Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fwX3k2Lyqnv3PHXlg7kX3kjOMeA.roa
File:                     fwX3k2Lyqnv3PHXlg7kX3kjOMeA.roa (raw, json)
Hash identifier:          WTo3xIaqmNIA8AxrA5IYEVe5MH3Avs/qnbU4QB3G2eE=
Subject key identifier:   7F:05:F7:93:62:F2:AA:7B:F7:3C:75:E5:83:B9:17:DE:48:CE:31:E0
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       0189E53626D592B7C6FA7A2D47E2CBB3EA38
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fwX3k2Lyqnv3PHXlg7kX3kjOMeA.roa
Signing time:             Fri 11 Aug 2023 15:27:58 +0000
ROA not before:           Fri 11 Aug 2023 15:27:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        80.66.196.0/22 maxlen: 24
                          92.60.40.0/23 maxlen: 23
                          92.60.41.0/24 maxlen: 24
                          92.60.42.0/24 maxlen: 24
                          92.60.40.0/24 maxlen: 24
                          185.255.55.0/24 maxlen: 24
                          185.255.53.0/24 maxlen: 24
                          185.255.52.0/22 maxlen: 24
                          45.80.188.0/22 maxlen: 24
                          62.133.35.0/24 maxlen: 24
                          62.133.33.0/24 maxlen: 24
                          62.133.32.0/24 maxlen: 24
                          62.133.32.0/22 maxlen: 24
                          88.214.20.0/22 maxlen: 24
                          45.147.48.0/24 maxlen: 32
                          45.147.49.0/24 maxlen: 32
                          45.153.244.0/22 maxlen: 24
                          95.214.164.0/22 maxlen: 24
                          185.248.84.0/22 maxlen: 24
                          185.194.52.0/22 maxlen: 24
                          91.200.241.0/24 maxlen: 24
                          45.11.45.0/24 maxlen: 24
                          141.98.196.0/22 maxlen: 24
                          147.78.179.0/24 maxlen: 24
                          147.78.177.0/24 maxlen: 24
                          147.78.178.0/24 maxlen: 24
                          147.78.176.0/24 maxlen: 24
                          147.78.176.0/22 maxlen: 24
                          147.78.241.0/24 maxlen: 24
                          185.200.64.0/22 maxlen: 24
                          45.139.192.0/22 maxlen: 24
                          185.254.75.0/24 maxlen: 24
                          185.254.73.0/24 maxlen: 24
                          45.92.157.0/24 maxlen: 24
                          185.254.74.0/24 maxlen: 24
                          185.213.151.0/24 maxlen: 24
                          185.213.149.0/24 maxlen: 24
                          185.213.148.0/22 maxlen: 24
                          185.213.148.0/24 maxlen: 24
                          147.78.240.0/24 maxlen: 24
                          194.124.216.0/24 maxlen: 24
                          45.131.152.0/22 maxlen: 24
                          194.124.228.0/24 maxlen: 24
                          194.124.227.0/24 maxlen: 24
                          213.232.112.0/22 maxlen: 24
                          195.245.241.0/24 maxlen: 24
                          195.245.242.0/24 maxlen: 24
                          194.104.152.0/22 maxlen: 24
                          194.124.213.0/24 maxlen: 24
                          193.111.90.0/23 maxlen: 24
                          193.177.220.0/22 maxlen: 24
                          194.36.222.0/23 maxlen: 24
                          94.124.116.0/22 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          193.111.30.0/23 maxlen: 24
                          195.245.219.0/24 maxlen: 24
                          185.49.32.0/22 maxlen: 24
                          45.130.23.0/24 maxlen: 24
                          45.130.21.0/24 maxlen: 24
