Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/u1NiU8j-WN-PdO2X37z4BeeyHw8.roa
File:                     u1NiU8j-WN-PdO2X37z4BeeyHw8.roa (raw, json)
Hash identifier:          GYiNbRhXHWHbeSPmSy0y1OPaWpqJfAFxGQhZAd5c0hc=
Subject key identifier:   BB:53:62:53:C8:FE:58:DF:8F:74:ED:97:DF:BC:F8:05:E7:B2:1F:0F
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       0192AEDD13A847DD7BAE86E591271FFFBBEA
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/u1NiU8j-WN-PdO2X37z4BeeyHw8.roa
Signing time:             Mon 21 Oct 2024 11:36:17 +0000
ROA not before:           Mon 21 Oct 2024 11:36:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212046
IP address blocks:        82.140.133.0/24 maxlen: 24
                          82.140.152.0/24 maxlen: 24
                          82.140.171.0/24 maxlen: 24
                          82.140.176.0/24 maxlen: 24
                          82.140.179.0/24 maxlen: 24
                          82.140.184.0/24 maxlen: 24
                          82.140.185.0/24 maxlen: 24
                          84.46.136.0/24 maxlen: 24
                          84.46.146.0/24 maxlen: 24
                          84.46.147.0/24 maxlen: 24
                          84.46.148.0/24 maxlen: 24
                          84.46.149.0/24 maxlen: 24
                          84.46.160.0/24 maxlen: 24
                          84.46.161.0/24 maxlen: 24
                          84.46.162.0/24 maxlen: 24
                          84.46.163.0/24 maxlen: 24
                          84.46.168.0/24 maxlen: 24
                          84.46.169.0/24 maxlen: 24
                          84.46.204.0/24 maxlen: 24
                          84.46.205.0/24 maxlen: 24
                          84.46.207.0/24 maxlen: 24
                          86.38.6.0/24 maxlen: 24
                          86.38.18.0/24 maxlen: 24
                          86.38.23.0/24 maxlen: 24
                          86.38.28.0/24 maxlen: 24
                          86.38.29.0/24 maxlen: 24
                          86.38.30.0/24 maxlen: 24
                          86.38.31.0/24 maxlen: 24
                          86.38.33.0/24 maxlen: 24
                          86.38.36.0/24 maxlen: 24
                          86.38.38.0/24 maxlen: 24
                          86.38.39.0/24 maxlen: 24
                          86.38.77.0/24 maxlen: 24
                          86.38.78.0/24 maxlen: 24
                          86.38.79.0/24 maxlen: 24
                          86.38.90.0/24 maxlen: 24
                          86.38.94.0/24 maxlen: 24
                          86.38.95.0/24 maxlen: 24
                          86.38.96.0/24 maxlen: 24
                          86.38.98.0/24 maxlen: 24
                          86.38.100.0/24 maxlen: 24
                          86.38.102.0/24 maxlen: 24
                          86.38.122.0/24 maxlen: 24
                          86.38.124.0/24 maxlen: 24
                          86.38.125.0/24 maxlen: 24
                          86.38.126.0/24 maxlen: 24
                          86.38.142.0/24 maxlen: 24
                          86.38.152.0/24 maxlen: 24
                          86.38.153.0/24 maxlen: 24
                          86.38.154.0/24 maxlen: 24
                          86.38.161.0/24 maxlen: 24
                          86.38.165.0/24 maxlen: 24
                          86.38.166.0/24 maxlen: 24
                          86.38.167.0/24 maxlen: 24
                          86.38.168.0/24 maxlen: 24
                          86.38.169.0/24 maxlen: 24
                          86.38.171.0/24 maxlen: 24
                          86.38.172.0/24 maxlen: 24
                          86.38.173.0/24 maxlen: 24
                          86.38.174.0/24 maxlen: 24
                          86.38.176.0/24 maxlen: 24
                          86.38.188.0/24 maxlen: 24
                          86.38.201.0/24 maxlen: 24
                          86.38.215.0/24 maxlen: 24
                          86.38.234.0/24 maxlen: 24
                          86.38.236.0/24 maxlen: 24
                          89.116.14.0/24 maxlen: 24
                          89.116.71.0/24 maxlen: 24
