Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/14ngiU7vrpT9QltGTuCjaWYFpvA.roa
File:                     14ngiU7vrpT9QltGTuCjaWYFpvA.roa (raw, json)
Hash identifier:          8FUSf+bGsOKkVwLwb2ynnHHo0rdigsHyKBiTApH4Kts=
Subject key identifier:   D7:89:E0:89:4E:EF:AE:94:FD:42:5B:46:4E:E0:A3:69:66:05:A6:F0
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       01931F50D043B2DF03762CF5BE42AB38D3E5
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/14ngiU7vrpT9QltGTuCjaWYFpvA.roa
Signing time:             Tue 12 Nov 2024 07:40:10 +0000
ROA not before:           Tue 12 Nov 2024 07:40:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206065
IP address blocks:        31.217.208.0/21 maxlen: 24
                          37.19.80.0/20 maxlen: 24
                          37.114.192.0/18 maxlen: 24
                          37.114.192.0/20 maxlen: 24
                          37.114.204.0/23 maxlen: 23
                          37.114.208.0/21 maxlen: 24
                          37.114.216.0/22 maxlen: 24
                          37.114.220.0/22 maxlen: 24
                          37.114.224.0/22 maxlen: 24
                          37.114.225.0/24 maxlen: 24
                          37.114.228.0/22 maxlen: 24
                          37.114.232.0/21 maxlen: 24
                          37.114.240.0/22 maxlen: 24
                          37.114.244.0/22 maxlen: 24
                          37.114.246.0/23 maxlen: 24
                          37.114.248.0/21 maxlen: 24
                          37.114.252.0/24 maxlen: 24
                          37.114.253.0/24 maxlen: 24
                          37.114.254.0/24 maxlen: 24
                          37.114.255.0/24 maxlen: 24
                          37.221.0.0/18 maxlen: 24
                          37.221.0.0/20 maxlen: 20
                          37.235.16.0/20 maxlen: 24
                          37.235.19.0/24 maxlen: 24
                          45.128.140.0/22 maxlen: 24
                          45.144.124.0/22 maxlen: 24
                          46.32.5.0/24 maxlen: 24
                          46.32.9.0/24 maxlen: 24
                          46.32.14.0/24 maxlen: 24
                          46.34.164.0/22 maxlen: 24
                          46.34.168.0/21 maxlen: 24
                          46.34.178.0/23 maxlen: 24
                          46.34.180.0/22 maxlen: 24
                          46.34.184.0/22 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          78.158.182.0/23 maxlen: 24
                          79.132.200.0/22 maxlen: 24
                          79.132.213.0/24 maxlen: 24
                          79.132.217.0/24 maxlen: 24
                          79.132.218.0/23 maxlen: 24
                          79.132.220.0/23 maxlen: 24
                          80.71.113.0/24 maxlen: 24
                          80.71.122.0/23 maxlen: 24
                          80.71.124.0/23 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.248.0/21 maxlen: 24
                          81.29.248.0/23 maxlen: 23
                          81.29.250.0/23 maxlen: 24
                          81.29.250.0/24 maxlen: 24
                          81.29.251.0/24 maxlen: 24
                          81.29.254.0/24 maxlen: 24
                          81.91.144.0/20 maxlen: 24
                          81.91.144.0/22 maxlen: 24
                          81.91.148.0/23 maxlen: 24
                          81.91.150.0/23 maxlen: 24
                          81.91.152.0/21 maxlen: 24
                          86.109.32.0/23 maxlen: 24
                          86.109.36.0/22 maxlen: 24
