Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/afj22EMHmVZiZgLO_TTYAn091Pc.roa
File:                     afj22EMHmVZiZgLO_TTYAn091Pc.roa (raw, json)
Hash identifier:          W2dlxiDYJl4Iz4mRN6ONLbj4EYINU8coXd6qtMsP0tI=
Subject key identifier:   69:F8:F6:D8:43:07:99:56:62:66:02:CE:FD:34:D8:02:7D:3D:D4:F7
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       01919325A1F09D6A7B3F1D235744D9543377
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/afj22EMHmVZiZgLO_TTYAn091Pc.roa
Signing time:             Tue 27 Aug 2024 09:23:22 +0000
ROA not before:           Tue 27 Aug 2024 09:23:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206065
IP address blocks:        31.217.208.0/21 maxlen: 24
                          37.19.80.0/20 maxlen: 24
                          37.114.192.0/18 maxlen: 24
                          37.114.192.0/20 maxlen: 24
                          37.114.204.0/23 maxlen: 23
                          37.114.208.0/21 maxlen: 24
                          37.114.216.0/22 maxlen: 24
                          37.114.220.0/22 maxlen: 24
                          37.114.224.0/22 maxlen: 24
                          37.114.228.0/22 maxlen: 24
                          37.114.232.0/21 maxlen: 24
                          37.114.240.0/22 maxlen: 24
                          37.114.244.0/22 maxlen: 24
                          37.114.246.0/23 maxlen: 24
                          37.114.248.0/21 maxlen: 24
                          37.114.252.0/24 maxlen: 24
                          37.114.253.0/24 maxlen: 24
                          37.114.254.0/24 maxlen: 24
                          37.114.255.0/24 maxlen: 24
                          37.221.0.0/18 maxlen: 24
                          37.235.16.0/20 maxlen: 24
                          37.235.19.0/24 maxlen: 24
                          45.128.140.0/22 maxlen: 24
                          45.144.124.0/22 maxlen: 24
                          46.32.5.0/24 maxlen: 24
                          46.32.9.0/24 maxlen: 24
                          46.32.14.0/24 maxlen: 24
                          46.34.164.0/22 maxlen: 24
                          46.34.168.0/21 maxlen: 24
                          46.34.178.0/23 maxlen: 24
                          46.34.180.0/22 maxlen: 24
                          46.34.184.0/22 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          78.158.182.0/23 maxlen: 24
                          79.132.200.0/22 maxlen: 24
                          79.132.213.0/24 maxlen: 24
                          79.132.217.0/24 maxlen: 24
                          79.132.218.0/23 maxlen: 24
                          79.132.220.0/23 maxlen: 24
                          80.71.113.0/24 maxlen: 24
                          80.71.122.0/23 maxlen: 24
                          80.71.124.0/23 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.248.0/21 maxlen: 24
                          81.29.250.0/23 maxlen: 24
                          81.29.250.0/24 maxlen: 24
                          81.29.251.0/24 maxlen: 24
                          81.29.254.0/24 maxlen: 24
                          81.91.144.0/20 maxlen: 24
                          81.91.144.0/22 maxlen: 24
                          81.91.148.0/23 maxlen: 24
                          81.91.150.0/23 maxlen: 24
                          81.91.152.0/21 maxlen: 24
                          86.109.32.0/23 maxlen: 24
                          86.109.36.0/22 maxlen: 24
                          86.109.41.0/24 maxlen: 24
                          86.109.46.0/23 maxlen: 24
                          86.109.56.0/22 maxlen: 24
                          86.109.62.0/23 maxlen: 24
                          87.247.180.0/23 maxlen: 24
                          91.184.64.0/20 maxlen: 24
                          92.61.184.0/21 maxlen: 24
                          92.119.68.0/22 maxlen: 24
                          94.139.160.0/20 maxlen: 24
                          109.230.64.0/21 maxlen: 24
