Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/X4S11AMTeTZ8CfKlLIYXXYrQq4Y.roa
File:                     X4S11AMTeTZ8CfKlLIYXXYrQq4Y.roa (raw, json)
Hash identifier:          z4OYthc78XR0jzrZFIR+Hk0U5Xep69Ff79ppFpjCECU=
Subject key identifier:   5F:84:B5:D4:03:13:79:36:7C:09:F2:A5:2C:86:17:5D:8A:D0:AB:86
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       0197347DA03F0AC9A4AA3BEF39C064AF731A
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/X4S11AMTeTZ8CfKlLIYXXYrQq4Y.roa
Signing time:             Tue 03 Jun 2025 06:32:17 +0000
ROA not before:           Tue 03 Jun 2025 06:32:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29256
IP address blocks:        46.57.128.0/20 maxlen: 20
                          46.57.128.0/21 maxlen: 21
                          46.57.136.0/21 maxlen: 21
                          46.57.144.0/20 maxlen: 20
                          46.57.144.0/21 maxlen: 21
                          46.57.152.0/21 maxlen: 21
                          46.57.160.0/20 maxlen: 20
                          46.57.160.0/21 maxlen: 21
                          46.57.168.0/21 maxlen: 21
                          46.57.176.0/20 maxlen: 20
                          46.57.176.0/21 maxlen: 21
                          46.57.184.0/21 maxlen: 21
                          46.57.192.0/20 maxlen: 20
                          46.57.192.0/21 maxlen: 21
                          46.57.200.0/21 maxlen: 21
                          46.57.208.0/20 maxlen: 20
                          46.57.208.0/21 maxlen: 21
                          46.57.216.0/21 maxlen: 21
                          46.57.224.0/20 maxlen: 20
                          46.57.224.0/21 maxlen: 21
                          46.57.232.0/21 maxlen: 21
                          46.57.240.0/20 maxlen: 20
                          46.57.240.0/21 maxlen: 21
                          46.57.248.0/21 maxlen: 21
                          46.213.0.0/20 maxlen: 20
                          46.213.0.0/21 maxlen: 21
                          46.213.8.0/21 maxlen: 21
                          46.213.16.0/20 maxlen: 20
                          46.213.16.0/21 maxlen: 21
                          46.213.24.0/21 maxlen: 21
                          46.213.32.0/20 maxlen: 20
                          46.213.32.0/21 maxlen: 21
                          46.213.40.0/21 maxlen: 21
                          46.213.48.0/20 maxlen: 20
                          46.213.48.0/21 maxlen: 21
                          46.213.56.0/21 maxlen: 21
                          46.213.64.0/20 maxlen: 20
                          46.213.64.0/21 maxlen: 21
                          46.213.72.0/21 maxlen: 21
                          46.213.80.0/20 maxlen: 20
                          46.213.80.0/21 maxlen: 21
                          46.213.88.0/21 maxlen: 21
                          46.213.96.0/20 maxlen: 20
                          46.213.96.0/21 maxlen: 21
                          46.213.104.0/21 maxlen: 21
                          46.213.112.0/20 maxlen: 20
                          46.213.112.0/21 maxlen: 21
                          46.213.120.0/21 maxlen: 21
                          46.213.128.0/21 maxlen: 21
                          46.213.136.0/21 maxlen: 21
                          46.213.144.0/20 maxlen: 20
                          46.213.144.0/21 maxlen: 21
                          46.213.152.0/21 maxlen: 21
                          46.213.160.0/20 maxlen: 20
                          46.213.160.0/21 maxlen: 21
                          46.213.168.0/21 maxlen: 21
                          46.213.176.0/20 maxlen: 20
                          46.213.176.0/21 maxlen: 21
                          46.213.184.0/21 maxlen: 21
                          46.213.192.0/20 maxlen: 20
                          46.213.192.0/21 maxlen: 21
                          46.213.200.0/21 maxlen: 21
                          46.213.208.0/20 maxlen: 20
                          46.213.208.0/21 maxlen: 21
                          46.213.216.0/21 maxlen: 21
                          46.213.224.0/20 maxlen: 20
                          46.213.224.0/21 maxlen: 21
                          46.213.232.0/21 maxlen: 21
                          46.213.240.0/20 maxlen: 20
                          46.213.240.0/21 maxlen: 21
                          46.213.248.0/21 maxlen: 21
                          94.252.128.0/22 maxlen: 22
                          94.252.132.0/22 maxlen: 22
                          94.252.136.0/21 maxlen: 21
                          94.252.144.0/20 maxlen: 20
                          94.252.144.0/21 maxlen: 21