                          79.143.140.0/22 maxlen: 24
                          45.130.22.0/24 maxlen: 24
                          45.130.20.0/24 maxlen: 24
                          45.130.20.0/22 maxlen: 24
                          194.36.24.0/24 maxlen: 24
                          45.143.233.0/24 maxlen: 24
                          194.36.27.0/24 maxlen: 24
                          194.36.25.0/24 maxlen: 24
                          45.143.232.0/22 maxlen: 24
                          45.143.235.0/24 maxlen: 24
                          45.143.234.0/24 maxlen: 24
                          149.62.44.0/22 maxlen: 24
                          78.142.192.0/22 maxlen: 24
                          194.169.180.0/23 maxlen: 24
                          78.142.193.0/24 maxlen: 32
                          78.142.228.0/22 maxlen: 24
                          45.13.199.0/24 maxlen: 24
                          45.13.198.0/24 maxlen: 24
                          109.94.168.0/22 maxlen: 24
                          194.169.54.0/24 maxlen: 24
                          194.169.54.0/23 maxlen: 24
                          185.222.216.0/22 maxlen: 24
                          185.222.216.0/21 maxlen: 24
                          185.222.220.0/24 maxlen: 24
                          2a06:4fc0::/29 maxlen: 48
                          2a07:e900::/29 maxlen: 48
                          2a09:0:7::/48 maxlen: 48
                          2a06:57c0::/29 maxlen: 48
                          2a09:0:4::/48 maxlen: 48
                          2a09::/29 maxlen: 48
                          2a0b:4080::/32 maxlen: 48
                          2a0d:3640::/29 maxlen: 48
                          2a0c:ed40::/29 maxlen: 48
                          2a09:0:1::/48 maxlen: 48
                          2a09:0:1337::/48 maxlen: 64
                          2a0d:de80::/29 maxlen: 48
                          2a09:0:6::/48 maxlen: 48
                          2a09:0:9::/48 maxlen: 48
                          2a07:fa00::/29 maxlen: 48
                          2a0d:7540::/29 maxlen: 48
                          2a03:d9c0::/29 maxlen: 128
                          2a09:0:3::/48 maxlen: 48
                          2a10:2600::/29 maxlen: 48
                          2a0c:59c0::/29 maxlen: 48
                          2a09:0:11::/48 maxlen: 48
                          2a0b:89c0::/29 maxlen: 48
                          2a09:0:8::/48 maxlen: 48
                          2a0d:4340::/29 maxlen: 48
                          2a09:0:5::/48 maxlen: 48
                          2a0e:6200::/29 maxlen: 48
                          2a07:fe00::/29 maxlen: 48
                          2a0d:1fc0::/29 maxlen: 48
                          2a03:d9c0:8000::/48 maxlen: 48
                          2a03:d9c0:c0de::/48 maxlen: 64
                          2a0d:4bc0::/29 maxlen: 48
                          2a09:0:2::/48 maxlen: 48
                          2a10:480::/29 maxlen: 48

Validation:               Failed, certificate revoked on Sun 13 Aug 2023 19:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:e5:36:26:d5:92:b7:c6:fa:7a:2d:47:e2:cb:b3:ea:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Aug 11 15:27:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f05f79362f2aa7bf73c75e583b917de48ce31e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:90:0b:df:5f:d4:f4:43:9a:25:68:1b:f7:
                    7f:28:1f:57:c8:cb:35:6e:5f:22:2f:bf:a3:45:f8:
                    d9:31:c0:02:fa:72:05:6c:4b:e9:ae:7c:08:6e:14:
                    ce:15:43:68:ab:82:e9:d5:17:f8:96:78:25:85:27:
                    2e:c3:88:62:f6:ab:2e:1b:0b:fb:12:3c:5a:4a:e1:
                    ed:76:20:bd:da:5b:fb:36:d7:00:1b:dd:11:34:93:
