Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/wttP4uVW0eWlEbPZAczcn6S4_K8.roa
File:                     wttP4uVW0eWlEbPZAczcn6S4_K8.roa (raw, json)
Hash identifier:          PD/yHR4Q3b0OU5JhzTw+vLIGEIPMVYEKUIx1MxpiGPY=
Subject key identifier:   C2:DB:4F:E2:E5:56:D1:E5:A5:11:B3:D9:01:CC:DC:9F:A4:B8:FC:AF
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       018D63EB38B9DFD95F8CF72A913A7746A363
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/wttP4uVW0eWlEbPZAczcn6S4_K8.roa
Signing time:             Thu 01 Feb 2024 09:06:16 +0000
ROA not before:           Thu 01 Feb 2024 09:06:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29314
IP address blocks:        31.11.128.0/17 maxlen: 17
                          31.11.128.0/24 maxlen: 24
                          31.11.129.0/24 maxlen: 24
                          31.11.130.0/24 maxlen: 24
                          31.11.131.0/24 maxlen: 24
                          31.11.132.0/22 maxlen: 22
                          31.11.172.0/24 maxlen: 24
                          31.11.202.0/24 maxlen: 24
                          31.11.208.0/22 maxlen: 22
                          31.11.228.0/24 maxlen: 24
                          31.22.96.0/21 maxlen: 21
                          31.22.100.0/23 maxlen: 23
                          31.135.168.0/21 maxlen: 21
                          31.135.175.0/24 maxlen: 24
                          37.8.192.0/18 maxlen: 18
                          37.8.208.0/24 maxlen: 24
                          37.8.214.0/24 maxlen: 24
                          37.8.230.0/24 maxlen: 24
                          37.8.231.0/24 maxlen: 24
                          37.77.152.0/21 maxlen: 21
                          62.122.112.0/21 maxlen: 21
                          77.222.224.0/21 maxlen: 21
                          77.222.232.0/21 maxlen: 21
                          77.222.240.0/20 maxlen: 20
                          77.222.248.0/22 maxlen: 22
                          77.222.252.0/22 maxlen: 22
                          78.31.152.0/21 maxlen: 21
                          78.31.209.0/24 maxlen: 24
                          78.88.0.0/17 maxlen: 17
                          78.88.28.0/22 maxlen: 22
                          78.88.28.0/24 maxlen: 24
                          78.88.29.0/24 maxlen: 24
                          78.88.30.0/24 maxlen: 24
                          78.88.31.0/24 maxlen: 24
                          78.88.43.0/24 maxlen: 24
                          78.88.123.0/24 maxlen: 24
                          78.88.128.0/17 maxlen: 17
                          78.88.188.0/22 maxlen: 22
                          78.88.216.0/22 maxlen: 22
                          82.139.0.0/18 maxlen: 18
                          83.143.40.0/21 maxlen: 21
                          83.143.136.0/21 maxlen: 21
                          83.243.104.0/21 maxlen: 21
                          88.156.0.0/18 maxlen: 18
                          88.156.64.0/18 maxlen: 18
                          88.156.64.0/24 maxlen: 24
                          88.156.78.0/24 maxlen: 24
                          88.156.80.176/28 maxlen: 28
                          88.156.128.0/18 maxlen: 18
                          88.156.128.0/21 maxlen: 21
                          88.156.128.0/23 maxlen: 23
                          88.156.130.0/23 maxlen: 23
                          88.156.132.0/23 maxlen: 23
                          88.156.134.0/23 maxlen: 23
                          88.156.136.0/21 maxlen: 21
                          88.156.164.0/22 maxlen: 22
                          88.156.192.0/18 maxlen: 18
                          88.156.222.0/24 maxlen: 24
                          88.156.226.0/23 maxlen: 23
                          88.156.255.0/24 maxlen: 24
                          89.151.0.0/18 maxlen: 18
                          89.151.40.0/21 maxlen: 21
                          91.192.76.0/22 maxlen: 22
                          91.192.76.0/24 maxlen: 24
                          91.192.78.0/24 maxlen: 24
                          91.230.159.0/24 maxlen: 24
                          91.230.162.0/23 maxlen: 23
                          91.230.164.0/22 maxlen: 22
                          91.231.116.0/23 maxlen: 23
                          91.238.232.0/22 maxlen: 22
                          93.105.0.0/17 maxlen: 17
                          93.105.40.0/24 maxlen: 24
                          93.105.42.0/24 maxlen: 24
                          93.105.128.0/17 maxlen: 17
                          93.105.142.0/24 maxlen: 24
                          93.105.144.0/22 maxlen: 22
                          93.105.168.0/21 maxlen: 21
