Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ihEzQW90DaP6LlzYSWc1kVOvvR0.roa
File:                     ihEzQW90DaP6LlzYSWc1kVOvvR0.roa (raw, json)
Hash identifier:          4ucrEu9am0QR09AdEqK4xDX9rN+YxZlYwjZFJkfO+iQ=
Subject key identifier:   8A:11:33:41:6F:74:0D:A3:FA:2E:5C:D8:49:67:35:91:53:AF:BD:1D
Certificate issuer:       /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial:       0187F5B35BF63067494D08AFAEF3C2FB9CAD
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ihEzQW90DaP6LlzYSWc1kVOvvR0.roa
Signing time:             Sun 07 May 2023 10:13:05 +0000
ROA not before:           Sun 07 May 2023 10:13:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        213.6.64.0/18 maxlen: 18
                          213.6.0.0/18 maxlen: 18
                          213.6.0.0/16 maxlen: 24
                          46.60.64.0/18 maxlen: 24
                          185.19.220.0/22 maxlen: 22
                          103.248.244.0/22 maxlen: 22
                          45.127.176.0/22 maxlen: 22
                          188.161.104.0/24 maxlen: 24
                          188.161.105.0/24 maxlen: 24
                          188.161.106.0/24 maxlen: 24
                          188.161.108.0/24 maxlen: 24
                          188.161.111.0/24 maxlen: 24
                          188.161.107.0/24 maxlen: 24
                          188.161.109.0/24 maxlen: 24
                          188.161.110.0/24 maxlen: 24
                          213.6.128.0/18 maxlen: 18
                          158.140.16.0/20 maxlen: 24
                          158.140.108.0/22 maxlen: 22
                          158.140.112.0/22 maxlen: 22
                          158.140.116.0/22 maxlen: 22
                          158.140.120.0/22 maxlen: 22
                          158.140.124.0/22 maxlen: 22
                          43.241.158.0/24 maxlen: 24
                          43.241.156.0/24 maxlen: 24
                          43.241.159.0/24 maxlen: 24
                          43.241.157.0/24 maxlen: 24
                          103.53.4.0/24 maxlen: 24
                          158.140.64.0/22 maxlen: 22
                          158.140.68.0/23 maxlen: 23
                          158.140.64.0/18 maxlen: 24
                          158.140.80.0/22 maxlen: 22
                          158.140.84.0/22 maxlen: 22
                          103.248.36.0/22 maxlen: 22
                          158.140.88.0/22 maxlen: 22
                          45.113.108.0/22 maxlen: 22
                          158.140.92.0/22 maxlen: 22
                          158.140.96.0/22 maxlen: 22
                          158.140.100.0/22 maxlen: 22
                          158.140.104.0/22 maxlen: 22
                          5.11.46.0/24 maxlen: 24
                          5.11.47.0/24 maxlen: 24
                          103.206.108.0/22 maxlen: 22
                          103.193.132.0/22 maxlen: 22
                          115.166.128.0/22 maxlen: 22
                          103.37.84.0/24 maxlen: 24
                          103.37.85.0/24 maxlen: 24
                          103.37.86.0/24 maxlen: 24
                          103.37.87.0/24 maxlen: 24
                          203.30.104.0/22 maxlen: 22
                          103.57.108.0/22 maxlen: 22
                          1.179.40.0/21 maxlen: 21
                          103.206.36.0/22 maxlen: 22
                          1.179.72.0/21 maxlen: 21
                          59.152.88.0/21 maxlen: 21
                          1.179.88.0/21 maxlen: 21
                          45.117.42.0/24 maxlen: 24
                          45.117.40.0/24 maxlen: 24
                          45.117.43.0/24 maxlen: 24
                          45.117.41.0/24 maxlen: 24
                          1.178.112.0/20 maxlen: 20
                          43.245.208.0/22 maxlen: 22
                          1.178.128.0/20 maxlen: 20
                          43.245.156.0/22 maxlen: 22
                          213.244.124.0/22 maxlen: 22
                          139.190.176.0/20 maxlen: 20
                          37.75.211.0/24 maxlen: 24