                          86.109.41.0/24 maxlen: 24
                          86.109.46.0/23 maxlen: 24
                          86.109.56.0/22 maxlen: 24
                          86.109.58.0/23 maxlen: 24
                          86.109.62.0/23 maxlen: 24
                          87.247.180.0/23 maxlen: 24
                          91.184.64.0/20 maxlen: 24
                          92.61.184.0/21 maxlen: 24
                          92.119.68.0/22 maxlen: 24
                          94.139.160.0/20 maxlen: 24
                          109.230.64.0/21 maxlen: 24
                          109.230.80.0/20 maxlen: 24
                          109.230.80.0/22 maxlen: 24
                          109.230.82.0/24 maxlen: 24
                          109.230.88.0/21 maxlen: 24
                          109.230.88.0/23 maxlen: 24
                          109.230.90.0/24 maxlen: 24
                          176.221.65.0/24 maxlen: 24
                          185.12.62.0/24 maxlen: 24
                          185.21.76.0/22 maxlen: 24
                          185.30.76.0/22 maxlen: 24
                          185.40.240.0/22 maxlen: 24
                          185.45.188.0/22 maxlen: 24
                          185.70.60.0/22 maxlen: 24
                          185.82.164.0/23 maxlen: 24
                          185.104.228.0/24 maxlen: 24
                          185.133.152.0/22 maxlen: 24
                          185.142.233.0/24 maxlen: 24
                          185.142.234.0/23 maxlen: 24
                          185.172.0.0/22 maxlen: 24
                          185.190.20.0/22 maxlen: 24
                          185.197.68.0/22 maxlen: 24
                          185.208.150.0/23 maxlen: 24
                          188.75.92.0/24 maxlen: 24
                          188.75.94.0/24 maxlen: 24
                          188.75.102.0/23 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.110.0/23 maxlen: 24
                          188.75.113.0/24 maxlen: 24
                          188.75.114.0/23 maxlen: 24
                          188.75.116.0/23 maxlen: 24
                          188.75.122.0/23 maxlen: 24
                          188.121.128.0/19 maxlen: 24
                          188.121.128.0/23 maxlen: 24
                          188.121.128.0/24 maxlen: 24
                          188.121.129.0/24 maxlen: 24
                          188.121.136.0/21 maxlen: 24
                          188.121.144.0/20 maxlen: 24
                          188.121.144.0/22 maxlen: 24
                          188.121.146.0/24 maxlen: 24
                          188.121.148.0/23 maxlen: 24
                          188.121.152.0/22 maxlen: 24
                          188.121.156.0/24 maxlen: 24
                          188.121.157.0/24 maxlen: 24
                          188.121.158.0/23 maxlen: 24
                          188.136.174.0/24 maxlen: 24
                          188.136.176.0/21 maxlen: 24
                          188.136.184.0/24 maxlen: 24
                          188.136.186.0/23 maxlen: 24
                          188.136.188.0/23 maxlen: 24
                          188.136.202.0/23 maxlen: 24
                          188.136.208.0/24 maxlen: 24
                          188.136.212.0/22 maxlen: 24
                          188.136.216.0/22 maxlen: 24
                          188.136.220.0/23 maxlen: 24
                          188.136.222.0/23 maxlen: 24
                          213.195.16.0/22 maxlen: 24
                          213.207.192.0/20 maxlen: 24
                          213.207.193.0/24 maxlen: 24
                          213.207.194.0/24 maxlen: 24
