Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/_VEi7LfSYKdtH4FLNG6TlhXkSq4.roa
File:                     _VEi7LfSYKdtH4FLNG6TlhXkSq4.roa (raw, json)
Hash identifier:          sM0CK8lbr9VI8LNdOKRx0NYna8GQK+KCj3t6WsnRj6g=
Subject key identifier:   FD:51:22:EC:B7:D2:60:A7:6D:1F:81:4B:34:6E:93:96:15:E4:4A:AE
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       0197166607CE2B1BF87A5070898B38F05A9C
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/_VEi7LfSYKdtH4FLNG6TlhXkSq4.roa
Signing time:             Wed 28 May 2025 10:17:54 +0000
ROA not before:           Wed 28 May 2025 10:17:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29256
IP address blocks:        46.57.128.0/20 maxlen: 20
                          46.57.128.0/21 maxlen: 21
                          46.57.136.0/21 maxlen: 21
                          46.57.144.0/20 maxlen: 20
                          46.57.144.0/21 maxlen: 21
                          46.57.152.0/21 maxlen: 21
                          46.57.160.0/20 maxlen: 20
                          46.57.160.0/21 maxlen: 21
                          46.57.168.0/21 maxlen: 21
                          46.57.176.0/20 maxlen: 20
                          46.57.176.0/21 maxlen: 21
                          46.57.184.0/21 maxlen: 21
                          46.57.192.0/20 maxlen: 20
                          46.57.192.0/21 maxlen: 21
                          46.57.200.0/21 maxlen: 21
                          46.57.208.0/20 maxlen: 20
                          46.57.208.0/21 maxlen: 21
                          46.57.216.0/21 maxlen: 21
                          46.57.224.0/20 maxlen: 20
                          46.57.224.0/21 maxlen: 21
                          46.57.232.0/21 maxlen: 21
                          46.57.240.0/20 maxlen: 20
                          46.57.240.0/21 maxlen: 21
                          46.57.248.0/21 maxlen: 21
                          46.213.0.0/20 maxlen: 20
                          46.213.0.0/21 maxlen: 21
                          46.213.8.0/21 maxlen: 21
                          46.213.16.0/20 maxlen: 20
                          46.213.16.0/21 maxlen: 21
                          46.213.24.0/21 maxlen: 21
                          46.213.32.0/20 maxlen: 20
                          46.213.32.0/21 maxlen: 21
                          46.213.40.0/21 maxlen: 21
                          46.213.48.0/20 maxlen: 20
                          46.213.48.0/21 maxlen: 21
                          46.213.56.0/21 maxlen: 21
                          46.213.64.0/20 maxlen: 20
                          46.213.64.0/21 maxlen: 21
                          46.213.72.0/21 maxlen: 21
                          46.213.80.0/20 maxlen: 20
                          46.213.80.0/21 maxlen: 21
                          46.213.88.0/21 maxlen: 21
                          46.213.96.0/20 maxlen: 20
                          46.213.96.0/21 maxlen: 21
                          46.213.104.0/21 maxlen: 21
                          46.213.112.0/20 maxlen: 20
                          46.213.112.0/21 maxlen: 21
                          46.213.120.0/21 maxlen: 21
                          46.213.136.0/21 maxlen: 21
                          46.213.144.0/20 maxlen: 20
                          46.213.144.0/21 maxlen: 21
                          46.213.152.0/21 maxlen: 21
                          46.213.160.0/20 maxlen: 20
                          46.213.160.0/21 maxlen: 21
                          46.213.168.0/21 maxlen: 21
                          46.213.176.0/20 maxlen: 20
                          46.213.176.0/21 maxlen: 21
                          46.213.184.0/21 maxlen: 21
                          46.213.192.0/20 maxlen: 20
                          46.213.192.0/21 maxlen: 21
                          46.213.200.0/21 maxlen: 21
