Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/K6OM4EBejSfwzzEylnIYu8uTxO4.roa
File:                     K6OM4EBejSfwzzEylnIYu8uTxO4.roa (raw, json)
Hash identifier:          NivqFAMGOtKtkplxZsfquoxRB0RdsexUic4GrhN9nhE=
Subject key identifier:   2B:A3:8C:E0:40:5E:8D:27:F0:CF:31:32:96:72:18:BB:CB:93:C4:EE
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       01973A11DA174621DEC1B3DB7E77CA9B5F56
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/K6OM4EBejSfwzzEylnIYu8uTxO4.roa
Signing time:             Wed 04 Jun 2025 08:32:17 +0000
ROA not before:           Wed 04 Jun 2025 08:32:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        14.102.52.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          31.222.216.0/24 maxlen: 24
                          31.222.217.0/24 maxlen: 24
                          31.222.218.0/24 maxlen: 24
                          31.222.219.0/24 maxlen: 24
                          62.169.129.0/24 maxlen: 24
                          62.169.131.0/24 maxlen: 24
                          62.169.132.0/24 maxlen: 24
                          62.169.133.0/24 maxlen: 24
                          62.169.134.0/24 maxlen: 24
                          62.169.135.0/24 maxlen: 24
                          66.56.80.0/24 maxlen: 24
                          66.56.81.0/24 maxlen: 24
                          66.56.82.0/24 maxlen: 24
                          66.56.84.0/24 maxlen: 24
                          66.56.85.0/24 maxlen: 24
                          66.56.86.0/24 maxlen: 24
                          81.95.50.0/24 maxlen: 24
                          81.95.51.0/24 maxlen: 24
                          81.95.56.0/24 maxlen: 24
                          81.95.57.0/24 maxlen: 24
                          81.95.58.0/24 maxlen: 24
                          81.95.59.0/24 maxlen: 24
                          81.95.60.0/24 maxlen: 24
                          81.95.61.0/24 maxlen: 24
                          81.95.62.0/24 maxlen: 24
                          81.95.63.0/24 maxlen: 24
                          84.51.234.0/24 maxlen: 24
                          84.51.235.0/24 maxlen: 24
                          92.51.232.0/24 maxlen: 24
                          92.51.233.0/24 maxlen: 24
                          92.51.238.0/24 maxlen: 24
                          92.51.239.0/24 maxlen: 24
                          92.51.248.0/24 maxlen: 24
                          92.51.249.0/24 maxlen: 24
                          92.51.250.0/24 maxlen: 24
                          92.51.251.0/24 maxlen: 24
                          92.51.252.0/24 maxlen: 24
                          92.51.253.0/24 maxlen: 24
                          92.51.254.0/24 maxlen: 24
                          103.61.197.0/24 maxlen: 24
                          103.61.198.0/24 maxlen: 24
                          103.61.199.0/24 maxlen: 24
                          103.125.77.0/24 maxlen: 24
                          103.125.78.0/24 maxlen: 24
                          103.125.79.0/24 maxlen: 24
                          103.210.198.0/24 maxlen: 24
                          103.210.199.0/24 maxlen: 24
                          103.213.212.0/24 maxlen: 24
                          103.213.213.0/24 maxlen: 24
                          103.213.214.0/24 maxlen: 24
                          103.213.215.0/24 maxlen: 24
                          103.255.76.0/24 maxlen: 24
                          103.255.77.0/24 maxlen: 24
                          155.2.176.0/24 maxlen: 24
                          155.2.177.0/24 maxlen: 24
                          155.2.178.0/24 maxlen: 24
                          155.2.179.0/24 maxlen: 24
                          155.2.182.0/24 maxlen: 24
                          155.2.183.0/24 maxlen: 24
                          155.2.184.0/24 maxlen: 24
                          155.2.185.0/24 maxlen: 24
                          155.2.186.0/24 maxlen: 24
