Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/n8cf_xXCSiw5i02kWl_WVZuFQwY.roa
File:                     n8cf_xXCSiw5i02kWl_WVZuFQwY.roa (raw, json)
Hash identifier:          u6tSUJK/BYiEvAS8T05PFOI3dN7qwGqL+EBLTTMpTIc=
Subject key identifier:   9F:C7:1F:FF:15:C2:4A:2C:39:8B:4D:A4:5A:5F:D6:55:9B:85:43:06
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       0191041CD7081A2AAA1A56B2FE096AA27696
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/n8cf_xXCSiw5i02kWl_WVZuFQwY.roa
Signing time:             Tue 30 Jul 2024 14:48:04 +0000
ROA not before:           Tue 30 Jul 2024 14:48:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5378
IP address blocks:        62.49.0.0/16 maxlen: 16
                          62.49.0.0/18 maxlen: 18
                          62.49.64.0/18 maxlen: 18
                          62.49.128.0/18 maxlen: 18
                          62.49.192.0/18 maxlen: 18
                          62.56.0.0/17 maxlen: 17
                          62.56.0.0/18 maxlen: 18
                          62.56.64.0/18 maxlen: 18
                          77.233.128.0/19 maxlen: 19
                          80.176.0.0/15 maxlen: 15
                          80.177.0.0/19 maxlen: 19
                          80.177.32.0/20 maxlen: 20
                          80.177.48.0/20 maxlen: 20
                          83.104.0.0/14 maxlen: 14
                          83.104.0.0/18 maxlen: 18
                          83.104.64.0/18 maxlen: 18
                          83.104.128.0/18 maxlen: 18
                          83.104.192.0/18 maxlen: 18
                          83.105.0.0/18 maxlen: 18
                          83.105.64.0/19 maxlen: 19
                          83.105.96.0/19 maxlen: 19
                          83.105.128.0/19 maxlen: 19
                          83.105.160.0/19 maxlen: 19
                          83.105.192.0/19 maxlen: 19
                          83.105.224.0/19 maxlen: 19
                          83.106.0.0/19 maxlen: 19
                          83.106.32.0/19 maxlen: 19
                          83.106.64.0/19 maxlen: 19
                          83.106.96.0/19 maxlen: 19
                          83.106.160.0/20 maxlen: 20
                          83.106.176.0/20 maxlen: 20
                          83.106.192.0/18 maxlen: 18
                          83.107.0.0/18 maxlen: 18
                          83.107.64.0/18 maxlen: 18
                          83.107.128.0/18 maxlen: 18
                          83.107.192.0/18 maxlen: 18
                          141.195.192.0/18 maxlen: 18
                          141.195.192.0/19 maxlen: 19
                          141.195.240.0/20 maxlen: 20
                          193.237.0.0/16 maxlen: 16
                          193.237.0.0/19 maxlen: 19
                          193.237.32.0/19 maxlen: 19
                          193.237.64.0/19 maxlen: 19
                          193.237.96.0/19 maxlen: 19
                          193.237.128.0/21 maxlen: 21
                          193.237.136.0/22 maxlen: 22
                          193.237.140.0/22 maxlen: 22
                          193.237.144.0/21 maxlen: 21
                          193.237.152.0/21 maxlen: 21
                          193.237.160.0/19 maxlen: 19
                          193.237.192.0/19 maxlen: 19
                          193.237.224.0/19 maxlen: 19
                          194.222.0.0/16 maxlen: 16
                          195.8.160.0/19 maxlen: 19
                          195.58.64.0/19 maxlen: 19
                          212.225.0.0/17 maxlen: 17
                          212.228.0.0/15 maxlen: 15
                          212.228.0.0/18 maxlen: 18
                          212.228.64.0/18 maxlen: 18
                          212.228.128.0/19 maxlen: 19
                          212.228.192.0/18 maxlen: 18
                          212.229.0.0/18 maxlen: 18
                          212.229.64.0/21 maxlen: 21
                          212.229.72.0/22 maxlen: 22
                          212.229.76.0/23 maxlen: 23
                          212.229.78.0/23 maxlen: 23
                          212.229.80.0/21 maxlen: 21
                          212.229.88.0/21 maxlen: 21
                          212.229.96.0/19 maxlen: 19
                          212.229.128.0/18 maxlen: 18
                          212.229.192.0/18 maxlen: 18
                          212.248.128.0/17 maxlen: 17
                          2001:958::/32 maxlen: 32
                          2a0a:ef40::/29 maxlen: 29
                          2a0a:ef40:1400::/42 maxlen: 42
                          2a0a:ef40:1440::/42 maxlen: 42
                          2a0a:ef40:1480::/42 maxlen: 42
                          2a0a:ef40:14c0::/42 maxlen: 42
                          2a0a:ef40:1500::/42 maxlen: 42
                          2a0a:ef40:1540::/42 maxlen: 42
                          2a0a:ef40:1580::/42 maxlen: 42
                          2a0a:ef40:15c0::/42 maxlen: 42
                          2a0a:ef40:1600::/42 maxlen: 42
