Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/h0Nc-t9tQL2uHo5te9u0MQwSQVQ.roa
File:                     h0Nc-t9tQL2uHo5te9u0MQwSQVQ.roa (raw, json)
Hash identifier:          YjvuEbQVbvuXDqt/MZswrJYdZvnpAs4fx5xZnnk/6Cg=
Subject key identifier:   87:43:5C:FA:DF:6D:40:BD:AE:1E:8E:6D:7B:DB:B4:31:0C:12:41:54
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       0190C63583C62767B28E7D0E62BDB6A1B840
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/h0Nc-t9tQL2uHo5te9u0MQwSQVQ.roa
Signing time:             Thu 18 Jul 2024 14:18:34 +0000
ROA not before:           Thu 18 Jul 2024 14:18:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5378
IP address blocks:        62.49.0.0/16 maxlen: 16
                          62.49.0.0/18 maxlen: 18
                          62.49.64.0/18 maxlen: 18
                          62.49.128.0/18 maxlen: 18
                          62.49.192.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          62.56.0.0/18 maxlen: 18
                          62.56.64.0/18 maxlen: 18
                          77.233.128.0/19 maxlen: 19
                          80.176.0.0/15 maxlen: 15
                          80.177.0.0/19 maxlen: 19
                          80.177.32.0/20 maxlen: 20
                          83.104.0.0/14 maxlen: 14
                          83.104.0.0/18 maxlen: 18
                          83.104.64.0/18 maxlen: 18
                          83.104.128.0/18 maxlen: 18
                          83.104.192.0/18 maxlen: 18
                          83.105.0.0/18 maxlen: 18
                          83.105.64.0/19 maxlen: 19
                          83.105.96.0/19 maxlen: 19
                          83.105.128.0/19 maxlen: 19
                          83.105.160.0/19 maxlen: 19
                          83.105.192.0/19 maxlen: 19
                          83.105.224.0/19 maxlen: 19
                          83.106.0.0/19 maxlen: 19
                          83.106.32.0/19 maxlen: 19
                          83.106.64.0/19 maxlen: 19
                          83.106.160.0/20 maxlen: 20
                          83.106.176.0/20 maxlen: 20
                          83.106.192.0/18 maxlen: 18
                          83.107.0.0/18 maxlen: 18
                          83.107.64.0/18 maxlen: 18
                          83.107.128.0/18 maxlen: 18
                          83.107.192.0/18 maxlen: 18
                          141.195.192.0/18 maxlen: 18
                          141.195.192.0/19 maxlen: 19
                          141.195.240.0/20 maxlen: 20
                          193.237.0.0/16 maxlen: 16
                          193.237.0.0/19 maxlen: 19
                          193.237.32.0/19 maxlen: 19
                          193.237.64.0/19 maxlen: 19
                          193.237.96.0/19 maxlen: 19
                          193.237.128.0/21 maxlen: 21
                          193.237.136.0/22 maxlen: 22
                          193.237.140.0/22 maxlen: 22
                          193.237.144.0/21 maxlen: 21
                          193.237.152.0/21 maxlen: 21
                          193.237.160.0/19 maxlen: 19
                          193.237.192.0/19 maxlen: 19
                          193.237.224.0/19 maxlen: 19
                          194.222.0.0/16 maxlen: 16
                          195.8.160.0/19 maxlen: 19
                          195.58.64.0/19 maxlen: 19
                          212.225.0.0/17 maxlen: 17
                          212.228.0.0/15 maxlen: 15
                          212.228.0.0/18 maxlen: 18
                          212.228.64.0/18 maxlen: 18
                          212.228.128.0/19 maxlen: 19
                          212.228.192.0/18 maxlen: 18
                          212.229.0.0/18 maxlen: 18
                          212.229.64.0/21 maxlen: 21
                          212.229.72.0/22 maxlen: 22
                          212.229.76.0/23 maxlen: 23
                          212.229.78.0/23 maxlen: 23
                          212.229.80.0/21 maxlen: 21
                          212.229.88.0/21 maxlen: 21
                          212.229.96.0/19 maxlen: 19
                          212.229.128.0/18 maxlen: 18
                          212.229.192.0/18 maxlen: 18
                          212.248.128.0/17 maxlen: 17
                          2001:958::/32 maxlen: 32
                          2a0a:ef40::/29 maxlen: 29
                          2a0a:ef40:1400::/42 maxlen: 42
                          2a0a:ef40:1440::/42 maxlen: 42
                          2a0a:ef40:1480::/42 maxlen: 42
                          2a0a:ef40:14c0::/42 maxlen: 42
                          2a0a:ef40:1500::/42 maxlen: 42
                          2a0a:ef40:1540::/42 maxlen: 42
                          2a0a:ef40:1580::/42 maxlen: 42
                          2a0a:ef40:15c0::/42 maxlen: 42