                          155.2.187.0/24 maxlen: 24
                          155.2.188.0/24 maxlen: 24
                          155.2.194.0/24 maxlen: 24
                          155.2.195.0/24 maxlen: 24
                          155.2.212.0/24 maxlen: 24
                          155.2.215.0/24 maxlen: 24
                          155.2.216.0/24 maxlen: 24
                          155.2.217.0/24 maxlen: 24
                          155.2.221.0/24 maxlen: 24
                          155.2.222.0/24 maxlen: 24
                          167.160.16.0/24 maxlen: 24
                          167.160.17.0/24 maxlen: 24
                          167.160.29.0/24 maxlen: 24
                          170.62.89.0/24 maxlen: 24
                          170.62.90.0/24 maxlen: 24
                          170.62.91.0/24 maxlen: 24
                          170.62.92.0/24 maxlen: 24
                          170.62.93.0/24 maxlen: 24
                          170.62.94.0/24 maxlen: 24
                          170.62.95.0/24 maxlen: 24
                          170.62.100.0/24 maxlen: 24
                          170.62.102.0/24 maxlen: 24
                          170.62.103.0/24 maxlen: 24
                          170.62.106.0/24 maxlen: 24
                          170.62.107.0/24 maxlen: 24
                          170.62.108.0/24 maxlen: 24
                          170.62.110.0/24 maxlen: 24
                          170.62.111.0/24 maxlen: 24
                          170.62.160.0/24 maxlen: 24
                          170.62.224.0/24 maxlen: 24
                          170.62.225.0/24 maxlen: 24
                          170.62.226.0/24 maxlen: 24
                          170.62.227.0/24 maxlen: 24
                          170.62.228.0/24 maxlen: 24
                          170.62.229.0/24 maxlen: 24
                          170.62.230.0/24 maxlen: 24
                          170.62.231.0/24 maxlen: 24
                          170.62.232.0/24 maxlen: 24
                          170.62.233.0/24 maxlen: 24
                          170.62.234.0/24 maxlen: 24
                          170.62.235.0/24 maxlen: 24
                          170.62.236.0/24 maxlen: 24
                          170.62.237.0/24 maxlen: 24
                          185.34.108.0/24 maxlen: 24
                          185.34.109.0/24 maxlen: 24
                          185.34.110.0/24 maxlen: 24
                          185.34.111.0/24 maxlen: 24
                          192.253.208.0/24 maxlen: 24
                          198.55.28.0/24 maxlen: 24
                          198.55.29.0/24 maxlen: 24
                          203.188.164.0/24 maxlen: 24
                          203.188.167.0/24 maxlen: 24
                          203.188.169.0/24 maxlen: 24
                          203.188.170.0/24 maxlen: 24
                          203.188.172.0/24 maxlen: 24
                          212.32.74.0/24 maxlen: 24
                          212.56.50.0/24 maxlen: 24
                          212.56.51.0/24 maxlen: 24
                          212.78.245.0/24 maxlen: 24
                          212.78.246.0/24 maxlen: 24
                          212.78.247.0/24 maxlen: 24
                          212.78.248.0/24 maxlen: 24
                          212.78.249.0/24 maxlen: 24
                          212.78.250.0/24 maxlen: 24
                          212.78.251.0/24 maxlen: 24
                          213.254.174.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 06 Jun 2025 00:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3a:11:da:17:46:21:de:c1:b3:db:7e:77:ca:9b:5f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Jun  4 08:32:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ba38ce0405e8d27f0cf3132967218bbcb93c4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:e0:78:51:78:71:5c:f2:3e:2b:03:b8:81:
                    b0:9d:69:47:80:c3:38:4e:dd:4f:e0:29:2e:b4:01:
                    bc:1d:f4:09:57:0b:c2:f1:eb:17:6b:28:98:f5:29:
                    53:bf:95:9c:c6:58:de:c6:6c:14:7e:1e:41:0a:a0:
                    38:ad:54:44:61:1a:5c:5f:45:50:28:ec:bc:a0:7e:
                    89:2c:85:21:0c:e1:5f:3b:fd:aa:95:f8:2b:81:0e:
                    90:37:e1:01:32:99:fa:e7:5a:24:a4:3a:05:30:90:
                    2b:f8:96:44:00:7a:5e:4d:e5:3f:a3:56:42:71:b6:
                    25:2a:23:ae:f8:89:c6:f6:14:56:25:2c:1b:3f:95:
                    bb:74:6a:9f:27:f7:69:65:86:1b:0b:5b:d5:81:38:
                    7e:40:40:2e:89:09:b2:f0:2a:e1:b1:05:fc:7a:52:
                    44:72:45:62:43:cb:99:a3:90:aa:d1:d9:19:40:99:
                    3d:91:e3:eb:39:d6:75:d5:21:3e:3d:9d:58:99:fb:
                    d7:85:c8:0b:64:0c:20:d8:22:62:36:13:29:31:72:
                    ef:59:8e:62:ba:86:c2:29:ea:f6:0c:76:fd:55:1a:
                    db:92:b0:04:7f:69:cb:f1:fe:fb:23:62:e5:98:53:
                    70:8e:7b:4f:9d:20:41:6f:c8:c2:72:72:9d:e1:6b:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:8C:E0:40:5E:8D:27:F0:CF:31:32:96:72:18:BB:CB:93:C4:EE
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/K6OM4EBejSfwzzEylnIYu8uTxO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.52.0/24
                  14.102.54.0/23
                  14.102.63.0/24
                  14.102.85.0/24
                  14.102.87.0/24
                  31.222.216.0/22
                  62.169.129.0/24
                  62.169.131.0-62.169.135.255
                  66.56.80.0-66.56.82.255
                  66.56.84.0-66.56.86.255
                  81.95.50.0/23
                  81.95.56.0/21
                  84.51.234.0/23
                  92.51.232.0/23
                  92.51.238.0/23
                  92.51.248.0-92.51.254.255
                  103.61.197.0-103.61.199.255
                  103.125.77.0-103.125.79.255
                  103.210.198.0/23
                  103.213.212.0/22
                  103.255.76.0/23
                  155.2.176.0/22
                  155.2.182.0-155.2.188.255
                  155.2.194.0/23
                  155.2.212.0/24
                  155.2.215.0-155.2.217.255
                  155.2.221.0-155.2.222.255
                  167.160.16.0/23
                  167.160.29.0/24
                  170.62.89.0-170.62.95.255
                  170.62.100.0/24
                  170.62.102.0/23
                  170.62.106.0-170.62.108.255
                  170.62.110.0/23
                  170.62.160.0/24
                  170.62.224.0-170.62.237.255
                  185.34.108.0/22
                  192.253.208.0/24
                  198.55.28.0/23
                  203.188.164.0/24
                  203.188.167.0/24
                  203.188.169.0-203.188.170.255
                  203.188.172.0/24
                  212.32.74.0/24
                  212.56.50.0/23
                  212.78.245.0-212.78.251.255
                  213.254.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3e:ba:e7:f9:2a:ed:43:81:ba:ad:3e:a4:65:59:45:60:95:
         f9:d4:8a:73:de:74:e0:ee:41:23:fe:0e:1b:fb:14:37:64:1a:
         86:a9:96:f5:33:6c:f0:7e:b1:ea:07:b6:ee:ae:68:4e:14:27:
         32:08:c0:43:b5:eb:0b:4d:a9:0e:5f:48:07:20:2a:09:9f:d5:
         fd:11:03:aa:d6:96:4e:8b:c1:9e:f6:e4:7d:52:8b:a8:8d:6b:
         da:bc:44:78:2e:9b:94:0d:4d:d7:dc:de:b0:24:45:4a:b4:7e:
         bb:be:d8:64:7a:92:f4:6b:b9:05:81:77:28:cf:64:ce:3d:65:
         03:b8:ba:75:9c:8a:4f:98:46:ca:8c:43:fe:e3:ad:36:e3:a0:
         73:57:bd:e9:bf:00:b0:bf:a7:20:77:eb:13:a9:f1:7e:2a:3d:
         fb:2d:7b:cc:cf:1f:34:6a:68:17:ae:cc:24:23:12:7d:c5:6a:
         58:fd:42:07:2a:84:72:6a:82:0f:3e:28:fc:32:05:74:01:a8:
         95:e8:98:da:37:ff:cf:87:90:47:96:a0:c9:61:3d:04:4c:9a:
         63:10:83:3f:94:57:8a:23:59:bc:10:d4:28:df:36:5c:6e:a0:
         e6:0b:62:2d:12:8a:7c:95:e8:4d:42:b4:46:1b:9a:ea:18:9f:
         99:49:d1:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:58 2025 by rpki-client