                          2a0a:ef40:1640::/42 maxlen: 42
                          2a0a:ef40:1680::/42 maxlen: 42
                          2a0a:ef40:16c0::/42 maxlen: 42
                          2a0a:ef40:1700::/42 maxlen: 42
                          2a0a:ef40:1740::/42 maxlen: 42
                          2a0a:ef40:1780::/42 maxlen: 42
                          2a0a:ef40:17c0::/42 maxlen: 42
                          2a0a:ef40:1800::/42 maxlen: 42
                          2a0a:ef40:1840::/42 maxlen: 42
                          2a0a:ef40:1880::/42 maxlen: 42
                          2a0a:ef40:18c0::/42 maxlen: 42
                          2a0a:ef40:1900::/42 maxlen: 42
                          2a0a:ef40:1940::/42 maxlen: 42
                          2a0a:ef40:1980::/42 maxlen: 42
                          2a0a:ef40:19c0::/42 maxlen: 42
                          2a0a:ef40:1a00::/42 maxlen: 42
                          2a0a:ef40:1a40::/42 maxlen: 42
                          2a0a:ef40:1a80::/42 maxlen: 42
                          2a0a:ef40:1ac0::/42 maxlen: 42
                          2a0a:ef40:1b00::/42 maxlen: 42
                          2a0a:ef40:1b40::/42 maxlen: 42
                          2a0a:ef40:1b80::/42 maxlen: 42
                          2a0a:ef40:1bc0::/42 maxlen: 42
                          2a0a:ef40:1c00::/42 maxlen: 42
                          2a0a:ef40:1c40::/42 maxlen: 42
                          2a0a:ef40:1c80::/42 maxlen: 42
                          2a0a:ef40:1cc0::/42 maxlen: 42
                          2a0a:ef40:1d00::/42 maxlen: 42
                          2a0a:ef40:1d40::/42 maxlen: 42
                          2a0a:ef40:1d80::/42 maxlen: 42
                          2a0a:ef40:1dc0::/42 maxlen: 42

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 16:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:04:1c:d7:08:1a:2a:aa:1a:56:b2:fe:09:6a:a2:76:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Jul 30 14:48:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9fc71fff15c24a2c398b4da45a5fd6559b854306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:81:7d:49:60:82:57:19:47:e5:db:9d:b0:
                    26:6a:aa:b4:51:10:0e:86:d8:b7:cb:52:28:de:f4:
                    1e:24:41:31:83:88:32:81:fa:ac:9e:cc:d9:80:ac:
                    84:94:31:76:a1:b2:f8:0b:92:90:61:6b:dd:26:a6:
                    2f:af:c7:c7:88:dd:19:87:d4:21:74:fd:f5:3d:bc:
                    1b:e6:62:d5:42:85:f6:a2:70:05:c9:b4:c1:ca:90:
                    b2:fd:86:01:19:c5:8d:2f:a0:72:46:5b:3e:c2:ab:
                    33:75:25:7f:9d:7d:aa:fd:25:9c:b0:5a:69:64:8e:
                    bc:d8:14:da:fe:22:66:73:fc:6e:3b:51:d4:a5:8f:
                    e4:47:68:41:ec:3f:bd:e8:b2:00:a7:87:85:01:b0:
                    c2:15:77:48:10:1c:61:71:f0:e4:4e:30:33:d1:21:
                    63:de:da:c3:47:53:d1:a5:3c:95:29:9b:63:f6:ce:
                    3e:54:87:4d:98:39:01:ed:8d:f4:d3:24:59:c2:a5:
                    e6:b0:d4:68:e5:e0:b1:c6:48:d9:eb:25:45:10:b0:
                    e8:be:ec:f4:0f:12:93:3b:bc:a3:72:5c:80:ab:dc:
                    96:0f:92:27:e6:08:bf:b0:95:ec:33:ef:07:ab:5b:
                    f6:d0:a4:ce:13:a2:5d:cb:04:12:b8:88:0f:08:b2:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:1F:FF:15:C2:4A:2C:39:8B:4D:A4:5A:5F:D6:55:9B:85:43:06
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/n8cf_xXCSiw5i02kWl_WVZuFQwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.49.0.0/16
                  62.56.0.0/17
                  77.233.128.0/19
                  80.176.0.0/15
                  83.104.0.0/14
                  141.195.192.0/18
                  193.237.0.0/16
                  194.222.0.0/16
                  195.8.160.0/19
                  195.58.64.0/19
                  212.225.0.0/17
                  212.228.0.0/15
                  212.248.128.0/17
                IPv6:
                  2001:958::/32
                  2a0a:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:8e:c1:9a:18:41:28:1a:5d:0a:6f:0c:30:05:00:a4:d4:
         0b:96:0b:ec:0f:56:2a:83:7d:97:36:92:bf:bb:21:88:e5:c7:
         7d:24:01:22:2d:34:a7:1f:d6:fa:ac:34:5e:64:ea:16:f3:a8:
         80:f0:ac:5f:92:45:aa:91:9b:75:14:49:2d:15:be:64:16:0a:
         69:6c:05:44:63:23:1f:85:b6:b1:25:eb:d1:e5:6f:b4:66:1b:
         92:83:8a:55:97:a1:b9:66:73:d9:e8:47:9b:b6:f4:f0:c4:d4:
         7f:85:dc:0c:50:7c:c8:cd:76:65:ce:33:b7:1f:f9:e6:3f:9d:
         f9:55:2e:93:16:64:b6:99:8c:76:76:08:41:5e:8c:29:04:d3:
         80:04:7b:2f:87:50:8c:f7:48:b8:2b:48:1d:6a:3b:75:73:5d:
         88:2f:37:27:9d:01:bc:1e:18:c1:19:d7:a5:59:da:f5:2e:0a:
         a8:91:14:c3:1a:f3:41:ba:68:8b:b5:4b:29:61:91:c1:b9:ea:
         34:f1:77:28:a7:20:64:9c:e1:8d:3d:9d:77:18:db:f1:5e:c3:
         20:31:6c:f9:51:3d:b2:35:a6:5c:47:5f:69:bb:4d:c0:ef:5b:
         29:d3:09:bd:a6:ab:4f:ad:48:0f:87:5a:91:5a:30:96:bd:e8:
         6e:c9:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 18:24:55 2024 by rpki-client on console-fra.rpki-client.org