                          213.244.70.0/23 maxlen: 24
                          213.244.64.0/18 maxlen: 24
                          213.244.72.0/21 maxlen: 24
                          24.42.64.0/18 maxlen: 18
                          139.190.128.0/18 maxlen: 24
                          103.231.104.0/22 maxlen: 22
                          195.123.160.0/21 maxlen: 21
                          195.123.160.0/23 maxlen: 23
                          195.123.112.0/21 maxlen: 21
                          103.216.184.0/22 maxlen: 22
                          194.176.98.0/23 maxlen: 24
                          43.243.92.0/22 maxlen: 22
                          83.244.0.0/17 maxlen: 24
                          83.244.22.0/23 maxlen: 23
                          203.189.236.0/22 maxlen: 22
                          212.14.224.0/19 maxlen: 24
                          188.0.96.0/20 maxlen: 20
                          188.161.184.0/22 maxlen: 22
                          45.134.202.0/23 maxlen: 23
                          188.161.200.0/21 maxlen: 21
                          45.121.104.0/22 maxlen: 22
                          45.121.106.0/23 maxlen: 23
                          188.0.112.0/20 maxlen: 20
                          43.243.24.0/22 maxlen: 22
                          43.243.32.0/22 maxlen: 22
                          103.27.144.0/22 maxlen: 22
                          188.161.24.0/23 maxlen: 23
                          103.215.4.0/22 maxlen: 22
                          188.161.30.0/23 maxlen: 23
                          43.255.108.0/22 maxlen: 22
                          188.161.40.0/21 maxlen: 21
                          188.161.48.0/21 maxlen: 21
                          188.161.56.0/21 maxlen: 21
                          182.161.60.0/22 maxlen: 22
                          188.161.0.0/16 maxlen: 24
                          188.161.134.0/23 maxlen: 23
                          118.107.180.0/22 maxlen: 22
                          185.19.220.0/24 maxlen: 24
                          185.19.222.0/24 maxlen: 24
                          185.19.221.0/24 maxlen: 24
                          185.19.223.0/24 maxlen: 24
                          45.127.176.0/24 maxlen: 24
                          45.127.178.0/24 maxlen: 24
                          45.127.177.0/24 maxlen: 24
                          45.127.179.0/24 maxlen: 24
                          103.242.60.0/22 maxlen: 22
                          188.161.104.0/21 maxlen: 21
                          188.161.112.0/22 maxlen: 22
                          188.161.116.0/22 maxlen: 22
                          43.241.156.0/22 maxlen: 22
                          103.53.4.0/22 maxlen: 24
                          103.248.37.0/24 maxlen: 24
                          193.227.236.0/23 maxlen: 23
                          103.248.36.0/24 maxlen: 24
                          103.248.38.0/24 maxlen: 24
                          103.248.39.0/24 maxlen: 24
                          45.113.109.0/24 maxlen: 24
                          45.113.111.0/24 maxlen: 24
                          45.113.108.0/24 maxlen: 24
                          45.113.110.0/24 maxlen: 24
                          5.11.40.0/21 maxlen: 21
                          103.199.176.0/22 maxlen: 22
                          176.65.0.0/21 maxlen: 24
                          176.65.8.0/22 maxlen: 22
                          103.239.96.0/22 maxlen: 22
                          103.37.84.0/22 maxlen: 22
                          86.104.188.0/22 maxlen: 22
                          113.212.64.0/22 maxlen: 22
                          103.57.110.0/24 maxlen: 24
                          103.57.108.0/24 maxlen: 24
                          103.57.111.0/24 maxlen: 24
                          103.57.109.0/24 maxlen: 24
                          77.91.148.0/22 maxlen: 24
                          82.213.0.0/18 maxlen: 24
                          77.91.128.0/21 maxlen: 21
                          77.91.128.0/18 maxlen: 24
                          77.91.136.0/21 maxlen: 21
                          45.117.40.0/22 maxlen: 22
                          85.184.240.0/22 maxlen: 22