                          46.213.208.0/20 maxlen: 20
                          46.213.208.0/21 maxlen: 21
                          46.213.216.0/21 maxlen: 21
                          46.213.224.0/20 maxlen: 20
                          46.213.224.0/21 maxlen: 21
                          46.213.232.0/21 maxlen: 21
                          46.213.240.0/20 maxlen: 20
                          46.213.240.0/21 maxlen: 21
                          46.213.248.0/21 maxlen: 21
                          94.252.128.0/22 maxlen: 22
                          94.252.132.0/22 maxlen: 22
                          94.252.136.0/21 maxlen: 21
                          94.252.144.0/20 maxlen: 20
                          94.252.144.0/21 maxlen: 21
                          94.252.152.0/21 maxlen: 21
                          94.252.160.0/20 maxlen: 20
                          94.252.176.0/22 maxlen: 22
                          94.252.180.0/24 maxlen: 24
                          94.252.181.0/24 maxlen: 24
                          94.252.182.0/24 maxlen: 24
                          94.252.183.0/24 maxlen: 24
                          94.252.184.0/24 maxlen: 24
                          94.252.185.0/24 maxlen: 24
                          94.252.186.0/24 maxlen: 24
                          94.252.187.0/24 maxlen: 24
                          94.252.188.0/24 maxlen: 24
                          94.252.189.0/24 maxlen: 24
                          94.252.190.0/24 maxlen: 24
                          94.252.191.0/24 maxlen: 24
                          94.252.192.0/20 maxlen: 20
                          94.252.192.0/21 maxlen: 21
                          94.252.200.0/21 maxlen: 21
                          94.252.208.0/20 maxlen: 20
                          94.252.208.0/21 maxlen: 21
                          94.252.216.0/21 maxlen: 21
                          94.252.224.0/20 maxlen: 20
                          94.252.240.0/21 maxlen: 21
                          94.252.248.0/22 maxlen: 22
                          94.252.252.0/22 maxlen: 22
                          178.52.0.0/20 maxlen: 20
                          178.52.0.0/21 maxlen: 21
                          178.52.8.0/21 maxlen: 21
                          178.52.16.0/20 maxlen: 20
                          178.52.16.0/21 maxlen: 21
                          178.52.24.0/21 maxlen: 21
                          178.52.32.0/20 maxlen: 20
                          178.52.32.0/21 maxlen: 21
                          178.52.40.0/21 maxlen: 21
                          178.52.48.0/20 maxlen: 20
                          178.52.48.0/21 maxlen: 21
                          178.52.56.0/21 maxlen: 21
                          178.52.64.0/20 maxlen: 20
                          178.52.64.0/21 maxlen: 21
                          178.52.72.0/21 maxlen: 21
                          178.52.80.0/20 maxlen: 20
                          178.52.80.0/21 maxlen: 21
                          178.52.88.0/21 maxlen: 21
                          178.52.96.0/20 maxlen: 20
                          178.52.96.0/21 maxlen: 21
                          178.52.104.0/21 maxlen: 21
                          178.52.112.0/20 maxlen: 20
                          178.52.112.0/21 maxlen: 21
                          178.52.120.0/21 maxlen: 21
                          178.52.128.0/20 maxlen: 20
                          178.52.128.0/21 maxlen: 21
                          178.52.136.0/21 maxlen: 21
                          178.52.144.0/20 maxlen: 20
                          178.52.144.0/21 maxlen: 21
                          178.52.152.0/21 maxlen: 21
                          178.52.160.0/20 maxlen: 20
                          178.52.160.0/21 maxlen: 21
                          178.52.168.0/21 maxlen: 21
                          178.52.176.0/20 maxlen: 20
