Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LiDAgDOOS61LbCZdtxrhfebQBto.roa
File:                     LiDAgDOOS61LbCZdtxrhfebQBto.roa (raw, json)
Hash identifier:          WOcixorrhp0zOMojN9id8PDLZ0+TlI1At4uWdtJx67g=
Subject key identifier:   2E:20:C0:80:33:8E:4B:AD:4B:6C:26:5D:B7:1A:E1:7D:E6:D0:06:DA
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018C78769456DA134D9BA84055E059E42D15
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LiDAgDOOS61LbCZdtxrhfebQBto.roa
Signing time:             Sun 17 Dec 2023 15:48:06 +0000
ROA not before:           Sun 17 Dec 2023 15:48:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          185.64.79.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.20.0/22 maxlen: 24
                          194.36.24.0/24 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 32
                          45.143.232.0/22 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          78.142.195.0/24 maxlen: 32
                          78.142.193.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          109.94.168.0/24 maxlen: 32
                          194.169.54.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          2a0c:59c0:3000::/40 maxlen: 128
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 128
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:9000::/40 maxlen: 128
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:76:94:56:da:13:4d:9b:a8:40:55:e0:59:e4:2d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Dec 17 15:48:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e20c080338e4bad4b6c265db71ae17de6d006da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:e1:24:d7:f6:54:df:e5:07:6a:71:1a:d8:
                    8c:20:1d:d4:ae:82:a2:8c:29:13:01:9e:a9:1f:e4:
                    53:f3:b4:56:dd:35:ee:b8:1f:10:b5:d5:0a:42:43:
                    b8:09:1a:e6:de:f5:ee:03:d7:2a:d6:42:ae:6e:5c:
                    e7:3b:32:e1:6f:84:b3:df:c9:84:a7:29:ce:a9:e9:
                    db:a9:d7:34:40:18:e0:bd:2f:36:6b:b0:59:6b:e1:
                    63:41:2d:30:75:a1:41:87:33:35:18:5b:63:a9:6b:
                    7d:56:2d:be:69:be:69:eb:d8:d5:eb:32:5c:d0:78:
                    c7:7d:e0:5a:8a:42:c3:8a:02:7b:19:e0:a0:b7:cd:
                    97:d2:32:74:48:73:5f:f9:ce:70:39:5b:f8:23:32:
                    ad:34:70:45:2f:25:74:75:d1:06:84:13:66:7c:e9:
                    86:ef:9b:a8:3a:71:ea:4d:07:bf:ab:55:ae:33:e8:
                    c7:16:74:00:dd:b9:d1:ea:78:e8:e4:3d:44:ec:20:
                    c7:a1:6f:61:6d:e9:99:87:3a:0c:41:da:55:05:7e:
                    52:12:8f:26:2f:e4:eb:da:aa:06:ab:93:dd:4d:79:
                    43:70:aa:42:bd:8f:c7:11:e2:d5:5c:9f:72:ba:e9:
                    b4:89:76:72:6d:f1:2d:29:a4:e2:2d:1c:53:91:1b:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:20:C0:80:33:8E:4B:AD:4B:6C:26:5D:B7:1A:E1:7D:E6:D0:06:DA
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LiDAgDOOS61LbCZdtxrhfebQBto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  185.49.32.0/22
                  185.64.79.0/24
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:77:b9:e4:75:58:66:04:e4:0a:48:c1:ac:e0:9d:ea:89:44:
         20:70:e8:37:55:70:9d:ae:c5:de:61:dc:a0:d4:20:de:4e:e0:
         aa:eb:d9:fe:e1:e5:71:aa:4b:57:80:c9:dd:69:80:b1:f8:5d:
         92:94:8f:23:f0:b4:fd:24:fe:db:9a:5b:0e:b9:bb:48:bd:72:
         8b:81:60:87:2b:d3:cf:f1:97:29:74:b5:0e:46:e7:e8:99:71:
         48:6b:0a:eb:80:34:e4:5f:f0:65:49:6f:78:cf:31:89:52:2f:
         b9:b7:c0:9b:8d:34:56:26:19:dc:ec:39:00:04:37:f0:ac:82:
         47:e3:8c:6f:00:f7:37:fb:6e:5d:18:9e:ba:5e:88:de:0f:39:
         c3:1d:3e:22:cc:5d:05:0d:af:55:85:0c:e2:d9:ca:4b:df:75:
         81:4a:c5:aa:5c:c5:0f:45:ed:1d:85:38:3f:c6:0b:48:9c:71:
         01:fe:e8:e9:bd:2e:0c:9f:45:8c:be:dc:b7:10:5a:a7:3e:34:
         63:9c:e8:b4:96:a9:98:2f:6b:e1:76:6c:c2:88:81:2f:10:a0:
         18:22:32:81:9b:17:d5:e1:a8:14:9f:57:84:fe:d4:e9:f5:a1:
         12:e7:be:e6:f2:a5:7c:23:0a:75:c2:0d:9b:99:e3:be:7c:fd:
         b3:be:62:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org