                          94.252.152.0/21 maxlen: 21
                          94.252.160.0/20 maxlen: 20
                          94.252.176.0/22 maxlen: 22
                          94.252.180.0/24 maxlen: 24
                          94.252.181.0/24 maxlen: 24
                          94.252.182.0/24 maxlen: 24
                          94.252.183.0/24 maxlen: 24
                          94.252.184.0/24 maxlen: 24
                          94.252.185.0/24 maxlen: 24
                          94.252.186.0/24 maxlen: 24
                          94.252.187.0/24 maxlen: 24
                          94.252.188.0/24 maxlen: 24
                          94.252.189.0/24 maxlen: 24
                          94.252.190.0/24 maxlen: 24
                          94.252.191.0/24 maxlen: 24
                          94.252.192.0/20 maxlen: 20
                          94.252.192.0/21 maxlen: 21
                          94.252.200.0/21 maxlen: 21
                          94.252.208.0/20 maxlen: 20
                          94.252.208.0/21 maxlen: 21
                          94.252.216.0/21 maxlen: 21
                          94.252.224.0/20 maxlen: 20
                          94.252.240.0/21 maxlen: 21
                          94.252.248.0/22 maxlen: 22
                          94.252.252.0/22 maxlen: 22
                          178.52.0.0/20 maxlen: 20
                          178.52.0.0/21 maxlen: 21
                          178.52.8.0/21 maxlen: 21
                          178.52.16.0/20 maxlen: 20
                          178.52.16.0/21 maxlen: 21
                          178.52.24.0/21 maxlen: 21
                          178.52.32.0/20 maxlen: 20
                          178.52.32.0/21 maxlen: 21
                          178.52.40.0/21 maxlen: 21
                          178.52.48.0/20 maxlen: 20
                          178.52.48.0/21 maxlen: 21
                          178.52.56.0/21 maxlen: 21
                          178.52.64.0/20 maxlen: 20
                          178.52.64.0/21 maxlen: 21
                          178.52.72.0/21 maxlen: 21
                          178.52.80.0/20 maxlen: 20
                          178.52.80.0/21 maxlen: 21
                          178.52.88.0/21 maxlen: 21
                          178.52.96.0/20 maxlen: 20
                          178.52.96.0/21 maxlen: 21
                          178.52.104.0/21 maxlen: 21
                          178.52.112.0/20 maxlen: 20
                          178.52.112.0/21 maxlen: 21
                          178.52.120.0/21 maxlen: 21
                          178.52.128.0/20 maxlen: 20
                          178.52.128.0/21 maxlen: 21
                          178.52.136.0/21 maxlen: 21
                          178.52.144.0/20 maxlen: 20
                          178.52.144.0/21 maxlen: 21
                          178.52.152.0/21 maxlen: 21
                          178.52.160.0/20 maxlen: 20
                          178.52.160.0/21 maxlen: 21
                          178.52.168.0/21 maxlen: 21
                          178.52.176.0/20 maxlen: 20
                          178.52.176.0/21 maxlen: 21
                          178.52.184.0/21 maxlen: 21
                          178.52.192.0/20 maxlen: 20
                          178.52.192.0/21 maxlen: 21
                          178.52.200.0/21 maxlen: 21
                          178.52.208.0/20 maxlen: 20
                          178.52.208.0/21 maxlen: 21
                          178.52.216.0/21 maxlen: 21
                          178.52.224.0/20 maxlen: 20
                          178.52.224.0/21 maxlen: 21
                          178.52.232.0/21 maxlen: 21
                          178.52.240.0/20 maxlen: 20
                          178.52.240.0/21 maxlen: 21
                          178.52.248.0/21 maxlen: 21
                          185.136.144.0/22 maxlen: 22
                          188.139.128.0/20 maxlen: 20
                          188.139.128.0/21 maxlen: 21
                          188.139.136.0/21 maxlen: 21
                          188.139.144.0/20 maxlen: 20
                          188.139.144.0/21 maxlen: 21
                          188.139.152.0/21 maxlen: 21
                          188.139.160.0/20 maxlen: 20
                          188.139.160.0/21 maxlen: 21
                          188.139.168.0/21 maxlen: 21
                          188.139.176.0/20 maxlen: 20
                          188.139.176.0/21 maxlen: 21
                          188.139.184.0/21 maxlen: 21
                          188.139.192.0/20 maxlen: 20
                          188.139.192.0/21 maxlen: 21
                          188.139.200.0/21 maxlen: 21