                          213.207.201.0/24 maxlen: 24
                          217.66.208.0/24 maxlen: 24
                          217.66.211.0/24 maxlen: 24
                          2a0c:100::/29 maxlen: 48
                          2a0c:104::/30 maxlen: 30

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 08:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1f:50:d0:43:b2:df:03:76:2c:f5:be:42:ab:38:d3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Nov 12 07:40:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d789e0894eefae94fd425b464ee0a3696605a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:78:2c:db:a1:99:21:4f:6d:a5:ec:e0:6a:
                    4f:ef:0b:00:37:be:81:f4:5c:85:7e:a1:86:8a:32:
                    e5:80:58:e1:7d:fe:a0:a5:58:12:d2:94:32:9d:04:
                    ba:bd:bb:77:fd:cd:0b:ed:da:95:08:eb:5b:5a:b7:
                    4b:f5:4a:c9:91:94:97:db:aa:9d:80:dc:2d:09:0f:
                    88:9d:8c:42:74:ab:d7:f8:51:eb:19:05:8d:e5:0a:
                    b5:21:1e:42:ad:7f:d5:c0:44:5d:e9:96:0f:a6:d3:
                    4c:6a:9c:47:50:a5:c4:c0:9b:bb:19:70:a6:95:c9:
                    a5:31:04:19:07:17:95:83:be:99:c4:5c:19:2b:39:
                    8e:ab:64:9c:40:6b:9b:56:1b:ab:f6:51:07:7b:43:
                    04:73:a2:0f:c7:fd:92:b0:2a:3e:0f:da:3e:09:32:
                    16:67:26:72:fe:05:ca:71:1e:5f:f9:03:85:cd:00:
                    a3:d0:59:1b:aa:4a:0c:3f:0b:ad:29:5b:e1:d3:bc:
                    f5:14:6d:b7:bb:b4:40:ba:23:73:28:36:66:77:cf:
                    40:b3:3e:bc:d2:ed:67:f1:68:7a:d6:60:51:67:5c:
                    08:ba:2b:aa:ec:62:dc:ba:c7:65:68:07:b3:0d:f4:
                    1e:aa:15:1b:a5:f7:2c:24:c5:1e:a0:76:3b:5b:28:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:89:E0:89:4E:EF:AE:94:FD:42:5B:46:4E:E0:A3:69:66:05:A6:F0
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/14ngiU7vrpT9QltGTuCjaWYFpvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.217.208.0/21
                  37.19.80.0/20
                  37.114.192.0/18
                  37.221.0.0/18
                  37.235.16.0/20
                  45.128.140.0/22
                  45.144.124.0/22
                  46.32.5.0/24
                  46.32.9.0/24
                  46.32.14.0/24
                  46.34.164.0-46.34.175.255
                  46.34.178.0-46.34.191.255
                  78.158.182.0/23
                  79.132.200.0/22
                  79.132.213.0/24
                  79.132.217.0-79.132.221.255
                  80.71.113.0/24
                  80.71.122.0-80.71.125.255
                  80.71.127.0/24
                  81.29.243.0/24
                  81.29.248.0/21
                  81.91.144.0/20
                  86.109.32.0/23
                  86.109.36.0/22
                  86.109.41.0/24
                  86.109.46.0/23
                  86.109.56.0/22
                  86.109.62.0/23
                  87.247.180.0/23
                  91.184.64.0/20
                  92.61.184.0/21
                  92.119.68.0/22
                  94.139.160.0/20
                  109.230.64.0/21
                  109.230.80.0/20
                  176.221.65.0/24
                  185.12.62.0/24
                  185.21.76.0/22
                  185.30.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/23
                  185.104.228.0/24
                  185.133.152.0/22
                  185.142.233.0-185.142.235.255
                  185.172.0.0/22
                  185.190.20.0/22
                  185.197.68.0/22
                  185.208.150.0/23
                  188.75.92.0/24
                  188.75.94.0/24
