Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/eHu_gQ-VFkTu96xTROmStcIyAXk.roa
File:                     eHu_gQ-VFkTu96xTROmStcIyAXk.roa (raw, json)
Hash identifier:          pM8vgUj/yWHtRQMf7oa1696vzShy+yBMF7Yukmz7oU0=
Subject key identifier:   78:7B:BF:81:0F:95:16:44:EE:F7:AC:53:44:E9:92:B5:C2:32:01:79
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       018CC26D5C61866A78AE205157A0D1332502
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/eHu_gQ-VFkTu96xTROmStcIyAXk.roa
Signing time:             Mon 01 Jan 2024 00:29:56 +0000
ROA not before:           Mon 01 Jan 2024 00:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47583
IP address blocks:        45.93.136.0/22 maxlen: 22
                          45.87.80.0/22 maxlen: 22
                          194.11.214.0/23 maxlen: 23
                          153.92.4.0/23 maxlen: 23
                          153.92.3.0/24 maxlen: 24
                          153.92.2.0/24 maxlen: 24
                          153.92.1.0/24 maxlen: 24
                          153.92.7.0/24 maxlen: 24
                          153.92.6.0/23 maxlen: 23
                          153.92.6.0/24 maxlen: 24
                          153.92.11.0/24 maxlen: 24
                          153.92.10.0/24 maxlen: 24
                          153.92.9.0/24 maxlen: 24
                          153.92.8.0/21 maxlen: 21
                          153.92.8.0/24 maxlen: 24
                          31.220.17.0/24 maxlen: 24
                          31.220.16.0/24 maxlen: 24
                          153.92.15.0/24 maxlen: 24
                          153.92.14.0/24 maxlen: 24
                          153.92.13.0/24 maxlen: 24
                          153.92.12.0/24 maxlen: 24
                          31.220.23.0/24 maxlen: 24
                          31.220.20.0/23 maxlen: 23
                          31.220.22.0/24 maxlen: 24
                          31.220.21.0/24 maxlen: 24
                          31.220.19.0/24 maxlen: 24
                          31.220.18.0/24 maxlen: 24
                          31.220.20.0/24 maxlen: 24
                          31.220.48.0/20 maxlen: 20
                          31.220.108.0/24 maxlen: 24
                          31.220.107.0/24 maxlen: 24
                          31.220.106.0/24 maxlen: 24
                          31.220.111.0/24 maxlen: 24
                          31.220.110.0/24 maxlen: 24
                          31.220.109.0/24 maxlen: 24
                          194.11.154.0/23 maxlen: 23
                          31.220.104.0/24 maxlen: 24
                          31.220.105.0/24 maxlen: 24
                          2.57.90.0/24 maxlen: 24
                          2.57.88.0/23 maxlen: 23
                          2.57.91.0/24 maxlen: 24
                          185.77.97.0/24 maxlen: 24
                          185.77.96.0/24 maxlen: 24
                          212.1.212.0/24 maxlen: 24
                          212.1.212.0/22 maxlen: 22
                          212.1.211.0/24 maxlen: 24
                          212.1.210.0/24 maxlen: 24
                          212.1.208.0/24 maxlen: 24
                          212.1.208.0/21 maxlen: 21
                          212.1.215.0/24 maxlen: 24
                          195.110.58.0/23 maxlen: 23
                          31.170.160.0/22 maxlen: 22
                          31.170.164.0/23 maxlen: 23
                          31.170.164.0/24 maxlen: 24
                          31.170.165.0/24 maxlen: 24
                          31.170.166.0/23 maxlen: 23
                          185.28.21.0/24 maxlen: 24
                          185.28.20.0/24 maxlen: 24
                          185.28.23.0/24 maxlen: 24
                          185.28.22.0/24 maxlen: 24
                          93.188.160.0/21 maxlen: 21
                          45.13.132.0/23 maxlen: 23
                          45.13.134.0/23 maxlen: 23
                          156.67.208.0/20 maxlen: 20
                          45.13.252.0/23 maxlen: 23
                          45.13.254.0/23 maxlen: 23
                          2a02:4780::/48 maxlen: 48
                          2a02:4780:11::/48 maxlen: 48
                          2a02:4780:14::/48 maxlen: 48
                          2a02:4780:25::/48 maxlen: 48
                          2a02:4780:e::/48 maxlen: 48
                          2a02:4780:22::/48 maxlen: 48
                          2a02:4780:b::/48 maxlen: 48
                          2a02:4780:1f::/48 maxlen: 48
                          2a02:4780:8::/48 maxlen: 48
                          2a02:4780:19::/48 maxlen: 48
                          2a02:4780:1c::/48 maxlen: 48
                          2a02:4780:16::/48 maxlen: 48
                          2a02:4780:2a::/48 maxlen: 48
                          2a02:4780:5::/48 maxlen: 48
                          2a02:4780:85::/48 maxlen: 48
                          2a02:4780:13::/48 maxlen: 48
