Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa
File:                     b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa (raw, json)
Hash identifier:          M1bNoCXEnlqpwH7F1PDHiDBcvPrR9h7Siq6n7gYINvo=
Subject key identifier:   6F:A0:C9:27:71:67:8B:F5:37:E2:D8:06:2F:3B:2F:97:48:99:DD:76
Certificate issuer:       /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial:       018BA92975D30ED1A83926448EDBEA633924
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa
Signing time:             Tue 07 Nov 2023 09:42:28 +0000
ROA not before:           Tue 07 Nov 2023 09:42:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42473
IP address blocks:        185.228.148.0/22 maxlen: 22
                          37.235.4.0/24 maxlen: 24
                          37.235.3.0/24 maxlen: 24
                          37.235.5.0/24 maxlen: 24
                          144.208.192.0/18 maxlen: 32
                          144.208.205.0/24 maxlen: 24
                          144.208.206.0/24 maxlen: 24
                          144.208.212.0/22 maxlen: 32
                          144.208.207.0/24 maxlen: 24
                          178.255.152.0/21 maxlen: 32
                          193.33.114.0/23 maxlen: 32
                          213.227.160.0/19 maxlen: 32
                          213.227.184.0/24 maxlen: 24
                          188.172.230.0/23 maxlen: 23
                          217.146.0.0/19 maxlen: 24
                          188.172.249.0/24 maxlen: 24
                          188.172.247.0/24 maxlen: 24
                          188.172.254.0/24 maxlen: 24
                          45.132.61.0/24 maxlen: 24
                          45.132.62.0/23 maxlen: 24
                          188.172.192.0/18 maxlen: 32
                          188.172.208.0/24 maxlen: 24
                          188.65.72.0/21 maxlen: 32
                          37.252.226.0/24 maxlen: 24
                          37.252.224.0/19 maxlen: 32
                          37.252.228.0/24 maxlen: 32
                          37.252.234.0/24 maxlen: 24
                          37.252.243.0/24 maxlen: 24
                          37.252.244.0/24 maxlen: 24
                          37.252.253.0/24 maxlen: 24
                          37.252.251.0/24 maxlen: 24
                          185.50.232.0/23 maxlen: 23
                          185.50.235.0/24 maxlen: 24
                          94.16.98.0/24 maxlen: 24
                          185.2.176.0/22 maxlen: 32
                          94.16.125.0/24 maxlen: 24
                          94.16.126.0/24 maxlen: 24
                          176.123.54.0/23 maxlen: 23
                          194.1.206.0/24 maxlen: 32
                          185.116.97.0/24 maxlen: 24
                          185.116.98.0/24 maxlen: 24
                          185.116.96.0/24 maxlen: 24
                          185.116.99.0/24 maxlen: 24
                          185.81.206.0/24 maxlen: 24
                          185.81.209.0/24 maxlen: 24
                          144.208.216.0/24 maxlen: 24
                          144.208.219.0/24 maxlen: 24
                          144.208.217.0/24 maxlen: 24
                          144.208.226.0/24 maxlen: 24
                          144.208.224.0/24 maxlen: 24
                          144.208.225.0/24 maxlen: 24
                          144.208.223.0/24 maxlen: 24
                          144.208.221.0/24 maxlen: 24
                          144.208.222.0/24 maxlen: 24
                          144.208.229.0/24 maxlen: 24
                          144.208.230.0/24 maxlen: 24
                          144.208.228.0/24 maxlen: 24
                          144.208.233.0/24 maxlen: 24
                          144.208.231.0/24 maxlen: 24
                          144.208.232.0/24 maxlen: 24
                          144.208.236.0/24 maxlen: 24
                          144.208.237.0/24 maxlen: 24
                          144.208.235.0/24 maxlen: 24
                          144.208.244.0/24 maxlen: 24
                          2a00:11c0:66::/48 maxlen: 48
                          2a00:11c0:41::/48 maxlen: 48
                          2a00:11c0::/32 maxlen: 128
                          2a00:11c0:99::/48 maxlen: 48
                          2a00:11c0:19::/48 maxlen: 48
                          2a00:11c0:dd::/48 maxlen: 48
                          2a00:11c0:13::/48 maxlen: 48
                          2a00:11c0:96::/48 maxlen: 48
                          2a00:11c0:1335::/48 maxlen: 48
                          2a00:11c0:24::/48 maxlen: 48
                          2a00:11c0:43::/48 maxlen: 48
                          2a00:11c0:9021::/48 maxlen: 48
                          2a00:11c0:40::/48 maxlen: 48
                          2a00:11c0:179b::/48 maxlen: 48