                  188.75.102.0/23
                  188.75.107.0/24
                  188.75.110.0/23
                  188.75.113.0-188.75.117.255
                  188.75.122.0/23
                  188.121.128.0/19
                  188.136.174.0/24
                  188.136.176.0-188.136.184.255
                  188.136.186.0-188.136.189.255
                  188.136.202.0/23
                  188.136.208.0/24
                  188.136.212.0-188.136.223.255
                  213.195.16.0/22
                  213.207.192.0/20
                  217.66.208.0/24
                  217.66.211.0/24
                IPv6:
                  2a0c:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:16:94:5e:93:17:e5:65:49:d1:01:d0:13:58:1f:03:b6:
         dd:4d:7e:b9:40:03:a6:79:2b:22:94:76:7c:d5:aa:27:8f:f5:
         23:b6:9d:6d:54:0c:f1:16:6b:35:69:eb:e9:06:e5:f2:88:6e:
         06:85:73:66:5e:13:e1:5f:b3:d8:ce:a3:8a:72:f4:fc:d0:4d:
         63:d7:4b:82:74:cd:c7:36:d0:09:9f:e8:76:e3:7a:17:e8:7e:
         c9:61:5e:6e:d2:46:fc:ac:ff:31:99:e6:b1:0f:cd:a5:16:ed:
         73:9a:67:f6:62:9b:0c:17:20:89:e7:7e:df:d9:b3:b5:6d:ae:
         c7:c1:ec:2b:a4:ad:98:6e:c5:66:cb:94:2c:07:b4:f3:24:52:
         c4:b9:9d:a4:b3:8e:ef:51:22:7b:ee:c7:ca:e2:9f:92:fa:50:
         81:d3:14:1e:dc:b4:54:9d:d3:07:f1:b5:82:9e:1b:e6:46:a2:
         c0:02:d9:8a:4c:ad:95:31:4c:96:df:8c:15:11:39:f8:2a:58:
         ac:bf:08:db:d5:d6:4f:1c:8b:26:19:67:cf:1c:f4:c0:f7:7a:
         64:63:b5:96:88:17:7a:74:b2:eb:2d:ee:d3:f2:9d:bf:5c:17:
         26:b7:f3:3c:05:28:ce:e2:b6:10:8c:c5:a1:05:cd:44:8f:92:
         dc:12:7a:bc
-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgISAZMfUNBDst8Ddiz1vkKrONPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjQxMTEyMDc0MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzg5ZTA4OTRlZWZhZTk0ZmQ0MjViNDY0ZWUwYTM2OTY2MDVhNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteB4LNuhmSFPbaXs4GpP7wsAN76B
9FyFfqGGijLlgFjhff6gpVgS0pQynQS6vbt3/c0L7dqVCOtbWrdL9UrJkZSX26qd
gNwtCQ+InYxCdKvX+FHrGQWN5Qq1IR5CrX/VwERd6ZYPptNMapxHUKXEwJu7GXCm
lcmlMQQZBxeVg76ZxFwZKzmOq2ScQGubVhur9lEHe0MEc6IPx/2SsCo+D9o+CTIW
ZyZy/gXKcR5f+QOFzQCj0FkbqkoMPwutKVvh07z1FG23u7RAuiNzKDZmd89Asz68
0u1n8Wh61mBRZ1wIuiuq7GLcusdlaAezDfQeqhUbpfcsJMUeoHY7WyhMWQIDAQAB
o4ID/DCCA/gwHQYDVR0OBBYEFNeJ4IlO766U/UJbRk7go2lmBabwMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvMTRuZ2lVN3ZycFQ5UWx0R1R1Q2phV1lGcHZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEAYIKwYBBQUHAQcBAf8EggH/MIIB+zCCAegEAgABMIIB
4AMEAx/Z0AMEBCUTUAMEBiVywAMEBiXdAAMEBCXrEAMEAi2AjAMEAi2QfAMEAC4g
BQMEAC4gCQMEAC4gDjAMAwQCLiKkAwQELiKgMAwDBAEuIrIDBAYuIoADBAFOnrYD
BAJPhMgDBABPhNUwDAMEAE+E2QMEAU+E3AMEAFBHcTAMAwQBUEd6AwQBUEd8AwQA
UEd/AwQAUR3zAwQDUR34AwQEUVuQAwQBVm0gAwQCVm0kAwQAVm0pAwQBVm0uAwQC
Vm04AwQBVm0+AwQBV/e0AwQEW7hAAwQDXD24AwQCXHdEAwQEXougAwQDbeZAAwQE
beZQAwQAsN1BAwQAuQw+AwQCuRVMAwQCuR5MAwQCuSjwAwQCuS28AwQCuUY8AwQB
uVKkAwQAuWjkAwQCuYWYMAwDBAC5jukDBAK5jugDBAK5rAADBAK5vhQDBAK5xUQD
BAG50JYDBAC8S1wDBAC8S14DBAG8S2YDBAC8S2sDBAG8S24wDAMEALxLcQMEAbxL
dAMEAbxLegMEBbx5gAMEALyIrjAMAwQEvIiwAwQAvIi4MAwDBAG8iLoDBAG8iLwD
BAG8iMoDBAC8iNAwDAMEAryI1AMEBbyIwAMEAtXDEAMEBNXPwAMEANlC0AMEANlC
0zANBAIAAjAHAwUDKgwBADANBgkqhkiG9w0BAQsFAAOCAQEAQ7UWlF6TF+VlSdEB
0BNYHwO23U1+uUADpnkrIpR2fNWqJ4/1I7adbVQM8RZrNWnr6Qbl8ohuBoVzZl4T
4V+z2M6jinL0/NBNY9dLgnTNxzbQCZ/oduN6F+h+yWFebtJG/Kz/MZnmsQ/NpRbt
c5pn9mKbDBcgied+39mztW2ux8HsK6StmG7FZsuULAe08yRSxLmdpLOO71Eie+7H
yuKfkvpQgdMUHty0VJ3TB/G1gp4b5kaiwALZikytlTFMlt+MFRE5+CpYrL8I29XW
TxyLJhlnzxz0wPd6ZGO1logXenSy6y3u0/Kdv1wXJrfzPAUozuK2EIzFoQXNRI+S
3BJ6vA==
-----END CERTIFICATE-----
Generated at Tue Nov 12 10:08:34 2024 by rpki-client on console-fra.rpki-client.org