                          188.139.208.0/20 maxlen: 20
                          188.139.208.0/21 maxlen: 21
                          188.139.216.0/21 maxlen: 21
                          188.139.224.0/20 maxlen: 20
                          188.139.224.0/21 maxlen: 21
                          188.139.232.0/21 maxlen: 21
                          188.139.240.0/20 maxlen: 20
                          188.139.240.0/21 maxlen: 21
                          188.139.248.0/21 maxlen: 21
                          2a00:b800::/32 maxlen: 32
                          2a00:b800:3000::/55 maxlen: 55
                          2a00:b800:3000:200::/55 maxlen: 55
                          2a00:b800:3000:400::/55 maxlen: 55
                          2a00:b800:3000:600::/55 maxlen: 55
                          2a00:b800:3200::/55 maxlen: 55
                          2a00:b800:3200:200::/55 maxlen: 55
                          2a00:b800:3200:400::/55 maxlen: 55
                          2a00:b800:3200:600::/55 maxlen: 55
                          2a00:b800:3400::/55 maxlen: 55
                          2a00:b800:3400:200::/55 maxlen: 55
                          2a00:b800:3400:400::/55 maxlen: 55
                          2a00:b800:3400:600::/55 maxlen: 55
                          2a00:b800:3600::/55 maxlen: 55
                          2a00:b800:3600:200::/55 maxlen: 55
                          2a00:b800:3600:400::/55 maxlen: 55
                          2a00:b800:3600:600::/55 maxlen: 55
                          2a00:b800:3a00::/55 maxlen: 55
                          2a00:b800:3a00:200::/55 maxlen: 55
                          2a00:b800:3a00:400::/55 maxlen: 55
                          2a00:b800:3a00:600::/55 maxlen: 55
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:34:7d:a0:3f:0a:c9:a4:aa:3b:ef:39:c0:64:af:73:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Jun  3 06:32:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5f84b5d4031379367c09f2a52c86175d8ad0ab86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:99:25:72:39:6f:a8:55:2b:48:6e:67:75:
                    7e:18:a6:57:60:af:75:59:ae:18:23:6b:1f:2d:bf:
                    0a:07:72:44:73:2c:d8:26:8f:a8:4e:50:54:28:07:
                    de:15:7e:aa:37:a1:e2:12:1c:46:7e:7e:65:88:33:
                    f8:79:e9:ad:e2:00:60:30:67:97:19:35:07:b0:ba:
                    76:cc:f8:33:4f:ab:3e:47:ea:81:60:c9:e1:aa:f1:
                    d9:b9:9f:b5:2f:20:9e:d1:dd:f3:b9:4c:33:58:a3:
                    e0:f3:9f:8e:b5:bb:67:b2:11:bc:91:a7:b2:41:9c:
                    00:b8:69:21:5b:a9:22:bd:7b:a5:7d:5f:f5:ce:c6:
                    33:36:b2:e2:f6:fc:72:ea:0c:e9:3a:e2:2a:70:a2:
                    e8:c6:65:22:b7:73:34:bb:cc:23:a3:02:4f:66:f2:
                    91:ad:2c:f7:70:d2:0a:76:1f:78:c6:ad:50:41:e8:
                    30:b5:d2:da:9c:ef:14:af:a4:e3:0c:c6:51:71:ec:
                    eb:92:72:7a:b0:a3:7e:8a:26:c8:0b:47:5c:35:21:
                    59:f8:47:e9:1c:d5:b9:78:84:1a:91:cc:6c:58:10:
                    7f:f7:20:ae:11:a1:35:f6:f4:79:3e:44:24:c0:41:
                    8f:66:4e:c7:7d:9a:b6:6a:0b:58:09:d4:93:ab:91:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:B5:D4:03:13:79:36:7C:09:F2:A5:2C:86:17:5D:8A:D0:AB:86
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/X4S11AMTeTZ8CfKlLIYXXYrQq4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.57.128.0/17
                  46.213.0.0/16
                  94.252.128.0/17
                  178.52.0.0/16
                  185.136.144.0/22
                  188.139.128.0/17
                IPv6:
                  2a00:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:01:90:0d:d2:52:84:cf:2f:ef:21:38:ac:ad:78:a6:f8:
         3c:5f:68:1a:57:97:42:00:2a:5e:6e:58:20:13:46:f3:57:38:
         17:04:77:f8:f3:8a:6f:f4:6d:39:aa:eb:77:33:71:c7:e4:52:
         36:52:9e:8c:57:22:05:40:1f:fa:53:6f:d0:9d:ad:ee:68:31:
         7a:34:40:0e:1e:87:02:52:48:70:ba:60:ab:8f:09:54:fd:54:
         f3:2f:95:9b:2c:28:b5:14:c9:a7:23:39:1b:6f:63:d6:9d:de:
         8f:c5:ba:81:4a:df:cc:f9:cd:3d:9f:96:f3:85:f4:7a:81:f4:
         c7:84:89:c5:48:2e:e7:0a:7a:eb:9e:4c:01:49:59:bc:4b:34:
         8b:63:92:bc:06:88:22:09:8c:7d:12:b7:c5:ca:24:2a:87:f7:
         e9:7f:fb:3e:c4:43:a2:0f:19:9e:fe:28:7d:2c:70:c5:3d:df:
         98:a2:7b:de:ee:d9:2a:9f:31:24:1f:4a:ad:05:36:1e:d6:81:
         b6:ec:1f:a4:14:5b:32:92:f4:2c:87:5d:26:aa:83:28:56:c7:
         75:6c:01:41:c9:f0:28:b7:72:3c:6d:69:aa:d4:37:3e:57:3f:
         b6:13:31:91:18:4c:28:88:10:6f:02:0d:18:07:7f:6a:c1:c3:
         ae:ed:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:18:53 2025 by rpki-client