                          89.116.77.0/24 maxlen: 24
                          89.116.78.0/24 maxlen: 24
                          89.116.90.0/24 maxlen: 24
                          89.116.93.0/24 maxlen: 24
                          89.116.97.0/24 maxlen: 24
                          89.116.124.0/24 maxlen: 24
                          89.116.129.0/24 maxlen: 24
                          89.116.143.0/24 maxlen: 24
                          89.116.151.0/24 maxlen: 24
                          89.116.155.0/24 maxlen: 24
                          89.116.160.0/24 maxlen: 24
                          89.116.162.0/24 maxlen: 24
                          89.116.174.0/24 maxlen: 24
                          89.116.176.0/24 maxlen: 24
                          89.116.178.0/24 maxlen: 24
                          89.116.232.0/24 maxlen: 24
                          89.116.235.0/24 maxlen: 24
                          89.116.238.0/24 maxlen: 24
                          89.116.240.0/24 maxlen: 24
                          89.116.245.0/24 maxlen: 24
                          89.116.249.0/24 maxlen: 24
                          89.117.10.0/24 maxlen: 24
                          89.117.14.0/24 maxlen: 24
                          89.117.26.0/24 maxlen: 24
                          89.117.69.0/24 maxlen: 24
                          89.117.108.0/24 maxlen: 24
                          89.117.125.0/24 maxlen: 24
                          89.117.127.0/24 maxlen: 24
                          89.117.128.0/24 maxlen: 24
                          89.117.137.0/24 maxlen: 24
                          89.117.138.0/24 maxlen: 24
                          89.117.140.0/24 maxlen: 24
                          89.117.165.0/24 maxlen: 24
                          89.117.170.0/24 maxlen: 24
                          89.117.176.0/24 maxlen: 24
                          89.117.178.0/24 maxlen: 24
                          89.117.179.0/24 maxlen: 24
                          89.117.184.0/24 maxlen: 24
                          89.117.185.0/24 maxlen: 24
                          89.117.187.0/24 maxlen: 24
                          89.117.192.0/24 maxlen: 24
                          89.117.200.0/24 maxlen: 24
                          89.117.204.0/24 maxlen: 24
                          89.117.206.0/24 maxlen: 24
                          89.117.207.0/24 maxlen: 24
                          89.117.211.0/24 maxlen: 24
                          89.117.219.0/24 maxlen: 24
                          89.117.223.0/24 maxlen: 24
                          89.117.224.0/24 maxlen: 24
                          89.117.238.0/24 maxlen: 24
                          89.117.247.0/24 maxlen: 24
                          89.117.249.0/24 maxlen: 24
                          217.9.240.0/24 maxlen: 24
                          217.9.243.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 23 Oct 2024 22:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:dd:13:a8:47:dd:7b:ae:86:e5:91:27:1f:ff:bb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Oct 21 11:36:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb536253c8fe58df8f74ed97dfbcf805e7b21f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:2f:e3:60:c9:60:03:89:ae:29:da:23:1b:
                    e3:21:c1:d6:8c:5c:45:14:60:69:41:e8:5e:cb:98:
                    a0:62:6d:df:aa:34:44:55:86:36:48:eb:97:2d:2a:
                    ce:83:75:cd:0e:43:79:90:44:b7:58:1f:97:a0:f7:
                    56:46:fb:d7:7d:a3:39:a1:4c:70:7e:97:a2:c9:e0:
                    a7:08:0a:31:4c:1e:0b:e7:63:88:be:d0:f6:ff:9a:
                    bb:04:1d:80:01:3a:26:5f:92:b6:37:2f:a7:63:e2:
                    30:65:f2:73:2b:c6:5c:5f:41:f4:b6:f5:5b:99:24:
                    cd:8d:38:ee:2c:85:18:2c:c6:70:70:d2:4d:ad:6e:
                    1d:17:84:99:c9:32:0e:32:ad:e8:d0:0b:51:5b:79:
                    e0:6d:f7:ba:01:1d:48:6b:cc:15:d5:45:b3:28:53:
                    0d:af:92:62:53:1d:d1:44:0b:a1:bc:4f:5c:b9:f1:
                    a0:f8:33:76:87:7b:2c:4c:c3:3e:a0:7c:28:5e:61:
                    52:fc:2d:ab:8d:56:95:2e:f1:40:0d:95:42:9f:4d:
                    ca:5b:f6:be:ec:ee:a0:33:35:0b:aa:3d:50:e9:6d:
                    12:ed:f3:4d:95:04:ee:e8:4e:2b:2e:31:c8:38:ce:
                    e8:07:c3:d3:aa:13:7a:91:f1:d6:be:50:cd:08:0d:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:62:53:C8:FE:58:DF:8F:74:ED:97:DF:BC:F8:05:E7:B2:1F:0F
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/u1NiU8j-WN-PdO2X37z4BeeyHw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.133.0/24
                  82.140.152.0/24
                  82.140.171.0/24
                  82.140.176.0/24
                  82.140.179.0/24
                  82.140.184.0/23
                  84.46.136.0/24
                  84.46.146.0-84.46.149.255
                  84.46.160.0/22
                  84.46.168.0/23
                  84.46.204.0/23
                  84.46.207.0/24
                  86.38.6.0/24
                  86.38.18.0/24
                  86.38.23.0/24
                  86.38.28.0/22
                  86.38.33.0/24
                  86.38.36.0/24
                  86.38.38.0/23
                  86.38.77.0-86.38.79.255
                  86.38.90.0/24
                  86.38.94.0-86.38.96.255
                  86.38.98.0/24
                  86.38.100.0/24
                  86.38.102.0/24
                  86.38.122.0/24
                  86.38.124.0-86.38.126.255
                  86.38.142.0/24
                  86.38.152.0-86.38.154.255
                  86.38.161.0/24
                  86.38.165.0-86.38.169.255
                  86.38.171.0-86.38.174.255
                  86.38.176.0/24
                  86.38.188.0/24
                  86.38.201.0/24
                  86.38.215.0/24
                  86.38.234.0/24
                  86.38.236.0/24
                  89.116.14.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.78.255
                  89.116.90.0/24
                  89.116.93.0/24
                  89.116.97.0/24
                  89.116.124.0/24
                  89.116.129.0/24
                  89.116.143.0/24
                  89.116.151.0/24
                  89.116.155.0/24
                  89.116.160.0/24
                  89.116.162.0/24
                  89.116.174.0/24
                  89.116.176.0/24
                  89.116.178.0/24
                  89.116.232.0/24
                  89.116.235.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.117.10.0/24
                  89.117.14.0/24
                  89.117.26.0/24
                  89.117.69.0/24
                  89.117.108.0/24
                  89.117.125.0/24
                  89.117.127.0-89.117.128.255
                  89.117.137.0-89.117.138.255
                  89.117.140.0/24
                  89.117.165.0/24
                  89.117.170.0/24
                  89.117.176.0/24
                  89.117.178.0/23
                  89.117.184.0/23
                  89.117.187.0/24
                  89.117.192.0/24
                  89.117.200.0/24
                  89.117.204.0/24
                  89.117.206.0/23
                  89.117.211.0/24
                  89.117.219.0/24
                  89.117.223.0-89.117.224.255
                  89.117.238.0/24
                  89.117.247.0/24
                  89.117.249.0/24
                  217.9.240.0/24
                  217.9.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:9b:11:c6:5b:f5:1a:c1:e1:e6:ee:c1:c2:aa:ed:15:d5:
         ee:58:ce:57:4d:34:02:00:12:c7:62:29:21:2e:50:a2:1f:f4:
         c9:ff:de:71:20:58:fb:18:03:33:4f:8d:d1:d4:db:a4:07:eb:
         aa:3d:bc:1c:17:ec:f9:03:9f:fe:c7:59:9d:0b:ef:9d:f7:99:
         aa:02:ba:fa:c5:d9:b7:fa:18:40:94:9d:24:c6:ed:e7:1e:66:
         fa:2e:f1:3e:80:97:9c:35:06:0e:87:42:6d:16:16:50:a1:7b:
         91:16:21:b3:b4:6a:8f:f9:3d:5c:39:93:c3:fa:a6:f7:ff:07:
         44:64:d2:bc:25:34:d7:63:4e:54:88:fd:ff:1e:22:21:dc:a5:
         bc:60:e1:9e:6b:13:0d:89:0d:a5:58:ac:b9:49:a3:5b:80:30:
         73:47:5f:b7:fd:d6:d9:58:35:34:4d:00:26:ba:9c:f3:82:a7:
         c0:ae:4e:c9:82:8e:22:f2:f1:5e:64:08:90:7a:d0:f4:a1:33:
         e1:08:bb:4f:69:cb:c4:64:71:06:c9:8c:bc:90:82:7b:0f:95:
         a6:67:56:1f:75:b0:02:48:cb:a6:dd:40:a6:1f:7a:b5:84:b1:
         7c:23:0a:af:9e:6e:3c:fd:f8:61:e1:f3:6e:d8:71:a9:d9:cc:
         59:76:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:21 2025 by rpki-client