Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GIRlWdg0kFCRpnwnIM9e4t-k0Bg.roa
File:                     GIRlWdg0kFCRpnwnIM9e4t-k0Bg.roa (raw, json)
Hash identifier:          Wmfmui7SpMk4Lm2n5ns0/XUX0pC69NO7bVSTbygDDQo=
Subject key identifier:   18:84:65:59:D8:34:90:50:91:A6:7C:27:20:CF:5E:E2:DF:A4:D0:18
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       01955FBF7D76446411F252E5276C7413FA73
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GIRlWdg0kFCRpnwnIM9e4t-k0Bg.roa
Signing time:             Tue 04 Mar 2025 06:02:19 +0000
ROA not before:           Tue 04 Mar 2025 06:02:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        14.102.52.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          31.222.216.0/24 maxlen: 24
                          31.222.217.0/24 maxlen: 24
                          31.222.218.0/24 maxlen: 24
                          31.222.219.0/24 maxlen: 24
                          62.169.129.0/24 maxlen: 24
                          62.169.131.0/24 maxlen: 24
                          62.169.132.0/24 maxlen: 24
                          62.169.133.0/24 maxlen: 24
                          62.169.134.0/24 maxlen: 24
                          62.169.135.0/24 maxlen: 24
                          84.51.234.0/24 maxlen: 24
                          84.51.235.0/24 maxlen: 24
                          92.51.232.0/24 maxlen: 24
                          92.51.233.0/24 maxlen: 24
                          92.51.238.0/24 maxlen: 24
                          92.51.239.0/24 maxlen: 24
                          92.51.248.0/24 maxlen: 24
                          92.51.249.0/24 maxlen: 24
                          92.51.250.0/24 maxlen: 24
                          92.51.251.0/24 maxlen: 24
                          92.51.252.0/24 maxlen: 24
                          92.51.253.0/24 maxlen: 24
                          92.51.254.0/24 maxlen: 24
                          103.61.197.0/24 maxlen: 24
                          103.61.198.0/24 maxlen: 24
                          103.61.199.0/24 maxlen: 24
                          103.125.77.0/24 maxlen: 24
                          103.125.78.0/24 maxlen: 24
                          103.125.79.0/24 maxlen: 24
                          103.210.198.0/24 maxlen: 24
                          103.210.199.0/24 maxlen: 24
                          103.213.212.0/24 maxlen: 24
                          103.213.213.0/24 maxlen: 24
                          103.213.214.0/24 maxlen: 24
                          103.213.215.0/24 maxlen: 24
                          103.255.76.0/24 maxlen: 24
                          103.255.77.0/24 maxlen: 24
                          155.2.176.0/24 maxlen: 24
                          155.2.177.0/24 maxlen: 24
                          155.2.178.0/24 maxlen: 24
                          155.2.179.0/24 maxlen: 24
                          155.2.182.0/24 maxlen: 24
                          155.2.183.0/24 maxlen: 24
                          155.2.184.0/24 maxlen: 24
                          155.2.185.0/24 maxlen: 24
                          155.2.186.0/24 maxlen: 24
                          155.2.187.0/24 maxlen: 24
                          155.2.188.0/24 maxlen: 24
                          155.2.212.0/24 maxlen: 24
                          155.2.215.0/24 maxlen: 24
                          167.160.16.0/24 maxlen: 24
                          167.160.17.0/24 maxlen: 24
                          167.160.29.0/24 maxlen: 24
                          170.62.89.0/24 maxlen: 24
                          170.62.90.0/24 maxlen: 24
                          170.62.91.0/24 maxlen: 24
                          170.62.92.0/24 maxlen: 24
                          170.62.93.0/24 maxlen: 24
                          170.62.94.0/24 maxlen: 24
                          170.62.95.0/24 maxlen: 24
                          170.62.100.0/24 maxlen: 24
                          170.62.102.0/24 maxlen: 24
                          170.62.103.0/24 maxlen: 24
                          170.62.106.0/24 maxlen: 24
                          170.62.107.0/24 maxlen: 24
                          170.62.108.0/24 maxlen: 24
                          170.62.110.0/24 maxlen: 24
                          170.62.111.0/24 maxlen: 24
                          170.62.160.0/24 maxlen: 24
                          170.62.224.0/24 maxlen: 24
                          170.62.225.0/24 maxlen: 24
                          170.62.226.0/24 maxlen: 24
                          170.62.227.0/24 maxlen: 24
                          170.62.228.0/24 maxlen: 24
                          170.62.229.0/24 maxlen: 24
                          170.62.230.0/24 maxlen: 24
                          170.62.231.0/24 maxlen: 24
                          170.62.232.0/24 maxlen: 24
                          170.62.233.0/24 maxlen: 24
                          170.62.234.0/24 maxlen: 24
                          170.62.235.0/24 maxlen: 24
                          185.34.108.0/24 maxlen: 24
                          185.34.109.0/24 maxlen: 24
                          185.34.110.0/24 maxlen: 24
                          185.34.111.0/24 maxlen: 24
                          192.253.208.0/24 maxlen: 24
                          198.55.28.0/24 maxlen: 24