                          213.244.117.0/24 maxlen: 24
                          213.244.115.0/24 maxlen: 24
                          103.102.252.0/22 maxlen: 22
                          213.244.116.0/24 maxlen: 24
                          213.244.121.0/24 maxlen: 24
                          213.244.122.0/24 maxlen: 24
                          37.75.208.0/21 maxlen: 21
                          213.244.70.0/24 maxlen: 24
                          213.244.71.0/24 maxlen: 24
                          144.48.236.0/22 maxlen: 22
                          213.244.76.0/24 maxlen: 24
                          83.244.78.0/24 maxlen: 24
                          213.244.72.0/24 maxlen: 24
                          83.244.74.0/24 maxlen: 24
                          83.244.75.0/24 maxlen: 24
                          83.244.73.0/24 maxlen: 24
                          213.244.73.0/24 maxlen: 24
                          83.244.79.0/24 maxlen: 24
                          103.231.105.0/24 maxlen: 24
                          103.231.104.0/24 maxlen: 24
                          195.123.166.0/24 maxlen: 24
                          195.123.161.0/24 maxlen: 24
                          103.231.107.0/24 maxlen: 24
                          195.123.163.0/24 maxlen: 24
                          195.123.164.0/24 maxlen: 24
                          195.123.165.0/24 maxlen: 24
                          195.123.162.0/24 maxlen: 24
                          103.231.106.0/24 maxlen: 24
                          195.123.160.0/24 maxlen: 24
                          195.123.167.0/24 maxlen: 24
                          45.116.248.0/22 maxlen: 22
                          45.117.4.0/22 maxlen: 22
                          195.123.112.0/24 maxlen: 24
                          195.123.114.0/24 maxlen: 24
                          195.123.116.0/24 maxlen: 24
                          195.123.118.0/24 maxlen: 24
                          195.123.113.0/24 maxlen: 24
                          195.123.115.0/24 maxlen: 24
                          195.123.117.0/24 maxlen: 24
                          195.123.119.0/24 maxlen: 24
                          103.196.120.0/22 maxlen: 22
                          203.28.19.0/24 maxlen: 24
                          43.243.92.0/24 maxlen: 24
                          43.243.94.0/24 maxlen: 24
                          43.243.95.0/24 maxlen: 24
                          43.243.93.0/24 maxlen: 24
                          103.209.204.0/22 maxlen: 22
                          193.223.252.0/23 maxlen: 23
                          194.169.188.0/23 maxlen: 23
                          213.6.192.0/18 maxlen: 18
                          45.134.202.0/24 maxlen: 24
                          45.134.203.0/24 maxlen: 24
                          45.121.105.0/24 maxlen: 24
                          45.121.104.0/24 maxlen: 24
                          45.121.107.0/24 maxlen: 24
                          45.121.106.0/24 maxlen: 24
                          43.243.35.0/24 maxlen: 24
                          43.243.32.0/24 maxlen: 24
                          43.243.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 May 2023 06:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f5:b3:5b:f6:30:67:49:4d:08:af:ae:f3:c2:fb:9c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
        Validity
            Not Before: May  7 10:13:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a1133416f740da3fa2e5cd84967359153afbd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:59:0b:26:3f:f8:b3:22:28:f9:49:ac:27:
                    ef:df:c4:19:7a:b6:58:b5:18:a9:96:6c:9c:9a:63:
                    23:55:ff:88:cb:f1:89:c8:8d:51:50:1d:31:b2:da:
                    94:5b:e9:e1:3d:a4:55:e5:e0:38:80:96:d3:24:8e:
                    52:6a:eb:12:55:07:67:59:b8:02:f1:ad:be:bd:08:
                    6c:9a:45:4e:3b:81:44:fe:3e:24:08:f9:f2:41:1b:
                    4d:40:d6:5b:48:84:d0:7b:cf:2b:8b:8d:92:c9:bd:
                    7f:02:98:6c:27:02:78:6f:0a:fc:9a:2f:83:7e:a7:
                    45:b6:ce:cd:62:d6:2d:17:4e:eb:a2:86:1f:0b:33:
                    98:5b:bd:3c:1a:ed:28:28:f5:2a:5a:e1:00:9b:32:
                    64:1a:bf:d9:f1:28:82:fb:df:0c:13:5f:a0:32:94:
                    3b:d7:ee:fe:cf:e8:20:44:93:d8:fd:4d:ed:ce:e0:
                    14:4f:b9:3f:0d:4b:8e:f0:ed:f0:d6:e5:ba:97:3f:
                    ad:ae:ed:85:4f:d8:e6:07:1b:1e:a3:69:74:bb:ae:
                    46:11:62:60:7c:e1:fe:e9:2e:eb:72:00:74:32:1d:
                    e5:59:89:f9:ae:85:aa:f3:71:ac:70:1e:7e:e9:26:
                    b4:1b:70:0b:66:95:c0:20:c4:ac:fe:39:c6:7d:70:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:33:41:6F:74:0D:A3:FA:2E:5C:D8:49:67:35:91:53:AF:BD:1D
            X509v3 Authority Key Identifier:
                keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ihEzQW90DaP6LlzYSWc1kVOvvR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.112.0-1.178.143.255
                  1.179.40.0/21
                  1.179.72.0/21
                  1.179.88.0/21
                  5.11.40.0/21
                  24.42.64.0/18
                  37.75.208.0/21
                  43.241.156.0/22
                  43.243.24.0/22
                  43.243.32.0/22
                  43.243.92.0/22
                  43.245.156.0/22
                  43.245.208.0/22
                  43.255.108.0/22
                  45.113.108.0/22
                  45.116.248.0/22
                  45.117.4.0/22
                  45.117.40.0/22
                  45.121.104.0/22
                  45.127.176.0/22
                  45.134.202.0/23
                  46.60.64.0/18
                  59.152.88.0/21
                  77.91.128.0/18
                  82.213.0.0/18
                  83.244.0.0/17
                  85.184.240.0/22
                  86.104.188.0/22
                  103.27.144.0/22
                  103.37.84.0/22
                  103.53.4.0/22
                  103.57.108.0/22
                  103.102.252.0/22
                  103.193.132.0/22
                  103.196.120.0/22
                  103.199.176.0/22
                  103.206.36.0/22
                  103.206.108.0/22
                  103.209.204.0/22
                  103.215.4.0/22
                  103.216.184.0/22
                  103.231.104.0/22
                  103.239.96.0/22
                  103.242.60.0/22
                  103.248.36.0/22
                  103.248.244.0/22
                  113.212.64.0/22
                  115.166.128.0/22
                  118.107.180.0/22
                  139.190.128.0/18
                  144.48.236.0/22
                  158.140.16.0/20
                  158.140.64.0/18
                  176.65.0.0-176.65.11.255
                  182.161.60.0/22
                  185.19.220.0/22
                  188.0.96.0/19
                  188.161.0.0/16
                  193.223.252.0/23
                  193.227.236.0/23
                  194.169.188.0/23
                  194.176.98.0/23
                  195.123.112.0/21
                  195.123.160.0/21
                  203.28.19.0/24
                  203.30.104.0/22
                  203.189.236.0/22
                  212.14.224.0/19
                  213.6.0.0/16
                  213.244.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:b4:e5:84:6f:d2:0d:44:21:25:3f:18:e0:bd:f2:66:03:
         23:7f:c6:70:76:99:cd:13:2f:46:c6:ed:ad:a7:c4:1d:cd:15:
         4e:29:a8:ec:64:c9:e6:8f:66:9d:b8:a8:7c:13:3a:64:fd:6a:
         53:46:cc:08:1b:c0:d8:92:c9:ff:42:1e:b8:41:db:e2:76:df:
         73:e3:5f:78:78:c4:3b:33:c6:12:db:2f:13:37:fa:a7:98:ce:
         98:0a:d7:50:5c:1d:29:db:ec:cb:97:c0:c1:78:9a:33:c3:84:
         ce:5c:3c:f2:e0:8d:30:97:7f:ca:30:8e:96:9d:a0:23:1d:fd:
         39:12:15:fe:f0:d9:df:35:e5:0e:61:37:64:12:50:43:86:dd:
         58:e6:c8:72:ee:b3:3d:d4:7e:75:d6:f2:46:de:1e:b3:9c:6d:
         15:e4:56:43:0c:13:49:30:b8:1b:75:5b:74:c0:dd:8d:5d:ad:
         e5:a7:97:58:e3:8e:b8:f9:98:09:57:29:76:55:a9:a4:83:60:
         66:24:2f:7d:3c:a9:6d:fa:6e:81:ab:38:0d:88:42:fc:a8:93:
         44:51:ba:45:71:6b:3b:14:e7:c2:45:17:67:f3:2d:68:dc:ce:
         40:6a:79:05:b9:ad:b6:ce:a9:e7:60:9c:68:d3:b6:44:54:4a:
         e1:39:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:20 2024 by rpki-client on console-fra.rpki-client.org