                          2a0a:ef40:1600::/42 maxlen: 42
                          2a0a:ef40:1640::/42 maxlen: 42
                          2a0a:ef40:1680::/42 maxlen: 42
                          2a0a:ef40:16c0::/42 maxlen: 42
                          2a0a:ef40:1700::/42 maxlen: 42
                          2a0a:ef40:1740::/42 maxlen: 42
                          2a0a:ef40:1780::/42 maxlen: 42
                          2a0a:ef40:17c0::/42 maxlen: 42
                          2a0a:ef40:1800::/42 maxlen: 42
                          2a0a:ef40:1840::/42 maxlen: 42
                          2a0a:ef40:1880::/42 maxlen: 42
                          2a0a:ef40:18c0::/42 maxlen: 42
                          2a0a:ef40:1900::/42 maxlen: 42
                          2a0a:ef40:1940::/42 maxlen: 42
                          2a0a:ef40:1980::/42 maxlen: 42
                          2a0a:ef40:19c0::/42 maxlen: 42
                          2a0a:ef40:1a00::/42 maxlen: 42
                          2a0a:ef40:1a40::/42 maxlen: 42
                          2a0a:ef40:1a80::/42 maxlen: 42
                          2a0a:ef40:1ac0::/42 maxlen: 42
                          2a0a:ef40:1b00::/42 maxlen: 42
                          2a0a:ef40:1b40::/42 maxlen: 42
                          2a0a:ef40:1b80::/42 maxlen: 42
                          2a0a:ef40:1bc0::/42 maxlen: 42
                          2a0a:ef40:1c00::/42 maxlen: 42
                          2a0a:ef40:1c40::/42 maxlen: 42
                          2a0a:ef40:1c80::/42 maxlen: 42
                          2a0a:ef40:1cc0::/42 maxlen: 42
                          2a0a:ef40:1d00::/42 maxlen: 42
                          2a0a:ef40:1d40::/42 maxlen: 42
                          2a0a:ef40:1d80::/42 maxlen: 42
                          2a0a:ef40:1dc0::/42 maxlen: 42

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 08:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c6:35:83:c6:27:67:b2:8e:7d:0e:62:bd:b6:a1:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Jul 18 14:18:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=87435cfadf6d40bdae1e8e6d7bdbb4310c124154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:1c:7e:2a:c0:62:9c:05:90:6c:18:7c:23:
                    58:cf:5c:ac:0b:ca:1e:b5:05:0b:0e:38:6a:1c:02:
                    36:0b:94:c0:6c:50:49:5c:26:e9:03:e1:04:65:54:
                    74:d6:1f:f0:96:6e:95:d6:4d:3c:fb:81:dc:4b:a7:
                    ec:ad:0f:a1:8a:bf:c9:91:4e:81:9a:95:04:cc:6c:
                    99:fb:0b:00:07:58:3a:f1:62:d1:86:a9:f3:83:07:
                    b8:65:85:26:c3:42:40:a0:db:8e:10:73:6e:2a:d8:
                    2b:5c:9c:57:44:88:89:30:dd:c2:60:fb:21:ae:08:
                    56:d6:bb:d5:42:c7:7a:8d:7c:dc:92:dd:b2:95:01:
                    fd:40:a4:bf:00:99:27:26:0d:c0:f0:10:c4:2f:cc:
                    49:78:ca:84:f4:50:c9:eb:56:0b:18:6e:72:f8:2c:
                    59:c8:e8:71:d4:ab:e1:fa:58:70:9b:22:ae:b8:04:
                    74:56:2a:6b:9b:5f:95:e4:7f:45:a4:51:cb:56:ae:
                    97:59:3c:e0:76:03:77:c4:b1:49:45:8c:87:da:95:
                    51:e6:96:a2:54:1b:82:48:85:cb:a7:40:ae:0a:00:
                    82:31:ae:e5:74:f9:f8:9c:be:e2:9e:13:ff:be:da:
                    03:5e:04:cc:3c:8e:0f:ae:e9:79:04:dd:b9:24:21:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:5C:FA:DF:6D:40:BD:AE:1E:8E:6D:7B:DB:B4:31:0C:12:41:54
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/h0Nc-t9tQL2uHo5te9u0MQwSQVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  141.195.192.0/18
                  193.237.0.0/16
                  194.222.0.0/16
                  195.8.160.0/19
                  195.58.64.0/19
                  212.225.0.0/17
                  212.228.0.0/15
                  212.248.128.0/17
                IPv6:
                  2001:958::/32
                  2a0a:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:5f:59:89:2f:ac:e5:5f:dc:01:af:0a:03:61:0d:f5:e4:63:
         db:5d:b2:96:d2:c9:98:01:40:8e:1a:ef:56:5f:5e:f1:40:3c:
         35:e0:f9:44:c1:9c:4d:ae:d1:16:4a:cf:42:33:be:c6:29:f2:
         b6:19:8b:11:d8:f4:c6:e0:d4:2b:6d:c8:69:f6:19:ac:75:8a:
         b4:79:7b:93:85:3f:a2:67:6b:9c:74:bd:78:8f:38:d2:74:94:
         67:bf:bb:76:53:20:8c:3f:c9:08:34:99:61:56:78:c1:3d:57:
         cf:1c:6a:eb:32:53:52:c4:9e:e2:b1:40:1c:ca:e8:49:de:c3:
         c7:03:6b:bd:9f:0c:d8:7e:38:b2:b2:45:58:18:70:e9:d1:aa:
         36:68:45:f2:e1:6b:b8:4c:41:9c:8d:67:37:39:79:3a:dd:ed:
         8b:04:59:f0:48:e2:6b:2c:05:42:5b:ec:6d:07:1c:ef:2a:98:
         4b:63:d5:1f:28:6f:b8:fa:21:5f:07:ab:13:c9:c0:b3:85:84:
         f7:09:f3:c0:6d:77:2e:8b:c0:de:c2:62:c6:bf:43:0d:2f:de:
         91:ce:74:42:6b:36:84:a3:50:35:d3:0d:38:7a:9d:25:89:92:
         33:49:d7:c7:70:76:f7:44:16:55:7e:4f:ab:2d:17:f1:b9:41:
         c7:6d:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:25 2024 by rpki-client on console-ams.rpki-client.org