                          109.230.80.0/20 maxlen: 24
                          109.230.80.0/22 maxlen: 24
                          109.230.88.0/21 maxlen: 24
                          109.230.88.0/23 maxlen: 24
                          176.221.65.0/24 maxlen: 24
                          185.12.62.0/24 maxlen: 24
                          185.21.76.0/22 maxlen: 24
                          185.30.76.0/22 maxlen: 24
                          185.40.240.0/22 maxlen: 24
                          185.45.188.0/22 maxlen: 24
                          185.70.60.0/22 maxlen: 24
                          185.82.164.0/23 maxlen: 24
                          185.104.228.0/24 maxlen: 24
                          185.133.152.0/22 maxlen: 24
                          185.142.233.0/24 maxlen: 24
                          185.142.234.0/23 maxlen: 24
                          185.172.0.0/22 maxlen: 24
                          185.190.20.0/22 maxlen: 24
                          185.197.68.0/22 maxlen: 24
                          185.208.150.0/23 maxlen: 24
                          188.75.92.0/24 maxlen: 24
                          188.75.94.0/24 maxlen: 24
                          188.75.102.0/23 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.110.0/23 maxlen: 24
                          188.75.116.0/23 maxlen: 24
                          188.75.122.0/23 maxlen: 24
                          188.121.128.0/19 maxlen: 24
                          188.121.128.0/23 maxlen: 24
                          188.121.128.0/24 maxlen: 24
                          188.121.136.0/21 maxlen: 24
                          188.121.144.0/20 maxlen: 24
                          188.121.144.0/22 maxlen: 24
                          188.121.146.0/24 maxlen: 24
                          188.121.148.0/23 maxlen: 24
                          188.121.152.0/22 maxlen: 24
                          188.121.156.0/24 maxlen: 24
                          188.121.157.0/24 maxlen: 24
                          188.121.158.0/23 maxlen: 24
                          188.136.174.0/24 maxlen: 24
                          188.136.176.0/21 maxlen: 24
                          188.136.184.0/24 maxlen: 24
                          188.136.186.0/23 maxlen: 24
                          188.136.188.0/23 maxlen: 24
                          188.136.202.0/23 maxlen: 24
                          188.136.212.0/22 maxlen: 24
                          188.136.220.0/23 maxlen: 24
                          188.136.222.0/23 maxlen: 24
                          213.195.16.0/22 maxlen: 24
                          213.207.192.0/20 maxlen: 24
                          213.207.193.0/24 maxlen: 24
                          213.207.194.0/24 maxlen: 24
                          213.207.201.0/24 maxlen: 24
                          217.66.208.0/24 maxlen: 24
                          217.66.211.0/24 maxlen: 24
                          2a0c:100::/29 maxlen: 48

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 09:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:93:25:a1:f0:9d:6a:7b:3f:1d:23:57:44:d9:54:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Aug 27 09:23:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=69f8f6d843079956626602cefd34d8027d3dd4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:f5:d1:a1:f6:d3:e5:05:d7:0c:2b:37:28:
                    46:ce:42:0a:2d:d2:07:13:b2:b1:66:96:f2:59:64:
                    51:c5:e0:06:e7:bc:12:92:48:b0:74:05:08:56:f6:
                    0a:95:c7:d2:25:16:c9:eb:13:80:52:d2:5c:54:e2:
                    25:02:26:ab:a1:7e:60:1e:89:8a:96:8c:c3:d8:84:
                    3d:b5:4a:72:a7:a0:ae:30:5f:83:10:4f:2c:37:5e:
                    db:9d:33:99:03:16:52:96:cc:a5:2f:f0:ae:98:5b:
                    54:cf:84:62:d3:4b:f8:db:c7:1a:67:72:80:fa:85:
                    5d:36:31:f5:f8:2c:00:11:3c:ba:b6:9c:30:ec:14:
                    0d:03:d0:8e:65:3a:3c:86:f6:1c:9d:8a:8a:69:60:
                    65:1e:b0:42:35:88:64:12:d3:20:65:7c:57:c2:08:
                    6f:82:c5:36:75:ae:7f:e0:53:cd:33:be:ac:a7:ef:
                    53:f6:52:fb:25:c7:f9:a7:84:af:dc:e9:5f:7a:97:
                    d1:22:8e:c1:33:a8:af:59:76:bf:e8:61:a7:cb:ad:
                    93:23:cf:cb:d0:ff:68:22:38:2e:51:d6:a0:9e:9f:
                    6f:e0:4f:c8:d3:6d:7e:c1:8d:c3:c5:18:18:fa:07:
                    fb:48:3c:61:ae:a5:6e:de:d5:54:46:2c:25:f4:6d:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F8:F6:D8:43:07:99:56:62:66:02:CE:FD:34:D8:02:7D:3D:D4:F7
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/afj22EMHmVZiZgLO_TTYAn091Pc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.217.208.0/21
                  37.19.80.0/20
                  37.114.192.0/18
                  37.221.0.0/18
                  37.235.16.0/20
                  45.128.140.0/22
                  45.144.124.0/22
                  46.32.5.0/24
                  46.32.9.0/24
                  46.32.14.0/24
                  46.34.164.0-46.34.175.255
                  46.34.178.0-46.34.191.255
                  78.158.182.0/23
                  79.132.200.0/22
                  79.132.213.0/24
                  79.132.217.0-79.132.221.255
                  80.71.113.0/24
                  80.71.122.0-80.71.125.255
                  80.71.127.0/24
                  81.29.243.0/24
                  81.29.248.0/21
                  81.91.144.0/20
                  86.109.32.0/23
                  86.109.36.0/22
                  86.109.41.0/24
                  86.109.46.0/23
                  86.109.56.0/22
                  86.109.62.0/23
                  87.247.180.0/23
                  91.184.64.0/20
                  92.61.184.0/21
                  92.119.68.0/22
                  94.139.160.0/20
                  109.230.64.0/21
                  109.230.80.0/20
                  176.221.65.0/24
                  185.12.62.0/24
                  185.21.76.0/22
                  185.30.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/23
                  185.104.228.0/24
                  185.133.152.0/22
                  185.142.233.0-185.142.235.255
                  185.172.0.0/22
                  185.190.20.0/22
                  185.197.68.0/22
                  185.208.150.0/23
                  188.75.92.0/24
                  188.75.94.0/24
                  188.75.102.0/23
                  188.75.107.0/24
                  188.75.110.0/23
                  188.75.116.0/23
                  188.75.122.0/23
                  188.121.128.0/19
                  188.136.174.0/24
                  188.136.176.0-188.136.184.255
                  188.136.186.0-188.136.189.255
                  188.136.202.0/23
                  188.136.212.0/22
                  188.136.220.0/22
                  213.195.16.0/22
                  213.207.192.0/20
                  217.66.208.0/24
                  217.66.211.0/24
                IPv6:
                  2a0c:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:9c:90:ea:93:a2:ab:5d:ae:8c:91:bd:c4:25:28:6b:2d:
         3a:74:37:14:62:09:cf:d0:2e:c5:51:e9:96:79:68:28:47:0b:
         b1:9f:c8:02:4d:c7:49:ec:79:f2:73:c2:32:34:a5:4a:99:e9:
         8d:7c:75:c6:55:d5:54:f0:78:80:53:e7:24:4f:b6:ad:a5:c0:
         30:ef:4d:5e:1a:a8:a9:84:c3:04:30:b4:f2:05:4b:98:8c:e6:
         cc:e3:8f:53:29:48:47:7f:39:fd:85:2c:06:08:13:03:b6:3c:
         a4:83:d1:f8:d4:39:ad:46:5f:61:88:66:2e:3d:60:8d:af:f0:
         2b:7a:7b:cc:bf:08:10:6b:7f:ae:d0:6c:75:67:72:ac:e9:83:
         c3:db:07:1e:5d:86:53:14:37:cd:53:9b:cc:9c:a7:d3:ed:14:
         ff:21:62:2f:19:2d:f0:93:66:6e:66:ed:db:5c:12:48:71:f0:
         61:54:15:33:da:ec:7b:b5:ee:38:f0:1d:e5:b7:4a:48:4b:ee:
         d5:cf:f6:b5:a6:c7:18:1b:80:0a:14:23:c6:3c:42:31:e4:0d:
         1a:0c:40:1a:ef:37:7a:04:f3:2c:1a:1b:1d:eb:81:c0:4a:76:
         50:89:be:a5:48:be:a2:9d:04:db:aa:14:01:7d:b2:04:8e:7b:
         29:05:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 12:23:18 2024 by rpki-client on console-fra.rpki-client.org