:cc:
                    41:d5:50:2f:a8:7f:ed:d2:b8:89:2b:de:f9:4b:98:
                    03:18:3a:17:ae:72:bd:43:a4:1c:5e:5a:f9:e7:aa:
                    b0:93:68:bc:97:2b:5b:6e:7c:98:c2:e1:90:f8:fe:
                    3f:b9:9d:c4:d1:ee:bf:3a:5d:4b:bb:ad:54:60:f5:
                    ec:52:73:93:77:47:de:67:e7:16:d3:fe:8c:11:30:
                    0a:a9:ce:48:fd:57:07:e2:34:58:1d:6e:1e:b3:82:
                    e1:ce:f8:46:11:85:8f:f5:7f:fe:7e:b3:bb:0b:de:
                    91:3a:6a:69:32:8c:c1:04:c4:3e:79:9d:ff:21:3c:
                    ea:14:e6:e8:dc:e2:9c:5d:fa:de:e0:8f:d3:c9:02:
                    49:c4:f7:06:3e:81:11:ae:2a:39:7f:7b:b7:fb:86:
                    1d:86:20:9a:78:74:77:23:c0:c0:b8:06:b6:d3:64:
                    36:31:88:e2:01:24:7c:c1:bc:be:04:5f:83:35:47:
                    8b:eb:65:75:0e:93:12:02:56:6f:d0:84:80:98:70:
                    27:ae:19:19:a8:f8:07:cb:3a:0f:e1:04:37:87:32:
                    35:64:25:7f:0c:9b:b6:7a:6f:cc:45:b7:a5:dc:ad:
                    41:36:00:c1:9d:37:90:14:e1:fe:dc:fb:ae:e3:95:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:A4:9E:D7:36:FE:D6:C1:24:42:FE:D1:0F:54:39:AE:B5:95:72
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6DCkntc2_tbBJEL-0Q9UOa61lXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.192.0/22
                  31.15.0.0/21
                  45.81.104.0/22
                  45.81.124.0/22
                  45.133.60.0/22
                  45.137.12.0/23
                  45.145.132.0/22
                  45.150.84.0/22
                  45.152.140.0/22
                  45.155.56.0/22
                  89.190.152.0/22
                  92.118.180.0/22
                  178.19.40.0/22
                  185.28.51.0/24
                  185.225.244.0/22
                  185.229.216.0/22
                  185.231.186.0/23
                  185.244.228.0/22
                  185.246.12.0/22
                  194.31.104.0/22
                  194.32.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:20:4c:99:b6:4c:1e:f8:77:83:9b:73:aa:4b:41:1f:d1:de:
         6f:73:91:5d:ca:99:4e:eb:84:79:bd:df:cc:2d:0d:09:5b:f8:
         2f:3e:73:2e:78:38:2e:ef:35:7e:f0:0f:af:74:8c:50:05:38:
         46:c0:7e:85:40:91:41:e5:98:71:e9:b8:8d:e9:70:5c:a3:17:
         b3:f5:f0:48:f1:78:a3:6d:db:53:b4:06:24:59:74:83:1b:ba:
         4f:70:f2:67:73:c0:9b:0a:e3:15:a5:55:2c:0f:73:eb:36:28:
         84:c8:30:86:59:13:c6:f2:fa:c4:45:11:68:b8:3d:a3:86:ae:
         47:64:de:34:8d:3f:92:9a:97:e4:5b:a3:47:06:5f:31:21:11:
         c6:b5:9b:6d:23:56:de:57:74:57:9b:f6:d7:1e:17:2c:d2:82:
         6e:83:35:87:04:0c:05:a5:73:94:00:81:4c:51:a7:6e:d8:d0:
         32:75:77:c0:a0:71:9b:ab:1e:8f:0b:aa:32:49:6b:4c:3e:b2:
         93:30:82:6f:24:6e:c3:1c:66:98:d2:d4:15:b1:c7:e8:30:c0:
         56:1e:58:c6:70:19:79:64:fb:c1:17:76:15:5d:06:a2:8a:90:
         5f:c2:34:2d:98:f9:5e:fd:2b:75:1c:13:3f:c9:c9:1d:b8:8a:
         b8:a6:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 22:04:32 2023 by rpki-client on console-fra.rpki-client.org