                          178.52.176.0/21 maxlen: 21
                          178.52.184.0/21 maxlen: 21
                          178.52.192.0/20 maxlen: 20
                          178.52.192.0/21 maxlen: 21
                          178.52.200.0/21 maxlen: 21
                          178.52.208.0/20 maxlen: 20
                          178.52.208.0/21 maxlen: 21
                          178.52.216.0/21 maxlen: 21
                          178.52.224.0/20 maxlen: 20
                          178.52.224.0/21 maxlen: 21
                          178.52.232.0/21 maxlen: 21
                          178.52.240.0/20 maxlen: 20
                          178.52.240.0/21 maxlen: 21
                          178.52.248.0/21 maxlen: 21
                          185.136.144.0/22 maxlen: 22
                          188.139.128.0/20 maxlen: 20
                          188.139.128.0/21 maxlen: 21
                          188.139.136.0/21 maxlen: 21
                          188.139.144.0/20 maxlen: 20
                          188.139.144.0/21 maxlen: 21
                          188.139.152.0/21 maxlen: 21
                          188.139.160.0/20 maxlen: 20
                          188.139.160.0/21 maxlen: 21
                          188.139.168.0/21 maxlen: 21
                          188.139.176.0/20 maxlen: 20
                          188.139.176.0/21 maxlen: 21
                          188.139.184.0/21 maxlen: 21
                          188.139.192.0/20 maxlen: 20
                          188.139.192.0/21 maxlen: 21
                          188.139.200.0/21 maxlen: 21
                          188.139.208.0/20 maxlen: 20
                          188.139.208.0/21 maxlen: 21
                          188.139.216.0/21 maxlen: 21
                          188.139.224.0/20 maxlen: 20
                          188.139.224.0/21 maxlen: 21
                          188.139.232.0/21 maxlen: 21
                          188.139.240.0/20 maxlen: 20
                          188.139.240.0/21 maxlen: 21
                          188.139.248.0/21 maxlen: 21
                          2a00:b800::/32 maxlen: 32
                          2a00:b800:3000::/55 maxlen: 55
                          2a00:b800:3000:200::/55 maxlen: 55
                          2a00:b800:3000:400::/55 maxlen: 55
                          2a00:b800:3000:600::/55 maxlen: 55
                          2a00:b800:3200::/55 maxlen: 55
                          2a00:b800:3200:200::/55 maxlen: 55
                          2a00:b800:3200:400::/55 maxlen: 55
                          2a00:b800:3200:600::/55 maxlen: 55
                          2a00:b800:3400::/55 maxlen: 55
                          2a00:b800:3400:200::/55 maxlen: 55
                          2a00:b800:3400:400::/55 maxlen: 55
                          2a00:b800:3400:600::/55 maxlen: 55
                          2a00:b800:3600::/55 maxlen: 55
                          2a00:b800:3600:200::/55 maxlen: 55
                          2a00:b800:3600:400::/55 maxlen: 55
                          2a00:b800:3600:600::/55 maxlen: 55
                          2a00:b800:3a00::/55 maxlen: 55
                          2a00:b800:3a00:200::/55 maxlen: 55
                          2a00:b800:3a00:400::/55 maxlen: 55
                          2a00:b800:3a00:600::/55 maxlen: 55
Validation:               Failed, certificate revoked on Tue 03 Jun 2025 06:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:16:66:07:ce:2b:1b:f8:7a:50:70:89:8b:38:f0:5a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: May 28 10:17:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fd5122ecb7d260a76d1f814b346e939615e44aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:48:be:3e:64:7d:11:78:6c:fc:ad:94:4a:
                    14:b3:75:f0:32:7a:c3:16:13:c6:ec:9b:5d:db:de:
