Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jkAxCJWqFB_Hz7rb1g70jF4Uvfk.roa
File:                     jkAxCJWqFB_Hz7rb1g70jF4Uvfk.roa (raw, json)
Hash identifier:          axB5yjbjAjuKx06rX+bs97hLK23e0ha4uU9aKW4ntRQ=
Subject key identifier:   8E:40:31:08:95:AA:14:1F:C7:CF:BA:DB:D6:0E:F4:8C:5E:14:BD:F9
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       0194F43431696868EC98CFB02CFF33C2F0C5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jkAxCJWqFB_Hz7rb1g70jF4Uvfk.roa
Signing time:             Tue 11 Feb 2025 08:50:48 +0000
ROA not before:           Tue 11 Feb 2025 08:50:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58272
IP address blocks:        37.18.0.0/24 maxlen: 24
                          37.18.13.0/24 maxlen: 24
                          37.18.23.0/24 maxlen: 24
                          37.18.25.0/24 maxlen: 24
                          37.18.60.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          37.18.78.0/24 maxlen: 24
                          37.18.82.0/24 maxlen: 24
                          37.18.103.0/24 maxlen: 24
                          37.18.106.0/24 maxlen: 24
                          37.18.125.0/24 maxlen: 24
                          37.18.126.0/24 maxlen: 24
                          37.230.130.0/24 maxlen: 24
                          37.230.132.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.135.0/24 maxlen: 24
                          37.230.140.0/24 maxlen: 24
                          37.230.145.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.177.0/24 maxlen: 24
                          37.230.178.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.187.0/24 maxlen: 24
                          37.230.200.0/24 maxlen: 24
                          37.230.208.0/24 maxlen: 24
                          37.230.226.0/24 maxlen: 24
                          37.230.227.0/24 maxlen: 24
                          37.230.229.0/24 maxlen: 24
                          37.230.230.0/24 maxlen: 24
                          37.230.231.0/24 maxlen: 24
                          37.230.238.0/24 maxlen: 24
                          37.230.254.0/24 maxlen: 24
                          37.230.255.0/24 maxlen: 24
                          46.243.137.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.140.0/24 maxlen: 24
                          46.243.148.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          46.243.150.0/24 maxlen: 24
                          46.243.163.0/24 maxlen: 24
                          46.243.167.0/24 maxlen: 24
                          46.243.173.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.215.0/24 maxlen: 24
                          46.243.220.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.224.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.239.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.246.0/23 maxlen: 23
                          46.243.246.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.134.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.136.0/24 maxlen: 24
                          141.101.138.0/23 maxlen: 23
                          141.101.143.0/24 maxlen: 24
                          141.101.144.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.146.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.157.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.163.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.169.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.172.0/24 maxlen: 24
                          141.101.173.0/24 maxlen: 24
                          141.101.174.0/24 maxlen: 24
                          141.101.175.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.189.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.198.0/24 maxlen: 24
                          141.101.199.0/24 maxlen: 24
                          141.101.209.0/24 maxlen: 24
                          141.101.216.0/24 maxlen: 24
                          141.101.230.0/24 maxlen: 24
                          141.101.233.0/24 maxlen: 24
                          141.101.235.0/24 maxlen: 24
                          141.101.237.0/24 maxlen: 24
                          141.101.238.0/24 maxlen: 24
                          141.101.242.0/24 maxlen: 24
                          141.101.245.0/24 maxlen: 24
                          141.101.248.0/24 maxlen: 24
                          141.101.252.0/24 maxlen: 24
                          141.101.253.0/24 maxlen: 24
                          141.101.254.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          178.170.136.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          178.170.138.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          178.170.141.0/24 maxlen: 24
                          178.170.142.0/24 maxlen: 24
                          178.170.144.0/24 maxlen: 24
                          178.170.145.0/24 maxlen: 24
                          178.170.146.0/24 maxlen: 24
                          178.170.172.0/24 maxlen: 24
                          178.170.187.0/24 maxlen: 24
                          178.170.188.0/24 maxlen: 24
                          178.170.247.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.82.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          188.72.87.0/24 maxlen: 24
                          188.72.89.0/24 maxlen: 24
                          188.72.95.0/24 maxlen: 24
                          188.72.97.0/24 maxlen: 24
                          188.72.98.0/24 maxlen: 24
