Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/J0_feTXbkI5a-EPUcFLK5hw1N4U.roa
File:                     J0_feTXbkI5a-EPUcFLK5hw1N4U.roa (raw, json)
Hash identifier:          cPw1+ZzwqMq7/fixWvAOOOWsMdCXRuydhFojnHSPHj4=
Subject key identifier:   27:4F:DF:79:35:DB:90:8E:5A:F8:43:D4:70:52:CA:E6:1C:35:37:85
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018BB0C9CE33819C77BFFF53E535E0BBAA83
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/J0_feTXbkI5a-EPUcFLK5hw1N4U.roa
Signing time:             Wed 08 Nov 2023 21:14:57 +0000
ROA not before:           Wed 08 Nov 2023 21:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200845
IP address blocks:        45.133.62.0/24 maxlen: 24
                          45.133.60.0/24 maxlen: 24
                          45.133.60.0/22 maxlen: 22
                          45.133.63.0/24 maxlen: 24
                          45.133.61.0/24 maxlen: 24
                          45.133.62.0/23 maxlen: 23
                          45.133.60.0/23 maxlen: 23
                          178.19.40.0/22 maxlen: 22
                          178.19.42.0/24 maxlen: 24
                          178.19.40.0/24 maxlen: 24
                          178.19.43.0/24 maxlen: 24
                          178.19.41.0/24 maxlen: 24
                          2.59.192.0/24 maxlen: 24
                          2.59.192.0/22 maxlen: 22
                          2.59.192.0/23 maxlen: 23
                          2.59.194.0/24 maxlen: 24
                          2.59.195.0/24 maxlen: 24
                          2.59.193.0/24 maxlen: 24
                          2.59.194.0/23 maxlen: 23
                          194.32.112.0/24 maxlen: 24
                          194.32.112.0/22 maxlen: 22
                          194.32.115.0/24 maxlen: 24
                          194.32.113.0/24 maxlen: 24
                          194.32.114.0/24 maxlen: 24
                          194.31.105.0/24 maxlen: 24
                          194.31.104.0/23 maxlen: 23
                          194.31.104.0/24 maxlen: 24
                          194.31.104.0/22 maxlen: 22
                          194.31.107.0/24 maxlen: 24
                          194.31.106.0/23 maxlen: 23
                          194.31.106.0/24 maxlen: 24
                          45.152.140.0/22 maxlen: 22
                          45.152.142.0/24 maxlen: 24
                          45.152.140.0/24 maxlen: 24
                          45.152.142.0/23 maxlen: 23
                          45.152.140.0/23 maxlen: 23
                          45.152.143.0/24 maxlen: 24
                          45.152.141.0/24 maxlen: 24
                          185.225.245.0/24 maxlen: 24
                          185.225.244.0/22 maxlen: 22
                          185.225.246.0/24 maxlen: 24
                          185.225.244.0/24 maxlen: 24
                          185.225.247.0/24 maxlen: 24
                          185.246.12.0/23 maxlen: 23
                          185.246.15.0/24 maxlen: 24
                          185.246.13.0/24 maxlen: 24
                          185.246.14.0/24 maxlen: 24
                          185.246.12.0/24 maxlen: 24
                          45.145.132.0/22 maxlen: 22
                          45.145.132.0/24 maxlen: 24
                          45.145.132.0/23 maxlen: 23
                          45.145.134.0/24 maxlen: 24
                          45.145.134.0/23 maxlen: 23
                          45.145.135.0/24 maxlen: 24
                          45.145.133.0/24 maxlen: 24
                          92.118.182.0/23 maxlen: 23
                          92.118.180.0/23 maxlen: 23
                          92.118.183.0/24 maxlen: 24
                          92.118.181.0/24 maxlen: 24
                          92.118.180.0/22 maxlen: 22
                          92.118.182.0/24 maxlen: 24
                          92.118.180.0/24 maxlen: 24
                          185.231.186.0/24 maxlen: 24
                          185.231.187.0/24 maxlen: 24
                          89.190.152.0/24 maxlen: 24
                          89.190.152.0/22 maxlen: 22
                          89.190.154.0/24 maxlen: 24
                          89.190.153.0/24 maxlen: 24
                          89.190.155.0/24 maxlen: 24
                          45.137.13.0/24 maxlen: 24
                          45.137.12.0/23 maxlen: 23
                          45.137.12.0/24 maxlen: 24
                          185.244.231.0/24 maxlen: 24
                          185.244.229.0/24 maxlen: 24
                          185.244.228.0/23 maxlen: 23
                          185.244.230.0/24 maxlen: 24
                          185.244.228.0/24 maxlen: 24
                          45.150.84.0/23 maxlen: 23
                          45.150.85.0/24 maxlen: 24
                          45.150.84.0/22 maxlen: 22
                          45.150.84.0/24 maxlen: 24
                          45.150.86.0/23 maxlen: 23
                          45.150.87.0/24 maxlen: 24
                          45.150.86.0/24 maxlen: 24
                          185.28.51.0/24 maxlen: 24
                          31.15.2.0/24 maxlen: 24
                          31.15.0.0/24 maxlen: 24
