Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/I_Z-Y-eSZnlLT0YqMDNPQkrMnIs.roa
File:                     I_Z-Y-eSZnlLT0YqMDNPQkrMnIs.roa (raw, json)
Hash identifier:          FZPrB9Vp0K7k7gSHEf2SipXw8N4mYtWvydB3AeBi460=
Subject key identifier:   23:F6:7E:63:E7:92:66:79:4B:4F:46:2A:30:33:4F:42:4A:CC:9C:8B
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01920E8A79313DB7FEECA21FEE17EA93DB75
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/I_Z-Y-eSZnlLT0YqMDNPQkrMnIs.roa
Signing time:             Fri 20 Sep 2024 08:26:48 +0000
ROA not before:           Fri 20 Sep 2024 08:26:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3214
IP address blocks:        45.11.45.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          45.82.76.0/22 maxlen: 32
                          45.89.232.0/22 maxlen: 32
                          45.90.210.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          45.94.40.0/22 maxlen: 32
                          45.128.208.0/22 maxlen: 32
                          45.129.8.0/22 maxlen: 32
                          45.130.20.0/22 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          45.134.168.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          78.142.193.0/24 maxlen: 32
                          78.142.195.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          80.66.196.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          88.218.192.0/22 maxlen: 32
                          91.200.241.0/24 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.40.0/24 maxlen: 24
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          109.94.168.0/24 maxlen: 32
                          141.98.196.0/22 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          176.113.68.0/22 maxlen: 32
                          185.49.32.0/22 maxlen: 24
                          185.64.79.0/24 maxlen: 24
                          185.184.222.0/24 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          185.207.152.0/22 maxlen: 32
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          193.187.116.0/22 maxlen: 32
                          194.36.24.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 32
                          194.36.222.0/23 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          194.169.54.0/24 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          2a03:d9c0::/29 maxlen: 128
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a06:4fc0::/29 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a09:0:3::/48 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a09:0:9000::/40 maxlen: 128
                          2a0b:4080::/32 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a0c:59c0:3000::/40 maxlen: 128
                          2a0c:ed40::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a0d:4bc0::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a0d:de80::/29 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a10:480::/29 maxlen: 48
                          2a10:2600::/29 maxlen: 48

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 12:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0e:8a:79:31:3d:b7:fe:ec:a2:1f:ee:17:ea:93:db:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Sep 20 08:26:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=23f67e63e79266794b4f462a30334f424acc9c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:a9:f6:65:d3:39:9f:77:a9:8a:3b:f4:f6:
                    82:fe:a9:4f:23:ac:f9:a9:7b:b3:9a:cc:79:0d:eb:
                    dd:3e:2f:08:1f:4b:7b:48:37:4a:0f:44:bf:41:6f:
                    07:99:9f:6d:78:1d:d0:de:cc:4f:74:6f:5e:27:f5:
                    8a:e0:40:1d:2b:91:d1:9b:8d:3f:ff:76:e1:e6:56:
                    48:19:bc:8b:98:d1:8c:5b:f4:a9:0c:e2:a8:1b:6d:
                    7e:f2:88:9b:26:dd:58:a4:cc:ea:31:e7:28:62:94:
                    f9:a6:be:23:09:dd:2d:67:91:42:59:0b:10:76:b9:
                    f5:d6:b2:d3:c7:4a:ac:89:e5:66:ad:25:ab:39:55:
                    e5:73:03:e0:1d:4a:26:35:f6:8c:88:72:16:6b:c8:
                    58:6e:80:d7:b7:d6:8d:b2:ac:90:2f:de:b5:dc:b9:
                    5a:2d:22:17:7f:df:fe:69:99:4c:0a:2e:d6:15:58:
                    f5:ce:3f:04:14:a9:a6:71:62:43:61:65:01:e5:20:
                    dd:cf:22:1b:3c:fd:4a:1a:e3:53:10:0c:b5:e8:88:
                    c8:a5:3f:22:dd:c8:2c:4c:24:c9:d6:0c:65:d7:2b:
                    b3:a4:e0:8e:02:be:10:fb:90:72:c3:98:2a:0b:c5:
                    1b:6b:5f:28:16:97:ad:be:92:ee:7e:4a:13:59:9c:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:7E:63:E7:92:66:79:4B:4F:46:2A:30:33:4F:42:4A:CC:9C:8B
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/I_Z-Y-eSZnlLT0YqMDNPQkrMnIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.82.76.0/22
                  45.89.232.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.94.40.0/22
                  45.128.208.0/22
                  45.129.8.0/22
                  45.130.20.0/22
                  45.131.152.0/22
                  45.134.168.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  88.218.192.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  176.113.68.0/22
                  185.49.32.0/22
                  185.64.79.0/24
                  185.184.222.0/24
                  185.194.52.0/22
                  185.200.64.0/22
                  185.207.152.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  193.187.116.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:03:26:dd:a5:f6:cc:40:1d:22:4f:2d:c1:91:d8:6f:72:7d:
         48:f2:87:d0:c6:0e:a1:d8:e1:32:8a:4d:0a:5b:50:8d:e1:6f:
         92:25:58:e1:f8:62:4c:52:0b:a5:19:69:64:6e:f1:5a:a9:5c:
         e3:36:f1:b7:95:2f:65:36:88:ca:a2:1c:92:a5:41:df:a4:5e:
         c7:a6:05:cf:38:d4:a4:b7:c3:0b:e4:c8:57:30:ff:5b:c0:a0:
         4e:9c:98:ec:69:40:bd:3e:e6:05:ca:da:53:1d:f3:cf:be:fe:
         6e:81:35:f4:f6:cd:f3:41:34:2d:4b:7f:84:90:f3:56:f0:12:
         93:b1:ce:3f:78:69:15:77:b8:eb:38:19:2b:b7:50:25:b6:ac:
         a5:fa:6d:6d:42:3b:83:58:25:36:6b:bd:a8:61:a6:2f:33:2d:
         df:53:8c:60:a4:b1:75:42:c1:f7:f0:5b:2c:2a:15:34:b8:e1:
         18:2c:56:f9:fe:0d:44:d4:b2:5f:0b:97:83:47:8a:13:a2:84:
         f4:9b:11:97:22:d1:ae:69:73:a8:31:64:f7:9d:1e:3e:05:0b:
         8e:40:25:5c:17:cf:4a:e8:3e:09:31:24:34:bd:be:fc:1c:9c:
         a2:c8:d2:70:2d:ef:f3:fe:7b:8a:06:fd:77:c2:18:56:01:d6:
         af:61:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:31:00 2024 by rpki-client on console-ams.rpki-client.org