Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Zl6AIRENxbw7XzO9q2N_18fa5Lk.roa
File:                     Zl6AIRENxbw7XzO9q2N_18fa5Lk.roa (raw, json)
Hash identifier:          /+qFWQEdKX2cw449JEvACnGM6khOqvXuY7piFaS0igQ=
Subject key identifier:   66:5E:80:21:11:0D:C5:BC:3B:5F:33:BD:AB:63:7F:D7:C7:DA:E4:B9
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018FD625BA87F65727B76291204B5437A567
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Zl6AIRENxbw7XzO9q2N_18fa5Lk.roa
Signing time:             Sat 01 Jun 2024 23:32:27 +0000
ROA not before:           Sat 01 Jun 2024 23:32:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3214
IP address blocks:        45.11.45.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          45.82.76.0/22 maxlen: 32
                          45.89.232.0/22 maxlen: 32
                          45.90.210.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          45.94.40.0/22 maxlen: 32
                          45.128.208.0/22 maxlen: 32
                          45.129.8.0/22 maxlen: 32
                          45.130.20.0/22 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          45.134.168.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          78.142.193.0/24 maxlen: 32
                          78.142.195.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          80.66.196.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          88.218.192.0/22 maxlen: 32
                          91.200.241.0/24 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.40.0/24 maxlen: 24
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          109.94.168.0/24 maxlen: 32
                          141.98.196.0/22 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          176.113.68.0/22 maxlen: 32
                          185.49.32.0/22 maxlen: 24
                          185.64.79.0/24 maxlen: 24
                          185.184.220.0/22 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          185.207.152.0/22 maxlen: 32
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          193.187.116.0/22 maxlen: 32
                          194.36.24.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 32
                          194.36.222.0/23 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          194.169.54.0/24 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          2a03:d9c0::/29 maxlen: 128
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a06:4fc0::/29 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a09:0:3::/48 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a09:0:9000::/40 maxlen: 128
                          2a0b:4080::/32 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a0c:59c0:3000::/40 maxlen: 128
                          2a0c:ed40::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a0d:4bc0::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a0d:de80::/29 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a10:480::/29 maxlen: 48
                          2a10:2600::/29 maxlen: 48

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 20:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d6:25:ba:87:f6:57:27:b7:62:91:20:4b:54:37:a5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jun  1 23:32:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=665e8021110dc5bc3b5f33bdab637fd7c7dae4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:65:9e:43:52:54:3a:7d:b2:56:b5:cd:e5:6e:
                    fe:3d:85:b5:21:99:64:e1:95:ca:fc:ee:6c:20:7d:
                    92:8e:d3:bd:60:5f:1c:f9:5f:dd:6a:14:6d:0b:0e:
                    07:f5:2a:06:31:3a:68:1f:cd:db:21:b0:2d:8b:d1:
                    6d:ec:7f:60:76:3b:eb:3f:3b:90:42:10:59:f7:48:
                    85:81:5d:74:fc:b3:8a:48:db:e0:09:68:14:c0:a5:
                    e4:e0:38:cc:cd:dd:26:3d:37:0a:44:b5:1a:e2:a6:
                    8c:87:71:17:a2:41:fd:56:c4:6a:6b:e7:4a:be:de:
                    8a:16:8c:77:bd:e7:f9:62:15:e6:4d:24:51:f7:83:
                    c0:9f:10:b4:02:28:86:86:34:e8:32:1f:d3:ba:7b:
                    24:59:f2:7e:98:98:e2:69:26:48:76:59:1a:eb:16:
                    a5:35:d6:36:35:e0:10:56:95:e8:bb:36:c6:c3:1c:
                    55:e9:96:0c:4f:2b:19:83:33:f2:24:f0:ea:b0:0c:
                    f1:ba:81:19:80:56:8f:01:e4:fc:9f:8a:73:32:b3:
                    57:b2:8d:90:21:e6:9f:e5:4b:57:5f:b0:7b:5c:0e:
                    87:32:07:1e:b0:cc:97:97:42:2e:bc:2e:8d:e5:5f:
                    15:d4:f9:a8:c4:2a:88:83:bb:61:d5:dc:b5:4d:f3:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:80:21:11:0D:C5:BC:3B:5F:33:BD:AB:63:7F:D7:C7:DA:E4:B9
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Zl6AIRENxbw7XzO9q2N_18fa5Lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.82.76.0/22
                  45.89.232.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.94.40.0/22
                  45.128.208.0/22
                  45.129.8.0/22
                  45.130.20.0/22
                  45.131.152.0/22
                  45.134.168.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  88.218.192.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  176.113.68.0/22
                  185.49.32.0/22
                  185.64.79.0/24
                  185.184.220.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.207.152.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  193.187.116.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:b7:bb:05:52:72:dc:1b:88:95:79:6f:aa:69:3c:8e:ae:
         d0:78:77:17:74:42:dc:bc:fb:35:2f:2b:50:6f:eb:8c:f2:c0:
         a0:a1:de:8d:28:41:e6:5a:5e:77:59:33:47:a9:63:ae:14:46:
         3e:35:af:85:a0:d7:78:93:02:6a:fe:f1:d7:f0:1d:c1:02:51:
         42:0c:1d:07:e6:1f:cb:5c:15:a5:ac:32:20:7f:62:8a:d3:3d:
         11:99:ef:dc:a3:9f:ec:e0:0e:0e:fa:a2:15:c1:a7:d2:40:3c:
         3e:9a:b4:6d:39:62:32:72:d0:02:3b:15:82:f3:33:8b:95:80:
         9d:7d:6c:06:2b:40:e2:02:3f:59:43:fa:de:66:3b:17:0a:d1:
         19:84:5a:88:f1:21:03:21:8f:22:98:2f:0f:16:d6:ad:b2:76:
         1a:df:bd:6e:cf:d9:cf:34:b9:c8:bc:e7:62:14:0c:de:3e:2e:
         51:f7:e0:40:c6:97:77:2d:f3:ee:87:c7:9b:0e:c4:56:74:38:
         74:59:df:ef:c7:0e:9b:a3:81:ca:c6:89:d4:b7:c6:93:9c:4b:
         70:e6:d4:1c:4b:01:d2:cb:f6:34:cb:0b:09:97:63:58:d8:23:
         ab:9c:a9:03:42:7d:40:9c:60:ca:66:1d:92:17:5b:91:2f:ef:
         92:08:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 22:44:57 2024 by rpki-client on console-ams.rpki-client.org