                          2a00:11c0:79::/48 maxlen: 48
                          2a00:11c0:1798::/48 maxlen: 48
                          2a00:11c0:98::/48 maxlen: 48
                          2a00:11c0:87::/48 maxlen: 48
                          2a00:11c0:29::/48 maxlen: 48
                          2a00:11c0:84::/48 maxlen: 48
                          2a00:11c0:dc::/48 maxlen: 48
                          2a01:aea0:dd1::/48 maxlen: 48
                          2a00:11c0:1334::/48 maxlen: 48
                          2a00:11c0:42::/48 maxlen: 48
                          2a00:11c0:179a::/48 maxlen: 48
                          2a00:11c0:9a::/48 maxlen: 48
                          2a01:aea0::/40 maxlen: 40
                          2a01:aea0::/32 maxlen: 32
                          2a00:11c0:83::/48 maxlen: 48
                          2a00:11c0:86::/48 maxlen: 48
                          2a00:11c0:97::/48 maxlen: 48
                          2a00:11c0:4a::/48 maxlen: 48
                          2a00:11c0:80::/48 maxlen: 48
                          2a00:11c0:de::/48 maxlen: 48
                          2a01:aea0:df1::/48 maxlen: 48
                          2a00:11c0:22::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 07:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a9:29:75:d3:0e:d1:a8:39:26:44:8e:db:ea:63:39:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
        Validity
            Not Before: Nov  7 09:42:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fa0c92771678bf537e2d8062f3b2f974899dd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:d3:83:73:1c:2c:ce:b5:53:47:8f:73:40:
                    c9:bb:9f:6c:e2:cc:ac:37:0a:60:b6:b1:e9:33:1a:
                    dc:cd:20:db:7a:9b:35:2e:42:58:2e:8f:80:38:2a:
                    80:83:d9:a3:78:d0:94:d4:d4:b6:be:ca:21:e7:59:
                    0a:06:ef:8c:af:42:5b:0a:41:6b:31:19:4d:73:5e:
                    c0:47:23:f1:05:64:27:c0:d9:4a:95:dd:2a:11:8b:
                    20:9c:e6:e6:99:6d:fb:1f:22:99:25:49:ff:32:39:
                    60:72:93:2c:82:93:5a:74:fa:29:07:13:5c:dc:23:
                    a2:ff:1a:ec:d6:0b:7e:53:6b:54:81:e1:1e:44:f3:
                    af:fa:2f:9f:69:8a:ca:ab:fd:3c:db:f9:2b:0e:15:
                    1a:c3:82:ae:ab:0b:d9:7b:40:15:49:a3:f6:7d:ff:
                    bd:2d:58:0d:1d:cc:c6:dc:04:a3:18:32:7c:b6:5c:
                    56:ae:53:9d:c2:6d:78:b1:2d:f5:b7:ab:9f:5d:5d:
                    b2:0f:c0:1b:19:db:ee:fd:fd:62:aa:ee:c4:25:fb:
                    e0:8d:68:35:dd:75:52:b3:91:c6:bb:fc:3a:ab:c6:
                    05:d2:4b:5d:c6:82:78:31:84:63:f9:57:28:4f:46:
                    33:c1:77:43:c8:e0:0c:1a:88:d6:fe:6b:c6:5a:76:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:C9:27:71:67:8B:F5:37:E2:D8:06:2F:3B:2F:97:48:99:DD:76
            X509v3 Authority Key Identifier:
                keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/b6DJJ3Fni_U34tgGLzsvl0iZ3XY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.235.3.0-37.235.5.255
                  37.252.224.0/19
                  45.132.61.0-45.132.63.255
                  94.16.98.0/24
                  94.16.125.0-94.16.126.255
                  144.208.192.0/18
                  176.123.54.0/23
                  178.255.152.0/21
                  185.2.176.0/22
                  185.50.232.0/23
                  185.50.235.0/24
                  185.81.206.0/24
                  185.81.209.0/24
                  185.116.96.0/22
                  185.228.148.0/22
                  188.65.72.0/21
                  188.172.192.0/18
                  193.33.114.0/23
                  194.1.206.0/24
                  213.227.160.0/19
                  217.146.0.0/19
                IPv6:
                  2a00:11c0::/32
                  2a01:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:77:77:f0:0b:41:bb:d8:50:07:2c:73:ff:cd:9a:11:51:fd:
         8e:9a:81:58:91:33:46:3a:09:89:a7:44:ab:9f:0b:79:86:ac:
         f1:b5:91:d5:22:89:b8:55:75:5f:67:84:08:86:ab:16:ad:9b:
         11:ff:09:f0:85:6a:21:4c:e7:a9:f6:6d:f8:be:0f:7d:68:89:
         de:4a:71:16:04:63:75:9f:7a:3b:94:79:a2:8a:4b:39:b5:59:
         20:78:4c:f9:24:d3:c0:dc:65:b7:88:3f:c6:5a:88:61:78:e1:
         f6:50:44:09:38:7b:ce:be:17:50:1f:4d:ca:6a:d9:49:6a:b4:
         21:fe:c3:eb:77:e9:33:1d:df:39:d0:1c:39:43:26:46:70:3d:
         01:72:25:6b:80:dd:99:9f:f3:e9:d3:d6:d9:4a:0b:03:31:66:
         0f:84:f7:e5:49:14:9a:6d:d6:56:b2:0e:07:59:22:c7:f6:87:
         52:43:e4:8e:31:ec:99:d8:25:61:72:52:b8:5b:de:92:69:af:
         f6:9d:af:ac:da:df:6c:77:a6:fd:cf:5a:aa:12:32:56:9f:80:
         b1:f4:41:15:81:ec:22:3c:68:9d:29:33:14:b2:91:7c:e5:ff:
         10:43:d1:fa:9b:82:42:89:ba:cd:b1:5a:82:3f:34:aa:50:b5:
         f0:89:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org