                          2a02:4780:27::/48 maxlen: 48
                          2a02:4780:2::/48 maxlen: 48
                          2a02:4780:10::/48 maxlen: 48
                          2a02:4780:21::/48 maxlen: 48
                          2a02:4780:24::/48 maxlen: 48
                          2a02:4780:1e::/48 maxlen: 48
                          2a02:4780:d::/48 maxlen: 48
                          2a02:4780:1b::/48 maxlen: 48
                          2a02:4780:a::/48 maxlen: 48
                          2a02:4780:18::/48 maxlen: 48
                          2a02:4780:29::/48 maxlen: 48
                          2a02:4780:26::/48 maxlen: 48
                          2a02:4780:1::/48 maxlen: 48
                          2a02:4780:4::/48 maxlen: 48
                          2a02:4780:84::/48 maxlen: 48
                          2a02:4780:15::/48 maxlen: 48
                          2a02:4780:23::/48 maxlen: 48
                          2a02:4780:12::/48 maxlen: 48
                          2a02:4780:20::/48 maxlen: 48
                          2a02:4780:f::/48 maxlen: 48
                          2a02:4780:9::/48 maxlen: 48
                          2a02:4780:c::/48 maxlen: 48
                          2a02:4780:1d::/48 maxlen: 48
                          2a02:4780:6::/48 maxlen: 48
                          2a02:4780:1a::/48 maxlen: 48
                          2a02:4780:28::/48 maxlen: 48
                          2a02:4780:3::/48 maxlen: 48
                          2a02:4780:17::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:5c:61:86:6a:78:ae:20:51:57:a0:d1:33:25:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Jan  1 00:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=787bbf810f951644eef7ac5344e992b5c2320179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:86:5a:3b:3e:22:c9:a0:84:4c:3e:c8:37:
                    31:8a:f9:19:d9:14:13:2c:d5:78:1a:5e:0e:33:d6:
                    a8:ef:c9:41:f7:b8:4d:1b:9f:fd:37:3a:62:f7:9d:
                    6d:b8:56:a3:b4:d9:33:ee:38:0e:78:d3:89:61:05:
                    a4:91:0d:13:c9:53:f8:fd:44:85:b5:29:70:da:d1:
                    fa:78:bc:ea:b4:ea:22:b5:19:f8:e5:4c:2d:77:ab:
                    20:07:1d:d2:62:28:de:be:98:f2:df:f2:73:3a:95:
                    a8:b5:00:bc:80:bc:f8:88:d7:b8:98:d9:63:e4:85:
                    23:d3:e8:a1:71:b2:ea:a4:a2:33:f7:c5:d8:b4:03:
                    b4:58:8e:65:75:98:ed:15:e6:32:de:ad:b4:10:93:
                    01:29:88:33:32:70:1e:de:31:03:5c:85:07:4d:b8:
                    e3:30:da:22:33:5c:ec:03:d3:c9:86:a9:b3:bf:e1:
                    4e:24:eb:e7:ec:51:ee:88:ef:84:a6:98:39:c7:a3:
                    6f:78:c1:cf:80:8e:10:77:61:72:4c:4d:eb:bc:c3:
                    bc:86:bd:d3:4d:b4:9c:02:6c:c3:03:5c:b2:bd:a0:
                    6a:b6:03:49:5e:af:23:f0:23:79:80:f0:0c:0d:6c:
                    9b:a6:9c:ac:13:51:d3:80:8a:70:5e:0e:01:ab:25:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:BF:81:0F:95:16:44:EE:F7:AC:53:44:E9:92:B5:C2:32:01:79
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/eHu_gQ-VFkTu96xTROmStcIyAXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.88.0/22
                  31.170.160.0/21
                  31.220.16.0/21
                  31.220.48.0/20
                  31.220.104.0/21
                  45.13.132.0/22
                  45.13.252.0/22
                  45.87.80.0/22
                  45.93.136.0/22
                  93.188.160.0/21
                  153.92.1.0-153.92.15.255
                  156.67.208.0/20
                  185.28.20.0/22
                  185.77.96.0/23
                  194.11.154.0/23
                  194.11.214.0/23
                  195.110.58.0/23
                  212.1.208.0/21
                IPv6:
                  2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:8::-2a02:4780:2a:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:84::/47

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:11:3e:44:90:79:34:25:a2:03:ba:da:b2:a3:09:fe:71:
         3b:13:ff:a5:f0:6f:8c:ae:c2:ef:6f:d5:93:00:75:23:c0:22:
         c0:dc:ca:09:9a:fc:95:a4:d4:5c:20:ed:a8:ff:01:e3:7d:31:
         a6:02:92:d2:e3:50:22:46:39:3a:f4:08:3a:dc:08:8b:34:e9:
         e7:d3:62:eb:13:81:5e:e8:e2:8a:45:c9:8c:4a:76:81:59:40:
         f0:99:d7:0d:cf:d8:36:0a:7b:23:44:30:ad:5e:57:02:b6:8f:
         68:6c:d3:0f:d7:a7:84:24:2b:52:1a:a6:90:13:b9:eb:99:cd:
         75:0b:1b:5f:00:08:ea:78:0c:7c:e0:6d:92:c2:79:7c:94:2e:
         da:4d:da:0b:ab:01:60:d5:86:1f:d0:01:0f:16:11:7c:99:b3:
         96:41:d6:78:32:f3:ed:b4:80:b1:37:8b:3e:8e:1b:b8:49:48:
         dc:5f:47:7b:c2:ca:f9:98:47:9a:38:ca:74:ce:2e:a4:54:ba:
         be:2a:09:e2:10:ac:35:f3:dc:a5:a2:18:c4:83:21:3b:ee:b2:
         ca:55:7a:6a:41:f0:87:2f:e5:f7:63:d4:b4:db:a8:72:f2:d9:
         8c:c7:15:25:26:14:58:fb:55:28:c1:3b:7a:d8:78:7d:94:be:
         1d:22:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org