                          198.55.29.0/24 maxlen: 24
                          203.188.164.0/24 maxlen: 24
                          203.188.167.0/24 maxlen: 24
                          203.188.169.0/24 maxlen: 24
                          203.188.170.0/24 maxlen: 24
                          203.188.171.0/24 maxlen: 24
                          203.188.172.0/24 maxlen: 24
                          203.188.173.0/24 maxlen: 24
                          212.32.74.0/24 maxlen: 24
                          212.56.48.0/24 maxlen: 24
                          212.56.49.0/24 maxlen: 24
                          212.56.50.0/24 maxlen: 24
                          212.56.51.0/24 maxlen: 24
                          212.78.245.0/24 maxlen: 24
                          212.78.246.0/24 maxlen: 24
                          212.78.247.0/24 maxlen: 24
                          212.78.248.0/24 maxlen: 24
                          212.78.249.0/24 maxlen: 24
                          212.78.250.0/24 maxlen: 24
                          212.78.251.0/24 maxlen: 24
                          213.254.174.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 09:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5f:bf:7d:76:44:64:11:f2:52:e5:27:6c:74:13:fa:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Mar  4 06:02:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18846559d834905091a67c2720cf5ee2dfa4d018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:e6:43:16:57:7d:e9:9c:64:a5:54:48:a5:
                    be:0c:31:e1:2b:00:53:87:2b:8f:8c:f3:dc:87:57:
                    1e:e2:76:39:2e:ee:55:0a:a4:5a:ed:1c:47:73:b8:
                    78:03:97:6a:db:3b:a6:30:ca:a4:68:27:be:10:cc:
                    cc:69:c4:14:5e:97:ab:de:b4:a3:71:6c:44:c4:9f:
                    d1:4a:43:03:33:65:ea:60:7e:fb:7a:3e:a7:b3:a5:
                    58:37:58:a4:7f:39:37:93:93:cb:7b:3f:d8:0c:05:
                    6e:4c:11:27:c1:99:b0:76:d2:41:64:cd:c5:fd:02:
                    5d:8c:47:2f:b6:e9:d0:34:1f:d5:d1:5d:1b:f3:48:
                    f9:f0:3b:fa:0c:85:1c:eb:d6:95:c5:97:44:b1:ed:
                    07:99:e3:c6:7d:be:40:db:2d:65:8d:b0:bc:cf:17:
                    ff:a6:58:86:2c:b2:01:b7:ac:0c:f0:14:54:8b:96:
                    5f:5a:58:2a:bb:9d:91:4a:0f:08:58:2d:d3:fd:22:
                    87:69:24:44:2d:29:67:d3:82:ad:10:16:88:ac:40:
                    19:41:58:87:ce:4b:6d:52:32:d2:e8:1f:6b:27:cc:
                    a0:21:35:06:76:60:fd:21:66:06:0a:49:5b:03:e8:
                    a6:12:d3:39:5d:98:ea:1f:33:f1:87:65:32:e3:1e:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:65:59:D8:34:90:50:91:A6:7C:27:20:CF:5E:E2:DF:A4:D0:18
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GIRlWdg0kFCRpnwnIM9e4t-k0Bg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.52.0/24
                  14.102.54.0/23
                  14.102.63.0/24
                  14.102.85.0/24
                  14.102.87.0/24
                  31.222.216.0/22
                  62.169.129.0/24
                  62.169.131.0-62.169.135.255
                  84.51.234.0/23
                  92.51.232.0/23
                  92.51.238.0/23
                  92.51.248.0-92.51.254.255
                  103.61.197.0-103.61.199.255
                  103.125.77.0-103.125.79.255
                  103.210.198.0/23
                  103.213.212.0/22
                  103.255.76.0/23
                  155.2.176.0/22
                  155.2.182.0-155.2.188.255
                  155.2.212.0/24
                  155.2.215.0/24
                  167.160.16.0/23
                  167.160.29.0/24
                  170.62.89.0-170.62.95.255
                  170.62.100.0/24
                  170.62.102.0/23
                  170.62.106.0-170.62.108.255
                  170.62.110.0/23
                  170.62.160.0/24
                  170.62.224.0-170.62.235.255
                  185.34.108.0/22
                  192.253.208.0/24
                  198.55.28.0/23
                  203.188.164.0/24
                  203.188.167.0/24
                  203.188.169.0-203.188.173.255
                  212.32.74.0/24
                  212.56.48.0/22
                  212.78.245.0-212.78.251.255
                  213.254.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:48:77:8a:f8:2e:99:ac:43:d3:3c:27:f8:a0:62:86:88:f6:
         20:fd:bf:33:e4:26:25:83:bf:63:e9:57:b9:56:fe:69:c0:26:
         ed:5e:93:a4:5b:97:32:45:4b:3d:d7:44:94:53:4d:fd:63:92:
         7c:e5:e9:cf:a7:15:b4:89:97:76:f7:f8:9a:53:67:26:48:f7:
         34:0d:07:79:a0:35:c5:99:59:4b:e4:74:b0:1c:c7:9e:ab:45:
         c2:60:58:b2:44:5a:e3:03:e2:c4:4b:b5:6f:e2:b0:aa:b6:a0:
         87:84:e8:c4:ae:61:06:c0:c9:92:ae:7d:b4:2b:f6:f9:a5:c0:
         4a:f4:2c:ec:d6:e8:6b:52:8d:5c:c1:21:a0:61:82:fa:bf:15:
         30:f2:74:9b:1a:82:fe:22:71:6b:fe:c8:77:86:9c:92:93:69:
         2a:b4:71:4f:36:0d:93:2a:a4:16:12:9a:59:24:3c:6b:91:03:
         ea:2b:30:f0:53:a8:3e:ff:1c:5e:01:48:87:c4:ee:b2:5b:10:
         20:40:26:2e:3a:9c:95:ae:e5:93:ad:22:59:88:ec:f6:9c:da:
         d3:8d:43:46:4f:f2:5b:ed:c6:75:4a:fc:b1:9b:df:1d:d5:e1:
         35:fe:be:88:31:f7:3b:46:30:62:59:70:6c:ee:3e:f3:c3:45:
         56:51:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:22:47 2025 by rpki-client