                          93.105.176.0/23 maxlen: 23
                          93.105.178.0/23 maxlen: 23
                          93.105.180.0/24 maxlen: 24
                          93.105.181.0/24 maxlen: 24
                          93.105.182.0/24 maxlen: 24
                          93.105.183.0/24 maxlen: 24
                          93.105.224.0/21 maxlen: 21
                          93.105.236.0/24 maxlen: 24
                          93.105.237.0/24 maxlen: 24
                          94.231.48.0/20 maxlen: 20
                          95.160.0.0/17 maxlen: 24
                          95.160.16.0/22 maxlen: 22
                          95.160.28.0/22 maxlen: 22
                          95.160.56.0/22 maxlen: 22
                          95.160.76.0/22 maxlen: 22
                          95.160.126.0/23 maxlen: 23
                          95.160.128.0/17 maxlen: 17
                          95.160.152.0/24 maxlen: 24
                          95.160.153.0/24 maxlen: 24
                          95.160.154.0/24 maxlen: 24
                          95.160.155.0/24 maxlen: 24
                          95.160.156.0/24 maxlen: 24
                          95.160.157.0/24 maxlen: 24
                          95.160.158.0/24 maxlen: 24
                          95.160.159.0/24 maxlen: 24
                          95.160.166.0/24 maxlen: 24
                          95.160.170.0/24 maxlen: 24
                          95.160.228.0/22 maxlen: 22
                          95.160.233.0/24 maxlen: 24
                          95.160.236.0/22 maxlen: 22
                          109.107.0.0/19 maxlen: 19
                          109.107.0.0/21 maxlen: 21
                          109.107.9.0/24 maxlen: 24
                          109.197.56.0/21 maxlen: 21
                          109.197.64.0/21 maxlen: 21
                          109.241.0.0/18 maxlen: 18
                          109.241.64.0/18 maxlen: 18
                          109.241.128.0/18 maxlen: 18
                          109.241.192.0/18 maxlen: 18
                          178.235.0.0/17 maxlen: 17
                          178.235.40.0/24 maxlen: 24
                          178.235.41.0/24 maxlen: 24
                          178.235.42.0/24 maxlen: 24
                          178.235.43.0/24 maxlen: 24
                          178.235.98.0/24 maxlen: 24
                          178.235.110.0/24 maxlen: 24
                          178.235.128.0/24 maxlen: 24
                          178.235.129.0/24 maxlen: 24
                          178.235.130.0/24 maxlen: 24
                          178.235.131.0/24 maxlen: 24
                          178.235.132.0/23 maxlen: 23
                          178.235.134.0/24 maxlen: 24
                          178.235.135.0/24 maxlen: 24
                          178.235.136.0/23 maxlen: 23
                          178.235.138.0/23 maxlen: 23
                          178.235.140.0/24 maxlen: 24
                          178.235.141.0/24 maxlen: 24
                          178.235.142.0/23 maxlen: 23
                          178.235.144.0/23 maxlen: 23
                          178.235.146.0/24 maxlen: 24
                          178.235.147.0/24 maxlen: 24
                          178.235.148.0/22 maxlen: 22
                          178.235.148.0/23 maxlen: 23
                          178.235.150.0/23 maxlen: 23
                          178.235.150.0/24 maxlen: 24
                          178.235.152.0/21 maxlen: 21
                          178.235.160.0/19 maxlen: 19
                          178.235.192.0/18 maxlen: 18
                          185.51.180.0/22 maxlen: 22
                          192.166.120.0/23 maxlen: 23
                          193.201.18.0/23 maxlen: 23
                          194.54.188.0/22 maxlen: 22
                          195.26.72.0/22 maxlen: 22
                          195.28.170.0/23 maxlen: 23
                          195.191.162.0/23 maxlen: 23
                          195.225.92.0/22 maxlen: 22
                          195.242.252.0/22 maxlen: 22
                          2a00:9f00::/32 maxlen: 32
                          2a00:9f00::/36 maxlen: 36
                          2a00:9f00::/48 maxlen: 48
                          2a00:9f00:1::/48 maxlen: 48
                          2a00:9f00:a::/48 maxlen: 48
                          2a00:9f00:c::/48 maxlen: 48
                          2a00:9f00:10::/48 maxlen: 48
                          2a00:9f00:1000::/36 maxlen: 36
                          2a00:9f00:2000::/36 maxlen: 36
                          2a00:9f00:2007::/48 maxlen: 48
                          2a00:9f00:3000::/36 maxlen: 36
