Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EyjxFNIEM6WKkRgNFLZ3ai3sirI.roa
File:                     EyjxFNIEM6WKkRgNFLZ3ai3sirI.roa (raw, json)
Hash identifier:          nNSfLSXHbhfkowUWcfaoLJMfOdg1NdNf+wK9vua6FTo=
Subject key identifier:   13:28:F1:14:D2:04:33:A5:8A:91:18:0D:14:B6:77:6A:2D:EC:8A:B2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018EA7A707612998D9257FBB4B6C06743420
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EyjxFNIEM6WKkRgNFLZ3ai3sirI.roa
Signing time:             Thu 04 Apr 2024 05:48:45 +0000
ROA not before:           Thu 04 Apr 2024 05:48:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3214
IP address blocks:        45.11.45.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          45.82.76.0/22 maxlen: 32
                          45.89.232.0/22 maxlen: 32
                          45.90.210.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          45.94.40.0/22 maxlen: 32
                          45.128.208.0/22 maxlen: 32
                          45.129.8.0/22 maxlen: 32
                          45.130.20.0/22 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          45.134.168.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          78.142.193.0/24 maxlen: 32
                          78.142.195.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          80.66.196.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          88.218.192.0/22 maxlen: 32
                          91.200.241.0/24 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.40.0/24 maxlen: 24
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          109.94.168.0/24 maxlen: 32
                          141.98.196.0/22 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          176.113.68.0/22 maxlen: 32
                          185.49.32.0/22 maxlen: 24
                          185.64.79.0/24 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          185.207.152.0/22 maxlen: 32
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          193.187.116.0/22 maxlen: 32
                          194.36.24.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 32
                          194.36.222.0/23 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          194.169.54.0/24 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          2a03:d9c0::/29 maxlen: 128
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a06:4fc0::/29 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a09:0:3::/48 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a09:0:9000::/40 maxlen: 128
                          2a0b:4080::/32 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a0c:59c0:3000::/40 maxlen: 128
                          2a0c:ed40::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a0d:4bc0::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a0d:de80::/29 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a10:480::/29 maxlen: 48
                          2a10:2600::/29 maxlen: 48

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 23:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a7:a7:07:61:29:98:d9:25:7f:bb:4b:6c:06:74:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Apr  4 05:48:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1328f114d20433a58a91180d14b6776a2dec8ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:85:c0:58:2f:80:34:96:32:f6:5f:6c:b5:
                    fd:14:25:c3:90:b4:c6:7c:52:3b:ad:24:d7:92:e4:
                    4d:6a:41:9c:d8:e2:78:60:63:67:1e:d8:b9:fc:bd:
                    a0:16:a5:a8:8d:6d:8b:4a:26:28:38:b1:99:f8:28:
                    e9:39:c6:3b:d2:3a:f2:3a:16:84:03:34:9d:2d:06:
                    c8:66:c0:1b:54:29:8a:46:13:7c:66:8d:8f:52:59:
                    8b:9f:46:81:5d:94:eb:87:88:da:12:99:9c:17:20:
                    4b:4c:9c:9d:6b:77:f3:ef:ce:79:84:f1:de:74:ce:
                    07:b9:1a:bd:28:8d:e3:d1:b7:65:b3:b8:a1:21:18:
                    c0:b7:ed:88:64:24:fc:c6:f8:97:aa:6b:6b:cf:85:
                    a0:d4:20:80:ff:fa:a4:37:f5:da:f2:a9:4f:e2:d4:
                    9b:7f:4f:00:f9:13:30:3b:dd:8b:e8:5a:ca:75:46:
                    92:78:28:f8:d6:61:0f:f9:d1:ed:e6:66:a9:77:ad:
                    69:49:a4:40:82:9f:7a:40:11:04:7a:d0:74:03:bc:
                    da:b3:df:5d:d0:8c:83:02:38:84:47:a1:ce:1f:53:
                    70:1e:b3:c2:fc:f4:53:27:05:97:b2:25:25:9e:38:
                    4e:61:ab:c9:d2:c7:c6:15:cf:1a:b5:09:f0:81:0d:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:F1:14:D2:04:33:A5:8A:91:18:0D:14:B6:77:6A:2D:EC:8A:B2
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EyjxFNIEM6WKkRgNFLZ3ai3sirI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.82.76.0/22
                  45.89.232.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.94.40.0/22
                  45.128.208.0/22
                  45.129.8.0/22
                  45.130.20.0/22
                  45.131.152.0/22
                  45.134.168.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  88.218.192.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  176.113.68.0/22
                  185.49.32.0/22
                  185.64.79.0/24
                  185.194.52.0/22
                  185.200.64.0/22
                  185.207.152.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  193.187.116.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:e3:77:9c:99:66:4f:9d:74:85:5d:d1:d4:5d:cc:de:d9:
         d4:5e:5b:98:dc:f3:bc:52:af:2f:e4:07:5d:57:63:12:5e:71:
         29:60:08:40:40:30:03:93:c1:57:54:80:1b:04:29:59:73:20:
         ff:97:8e:87:fd:2b:42:12:3f:7d:35:f2:2c:0d:06:02:e8:fb:
         8b:1d:02:98:12:18:0a:a0:c2:e2:87:c4:23:74:21:ba:91:1c:
         2c:03:42:0c:e3:10:c4:7d:d3:1f:83:d2:67:01:4c:d5:7a:a0:
         fe:04:db:2f:fd:db:2e:79:e3:27:27:dd:41:94:c9:df:f5:65:
         67:5f:b8:a5:b8:7b:ae:ec:03:d8:1d:06:84:83:4c:44:e6:7a:
         44:97:aa:59:3d:0c:58:69:2c:8f:be:60:22:19:d1:29:fa:e4:
         cd:d7:d1:93:07:13:24:50:e9:36:6a:3e:cd:7f:d6:1a:70:d2:
         a9:94:e5:c6:03:c4:49:c0:f8:c2:fa:28:a1:1b:1e:7b:52:52:
         16:e2:a7:94:a8:83:3b:64:60:b8:78:68:c7:7f:94:4d:69:cf:
         bf:71:4d:e3:bb:74:f9:4c:dc:a0:c5:ca:ec:1a:a2:24:ab:98:
         ae:ef:0d:92:14:2f:d9:6e:37:f3:54:9c:31:ad:a1:7a:67:ee:
         23:7e:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org