                          188.72.101.0/24 maxlen: 24
                          188.72.102.0/24 maxlen: 24
                          188.72.114.0/24 maxlen: 24
                          188.72.115.0/24 maxlen: 24
                          188.72.116.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          188.72.124.0/24 maxlen: 24
                          188.72.125.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 09:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:f4:34:31:69:68:68:ec:98:cf:b0:2c:ff:33:c2:f0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Feb 11 08:50:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8e40310895aa141fc7cfbadbd60ef48c5e14bdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:c5:9b:6f:09:96:34:68:0e:ef:33:b9:7a:
                    32:6b:69:96:a4:ce:a3:3c:a9:04:16:34:d6:22:47:
                    b5:f3:30:ca:f1:9f:ec:64:bd:63:c9:74:36:64:a7:
                    62:f2:0c:a2:a5:a7:ff:17:ae:30:9c:a4:ac:55:b2:
                    c1:d8:84:4e:fc:77:bb:14:2d:05:33:94:45:e8:2c:
                    c8:f3:ce:c6:90:e8:08:50:68:78:ae:35:91:7f:1a:
                    9f:4d:6a:7d:d8:5b:6c:09:7d:d4:72:6c:d0:bd:85:
                    2b:06:18:1b:90:cb:34:13:9c:69:2c:04:ed:61:3a:
                    78:f0:a9:6a:34:9d:ab:ed:ae:a3:d4:b7:51:5f:9b:
                    78:20:2b:09:cd:c5:90:c3:05:d9:6d:da:42:24:51:
                    c1:3c:a7:3c:67:77:1e:16:ee:af:d6:68:72:9d:56:
                    6f:99:ea:04:96:c2:f5:94:29:e8:5c:bb:12:6c:9a:
                    76:7f:12:b0:07:e2:bc:ea:eb:e0:9e:ec:ce:c1:dd:
                    5c:b2:af:41:51:aa:86:78:c9:86:00:38:5a:53:5b:
                    c8:22:00:c0:eb:37:5d:7c:06:56:31:06:4b:0b:c8:
                    62:2b:6c:7f:35:f0:5b:9d:05:5e:18:99:92:c1:6e:
                    97:b3:31:3b:99:b3:99:19:cc:43:02:56:af:a1:1a:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:31:08:95:AA:14:1F:C7:CF:BA:DB:D6:0E:F4:8C:5E:14:BD:F9
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jkAxCJWqFB_Hz7rb1g70jF4Uvfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.13.0/24
                  37.18.23.0/24
                  37.18.25.0/24
                  37.18.60.0/24
                  37.18.63.0/24
                  37.18.78.0/24
                  37.18.82.0/24
                  37.18.103.0/24
                  37.18.106.0/24
                  37.18.125.0-37.18.126.255
                  37.230.130.0/24
                  37.230.132.0/24
                  37.230.134.0/23
                  37.230.140.0/24
                  37.230.145.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.176.0-37.230.178.255
                  37.230.182.0/23
                  37.230.187.0/24
                  37.230.200.0/24
                  37.230.208.0/24
                  37.230.226.0/23
                  37.230.229.0-37.230.231.255
                  37.230.238.0/24
                  37.230.254.0/23
                  46.243.137.0-46.243.140.255
                  46.243.148.0-46.243.150.255
                  46.243.163.0/24
                  46.243.167.0/24
                  46.243.173.0/24
                  46.243.204.0/24
                  46.243.214.0/23
                  46.243.220.0-46.243.225.255
                  46.243.236.0-46.243.243.255
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0-141.101.136.255
                  141.101.138.0/23
                  141.101.143.0-141.101.150.255
                  141.101.153.0-141.101.175.255
                  141.101.179.0/24
                  141.101.189.0/24
                  141.101.191.0/24
                  141.101.198.0/23
                  141.101.209.0/24
                  141.101.216.0/24
                  141.101.230.0/24
                  141.101.233.0/24
                  141.101.235.0/24
                  141.101.237.0-141.101.238.255
                  141.101.242.0/24
                  141.101.245.0/24
                  141.101.248.0/24
                  141.101.252.0/22
                  178.170.136.0-178.170.142.255
                  178.170.144.0-178.170.146.255
                  178.170.172.0/24
                  178.170.187.0-178.170.188.255
                  178.170.247.0/24
                  185.4.148.0/22
                  188.72.80.0/21
                  188.72.89.0/24
                  188.72.95.0/24
                  188.72.97.0-188.72.98.255
                  188.72.101.0-188.72.102.255
                  188.72.114.0-188.72.116.255
                  188.72.119.0/24
                  188.72.124.0/23
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:15:75:9f:b1:b5:62:8b:ef:e5:8c:7a:8b:70:fc:e2:da:
         61:96:c2:0b:e3:3e:2d:13:77:a9:27:74:ee:83:a5:9a:54:b9:
         49:43:df:16:02:a5:29:83:6d:78:dc:2a:6a:13:0d:21:b7:03:
         6f:d3:03:5b:94:5e:7c:6d:bb:f9:f8:b1:53:32:46:c7:ff:d7:
         13:f9:ee:cf:12:c4:66:bf:4d:81:1e:b2:e2:30:92:0f:38:98:
         a4:24:34:51:3e:38:39:93:b9:08:b7:91:4b:4e:68:61:8c:79:
         c1:11:55:5c:9b:3f:fa:94:2c:53:17:28:a9:69:34:c8:b7:71:
         25:b0:e1:12:d9:26:39:e3:17:a6:cf:c1:e4:d1:d3:14:b9:8d:
         42:7e:61:98:6f:fc:fd:18:4f:81:6b:d7:56:ae:ee:d1:b5:cd:
         d7:0a:8e:92:aa:ef:45:07:1b:33:6f:1f:20:e4:58:4a:40:01:
         cd:f8:01:26:d9:5a:ed:26:ff:34:af:32:04:fc:f3:f0:09:ab:
         02:2e:c3:65:e2:30:19:58:42:82:df:20:be:93:0a:64:e9:f3:
         a4:5d:f0:bf:eb:c3:b8:95:a7:b9:a4:e8:ed:ca:48:0f:0e:64:
         94:27:4e:d0:8c:0c:11:60:a7:e1:8b:64:19:53:b1:87:a3:34:
         7f:62:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:55:27 2025 by rpki-client