                          2a00:9f00:4000::/36 maxlen: 36
                          2a00:9f00:5000::/36 maxlen: 36
                          2a00:9f00:6000::/36 maxlen: 36
                          2a00:9f00:7000::/36 maxlen: 36
                          2a00:9f00:8000::/36 maxlen: 36
                          2a00:9f00:9000::/36 maxlen: 36
                          2a00:9f00:a000::/36 maxlen: 36
                          2a00:9f00:b000::/36 maxlen: 36
                          2a00:9f00:c000::/36 maxlen: 36
                          2a00:9f00:d000::/36 maxlen: 36
                          2a00:9f00:e000::/36 maxlen: 36
                          2a00:9f00:f000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Fri 01 Mar 2024 08:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:63:eb:38:b9:df:d9:5f:8c:f7:2a:91:3a:77:46:a3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Feb  1 09:06:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2db4fe2e556d1e5a511b3d901ccdc9fa4b8fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:87:12:bd:e6:1b:88:3b:3c:5c:90:99:49:
                    07:7e:b8:10:99:51:4e:47:ad:c8:01:f0:18:60:16:
                    1c:eb:5f:8f:65:63:63:62:bd:c2:65:1b:b0:c6:f1:
                    77:d8:7c:2a:fd:ea:d0:01:bf:83:05:34:3f:c0:b2:
                    89:e2:39:33:b8:b5:7f:65:98:85:78:e2:2f:ab:e4:
                    13:e7:92:2c:5e:fe:25:af:17:72:6c:6a:3b:59:57:
                    36:a0:34:cf:ee:1d:65:f7:87:9e:f8:5a:e6:b0:0b:
                    23:de:06:be:fb:35:a7:d5:b8:eb:b5:8c:79:f7:a9:
                    64:ad:cd:25:dd:9c:1a:35:b5:76:86:33:ed:05:95:
                    dd:c2:6b:70:0c:9e:1c:89:6c:ae:06:cb:fe:f0:2f:
                    94:79:ac:e3:c6:7e:84:65:b0:6f:5b:00:2e:13:53:
                    42:74:46:f9:56:59:2e:2f:83:5e:dd:4e:5d:25:bb:
                    4e:1e:31:f3:28:8e:dc:29:c4:ba:3c:09:e7:92:1d:
                    58:ef:21:f6:ea:b5:5e:c7:f7:ef:56:a3:4d:03:53:
                    0b:fe:40:44:3d:03:f2:ad:37:25:13:1f:1b:bb:4c:
                    cb:78:10:8c:e7:d6:57:f5:9f:7e:f1:9d:d7:25:40:
                    1f:48:e8:4a:83:27:78:b0:a8:fb:21:f3:27:a9:64:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DB:4F:E2:E5:56:D1:E5:A5:11:B3:D9:01:CC:DC:9F:A4:B8:FC:AF
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/wttP4uVW0eWlEbPZAczcn6S4_K8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.128.0/17
                  31.22.96.0/21
                  31.135.168.0/21
                  37.8.192.0/18
                  37.77.152.0/21
                  62.122.112.0/21
                  77.222.224.0/19
                  78.31.152.0/21
                  78.31.209.0/24
                  78.88.0.0/16
                  82.139.0.0/18
                  83.143.40.0/21
                  83.143.136.0/21
                  83.243.104.0/21
                  88.156.0.0/16
                  89.151.0.0/18
                  91.192.76.0/22
                  91.230.159.0/24
                  91.230.162.0-91.230.167.255
                  91.231.116.0/23
                  91.238.232.0/22
                  93.105.0.0/16
                  94.231.48.0/20
                  95.160.0.0/16
                  109.107.0.0/19
                  109.197.56.0-109.197.71.255
                  109.241.0.0/16
                  178.235.0.0/16
                  185.51.180.0/22
                  192.166.120.0/23
                  193.201.18.0/23
                  194.54.188.0/22
                  195.26.72.0/22
                  195.28.170.0/23
                  195.191.162.0/23
                  195.225.92.0/22
                  195.242.252.0/22
                IPv6:
                  2a00:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:38:9b:ce:a8:7b:c1:c6:f4:0b:5d:95:1a:a4:e4:cb:ea:31:
         e2:53:78:af:37:80:58:fe:7e:9f:0e:13:b4:a0:8e:cf:4d:34:
         53:b6:73:9c:46:48:8b:43:87:3f:93:3c:75:12:fb:50:7c:59:
         5d:92:a3:ea:4f:0a:85:59:e4:8d:cf:a3:dc:4f:6a:ee:f8:49:
         58:de:68:39:fd:8e:1c:c6:33:3e:4d:0b:f1:cf:61:a1:4b:10:
         cb:ae:c4:75:ff:2f:21:97:c9:77:7d:28:e0:ee:1e:0a:13:36:
         b3:b8:a4:f5:89:7c:93:d5:53:02:f2:4f:b6:68:82:2a:fb:ff:
         ea:91:fa:53:87:c9:52:93:7a:63:b9:c4:ed:e8:01:c4:4c:ce:
         15:48:42:68:98:2b:b4:3e:82:5f:5a:8b:49:f0:65:f7:03:c0:
         5d:c8:7f:fb:69:20:1f:cc:25:86:96:d3:69:2a:21:a8:b0:a4:
         10:b4:ce:7a:9b:96:5a:00:d8:b4:fe:a9:c5:13:e1:51:89:fc:
         86:ac:00:83:92:5d:8b:fc:19:83:15:00:dd:53:f1:17:7a:e2:
         ab:b6:76:d5:c9:05:5c:ae:de:5f:3d:f0:9b:3a:23:e4:5e:0d:
         e9:51:a5:35:65:39:2a:83:70:28:1e:28:41:43:0d:6f:87:6b:
         08:7b:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:21 2025 by rpki-client