                    7f:b6:ae:1b:2e:44:75:fd:52:af:3c:d4:94:4c:22:
                    a0:fb:28:54:0e:f7:53:e6:36:6e:96:e3:8c:e4:55:
                    10:66:83:23:97:3f:80:05:a8:23:5d:da:38:d9:25:
                    17:88:29:0c:b4:1a:b7:d9:b7:af:60:7a:e1:67:57:
                    d5:38:d3:a6:5d:34:5a:b8:e1:14:ee:54:b6:9c:d1:
                    96:7b:f8:cc:8e:9d:8f:62:1a:66:88:10:21:24:52:
                    78:7e:ac:e4:ea:8e:95:a5:1a:17:64:e6:7e:a0:bc:
                    91:95:68:6f:65:73:2f:62:96:b9:d8:4f:90:6d:a0:
                    d2:90:6f:bb:3e:6b:92:e0:80:83:f5:fe:be:fc:ed:
                    fc:a9:02:34:bd:9c:d1:49:95:42:86:74:63:53:27:
                    b7:7f:f5:12:30:b2:7a:55:59:45:be:66:08:7d:1c:
                    d6:d1:da:7f:da:56:4d:cd:f5:24:51:f9:de:ad:10:
                    94:91:2d:e0:3f:7c:b3:e5:bb:c8:ca:33:eb:19:f3:
                    86:f7:b2:c7:b7:dd:8b:62:d8:f0:72:35:62:ed:ad:
                    4b:df:8b:15:0d:74:3e:07:66:f7:35:32:c5:53:25:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:51:22:EC:B7:D2:60:A7:6D:1F:81:4B:34:6E:93:96:15:E4:4A:AE
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/_VEi7LfSYKdtH4FLNG6TlhXkSq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.57.128.0/17
                  46.213.0.0/17
                  46.213.136.0-46.213.255.255
                  94.252.128.0/17
                  178.52.0.0/16
                  185.136.144.0/22
                  188.139.128.0/17
                IPv6:
                  2a00:b800::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:22:c1:2e:fb:79:ac:4e:31:dd:0d:c2:47:be:9a:0a:a7:99:
         1f:99:65:ca:ad:53:5f:36:27:c3:7e:67:87:0c:fc:b3:de:9b:
         60:9b:aa:8c:03:f0:6a:31:8c:90:1d:5d:9a:39:44:d9:16:cd:
         64:9f:6b:7e:46:12:84:6f:34:71:c2:f2:c6:3a:0c:d9:bc:0c:
         7c:d3:25:40:0a:4f:b9:f7:af:bc:a5:2c:33:cd:27:9f:63:48:
         7f:4b:15:60:5e:5b:17:3f:ea:18:0a:d8:f6:3a:44:56:4d:3d:
         17:82:4a:14:9c:12:b4:ea:a4:c0:94:04:d9:0e:50:66:fc:87:
         07:17:35:40:ab:26:a8:cd:58:04:5b:44:7a:81:27:3d:3e:5a:
         00:0b:62:ea:80:f1:4b:cd:56:a1:ad:62:60:cf:51:85:f6:97:
         d7:9f:6e:cd:06:7a:d2:13:e3:f8:ea:8c:84:6c:ed:b6:4e:94:
         ef:bc:0a:70:d8:96:24:3f:c3:d7:91:3b:f6:40:12:8d:f9:d2:
         3c:a6:ba:47:8a:de:45:42:dd:ed:e5:41:d0:31:60:d9:5b:7a:
         e4:14:eb:3b:4b:05:e2:4f:c7:47:68:d9:65:48:0f:76:f6:16:
         55:c9:c8:af:ff:10:56:e5:13:a5:5c:6c:90:bd:a5:01:57:c3:
         2e:b1:ce:b0
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZcWZgfOKxv4elBwiYs48FqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjUwNTI4MTAxNzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDUxMjJlY2I3ZDI2MGE3NmQxZjgxNGIzNDZlOTM5NjE1ZTQ0YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8xIvj5kfRF4bPytlEoUs3XwMnrD
FhPG7Jtd295/tq4bLkR1/VKvPNSUTCKg+yhUDvdT5jZuluOM5FUQZoMjlz+ABagj
Xdo42SUXiCkMtBq32bevYHrhZ1fVONOmXTRauOEU7lS2nNGWe/jMjp2PYhpmiBAh
JFJ4fqzk6o6VpRoXZOZ+oLyRlWhvZXMvYpa52E+QbaDSkG+7PmuS4ICD9f6+/O38
qQI0vZzRSZVChnRjUye3f/USMLJ6VVlFvmYIfRzW0dp/2lZNzfUkUfnerRCUkS3g
P3yz5bvIyjPrGfOG97LHt92LYtjwcjVi7a1L34sVDXQ+B2b3NTLFUyWVjwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFP1RIuy30mCnbR+BSzRuk5YV5EquMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvX1ZFaTdMZlNZS2R0SDRGTE5HNlRsaFhrU3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQHLjmAAwQH
LtUAMAsDBAMu1YgDAwEu1AMEB178gAMDALI0AwQCuYiQAwQHvIuAMA0EAgACMAcD
BQAqALgAMA0GCSqGSIb3DQEBCwUAA4IBAQCRIsEu+3msTjHdDcJHvpoKp5kfmWXK
rVNfNifDfmeHDPyz3ptgm6qMA/BqMYyQHV2aOUTZFs1kn2t+RhKEbzRxwvLGOgzZ
vAx80yVACk+596+8pSwzzSefY0h/SxVgXlsXP+oYCtj2OkRWTT0XgkoUnBK06qTA
lATZDlBm/IcHFzVAqyaozVgEW0R6gSc9PloAC2LqgPFLzVahrWJgz1GF9pfXn27N
BnrSE+P46oyEbO22TpTvvApw2JYkP8PXkTv2QBKN+dI8prpHit5FQt3t5UHQMWDZ
W3rkFOs7SwXiT8dHaNllSA929hZVyciv/xBW5ROlXGyQvaUBV8Musc6w
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:08:18 2025 by rpki-client