                          31.15.4.0/24 maxlen: 24
                          31.15.0.0/22 maxlen: 22
                          31.15.1.0/24 maxlen: 24
                          31.15.3.0/24 maxlen: 25
                          31.15.2.0/23 maxlen: 23
                          31.15.0.0/23 maxlen: 23
                          31.15.6.0/24 maxlen: 24
                          31.15.7.0/24 maxlen: 24
                          31.15.5.0/24 maxlen: 24
                          45.155.56.0/22 maxlen: 22
                          45.155.58.0/24 maxlen: 24
                          45.155.56.0/24 maxlen: 24
                          45.155.58.0/23 maxlen: 23
                          45.155.56.0/23 maxlen: 23
                          45.155.57.0/24 maxlen: 24
                          45.155.59.0/24 maxlen: 24
                          45.81.125.0/24 maxlen: 24
                          45.81.124.0/23 maxlen: 23
                          45.81.124.0/24 maxlen: 24
                          45.81.124.0/22 maxlen: 22
                          45.81.127.0/24 maxlen: 24
                          45.81.126.0/23 maxlen: 23
                          45.81.126.0/24 maxlen: 24
                          185.229.216.0/22 maxlen: 22
                          185.229.218.0/24 maxlen: 24
                          185.229.216.0/24 maxlen: 24
                          185.229.218.0/23 maxlen: 23
                          185.229.216.0/23 maxlen: 23
                          185.229.219.0/24 maxlen: 24
                          185.229.217.0/24 maxlen: 24
                          45.81.105.0/24 maxlen: 24
                          45.81.104.0/23 maxlen: 23
                          45.81.104.0/24 maxlen: 24
                          45.81.104.0/22 maxlen: 22
                          45.81.107.0/24 maxlen: 24
                          45.81.106.0/23 maxlen: 23
                          45.81.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b0:c9:ce:33:81:9c:77:bf:ff:53:e5:35:e0:bb:aa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Nov  8 21:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=274fdf7935db908e5af843d47052cae61c353785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fc:61:78:75:6b:69:fa:fc:54:14:47:c6:fb:
                    ab:ff:ed:81:d0:80:de:4f:29:56:0f:e3:9b:74:6c:
                    df:ee:54:f4:dd:54:37:86:15:22:ee:c4:73:fa:d7:
                    c8:a3:f0:88:e8:ed:ab:95:1b:06:e9:48:19:c4:5e:
                    65:02:29:54:19:5c:5b:27:89:ff:dc:4c:e1:91:37:
                    da:0f:c2:87:a1:68:7d:dc:c6:19:45:6c:7c:38:f3:
                    60:28:86:9a:05:ce:8b:f0:38:66:28:e8:e3:b9:ce:
                    c1:34:f8:ff:0c:81:2b:4b:41:a3:7a:f5:5e:93:af:
                    55:56:1a:3e:03:7e:94:df:a2:e6:03:28:dc:d6:8b:
                    15:53:0d:00:83:da:ea:b0:c0:a1:24:d5:dc:83:ac:
                    eb:6b:b4:30:8d:83:b6:cf:18:9d:f3:65:8b:3c:07:
                    ac:14:cd:6b:10:7b:68:8f:06:e0:3c:df:9e:2f:d7:
                    ed:23:77:f7:e5:e6:15:e6:30:c7:d1:c0:a0:c4:f2:
                    78:4b:fc:8e:f1:5d:6f:22:28:65:9a:7a:17:29:a4:
                    af:9a:71:75:61:9f:38:67:61:29:f7:ab:88:24:f0:
                    26:00:e4:7a:b5:43:e1:96:e4:76:f1:55:79:11:8e:
                    94:c1:97:8f:a2:b7:a6:cb:fa:7c:4b:c3:b1:df:54:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4F:DF:79:35:DB:90:8E:5A:F8:43:D4:70:52:CA:E6:1C:35:37:85
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/J0_feTXbkI5a-EPUcFLK5hw1N4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.192.0/22
                  31.15.0.0/21
                  45.81.104.0/22
                  45.81.124.0/22
                  45.133.60.0/22
                  45.137.12.0/23
                  45.145.132.0/22
                  45.150.84.0/22
                  45.152.140.0/22
                  45.155.56.0/22
                  89.190.152.0/22
                  92.118.180.0/22
                  178.19.40.0/22
                  185.28.51.0/24
                  185.225.244.0/22
                  185.229.216.0/22
                  185.231.186.0/23
                  185.244.228.0/22
                  185.246.12.0/22
                  194.31.104.0/22
                  194.32.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:89:9a:36:7d:07:9e:86:52:e9:75:43:e4:0b:60:32:a2:29:
         fa:18:f4:31:d3:56:0b:8b:1e:17:49:5e:39:99:50:96:ab:c4:
         10:a8:aa:a2:e7:9c:b9:42:cd:2d:0a:cd:d0:3b:49:18:5c:54:
         95:28:d3:7a:07:6d:16:41:5b:3c:97:dd:6a:2f:48:69:ce:57:
         01:c1:e6:e5:ec:05:8e:fd:c2:b9:8f:18:c0:d4:0a:4a:98:7b:
         fb:f2:b8:b0:3d:cb:57:a0:02:aa:4d:36:a0:04:36:c5:26:6f:
         d9:bf:8b:3e:a8:90:09:d9:9a:31:b6:96:5b:af:4f:b3:fa:89:
         d6:d8:c6:c8:b7:fb:3c:ed:59:99:e2:5b:df:d3:23:5b:6b:c4:
         c5:f7:66:8a:11:4a:a2:ed:ad:e7:3d:b6:18:ce:28:27:a3:a7:
         46:48:1a:8c:67:5c:68:b7:bc:58:a4:ec:4c:16:d9:53:d7:d3:
         db:62:e2:6d:02:18:9d:b0:53:d6:70:84:87:4b:ed:f1:a8:79:
         df:bc:6c:a6:3f:40:be:bf:20:77:d9:b5:0b:93:a0:af:df:e7:
         37:6e:2f:2e:fa:69:cb:d9:71:6a:ce:fc:72:8d:1d:10:2e:2a:
         ae:25:17:07:60:af:b0:42:27:71:47:fb:3d:7d:cb:51:43:cc:
         25:41:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org