                    47:14:d5:fe:43:ce:2c:16:03:29:1c:ee:be:01:27:
                    ec:9a:4b:c9:30:59:c6:74:e5:5b:0f:92:0c:29:25:
                    2b:28:f9:4d:dd:ed:29:d6:1f:b2:fe:e1:d4:05:85:
                    25:f9:a8:7e:a6:b3:b7:43:77:69:33:58:40:47:9f:
                    02:be:43:f2:ad:b9:c9:27:07:8f:45:20:71:4c:e0:
                    94:fd:bf:4b:40:1c:4c:4b:eb:77:61:53:f0:71:44:
                    a1:d7:2d:0c:10:7f:4d:c9:03:43:fd:36:db:d1:53:
                    ff:8c:6f:5c:a8:ff:df:ef:ce:69:da:96:b4:2b:d1:
                    17:53:c0:62:b5:e0:59:9f:80:a3:ec:4a:1f:09:99:
                    40:d9:88:a8:cc:97:0c:68:49:04:b1:12:ad:96:4f:
                    e7:9e:34:57:2d:2f:a9:10:76:9f:4b:3c:a5:7f:d6:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:F7:93:62:F2:AA:7B:F7:3C:75:E5:83:B9:17:DE:48:CE:31:E0
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/fwX3k2Lyqnv3PHXlg7kX3kjOMeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.45.0/24
                  45.13.198.0/23
                  45.80.188.0/22
                  45.90.210.0/24
                  45.92.157.0/24
                  45.130.20.0/22
                  45.131.152.0/22
                  45.139.192.0/22
                  45.143.232.0/22
                  45.147.48.0/23
                  45.153.244.0/22
                  62.133.32.0/22
                  78.142.192.0/22
                  78.142.228.0/22
                  79.143.140.0/22
                  80.66.196.0/22
                  88.214.20.0/22
                  91.200.241.0/24
                  92.60.40.0-92.60.42.255
                  94.124.116.0/22
                  95.214.164.0/22
                  109.94.168.0/22
                  141.98.196.0/22
                  147.78.176.0/22
                  147.78.240.0/23
                  149.62.44.0/22
                  185.49.32.0/22
                  185.194.52.0/22
                  185.200.64.0/22
                  185.213.148.0/22
                  185.222.216.0/21
                  185.248.84.0/22
                  185.254.73.0-185.254.75.255
                  185.255.52.0/22
                  193.111.30.0/23
                  193.111.90.0/23
                  193.177.220.0/22
                  194.36.24.0/23
                  194.36.27.0/24
                  194.36.222.0/23
                  194.104.152.0/22
                  194.124.213.0/24
                  194.124.216.0/24
                  194.124.227.0-194.124.228.255
                  194.169.54.0/23
                  194.169.180.0/23
                  195.245.219.0/24
                  195.245.241.0-195.245.242.255
                  213.232.112.0/22
                IPv6:
                  2a03:d9c0::/29
                  2a06:4fc0::/29
                  2a06:57c0::/29
                  2a07:e900::/29
                  2a07:fa00::/29
                  2a07:fe00::/29
                  2a09::/29
                  2a0b:4080::/32
                  2a0b:89c0::/29
                  2a0c:59c0::/29
                  2a0c:ed40::/29
                  2a0d:1fc0::/29
                  2a0d:3640::/29
                  2a0d:4340::/29
                  2a0d:4bc0::/29
                  2a0d:7540::/29
                  2a0d:de80::/29
                  2a0e:6200::/29
                  2a10:480::/29
                  2a10:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:17:1e:e4:de:43:d1:6b:c2:66:b7:6b:2b:c6:13:a2:63:
         30:ff:71:6d:2f:fc:c5:8a:c4:fd:6e:4b:be:1a:02:f0:c0:dd:
         7b:b6:d0:29:02:a6:c5:eb:64:5b:8b:39:43:ed:33:fa:a5:01:
         2c:5a:60:8c:4e:1b:fd:30:d1:c6:fa:0a:9c:a3:d2:ea:f2:cc:
         e8:7c:59:26:f5:2d:17:09:94:8b:a6:5c:46:5f:a6:4d:ad:ac:
         78:42:33:b9:9a:c1:37:22:2c:b5:af:75:d3:93:63:30:86:44:
         5e:ca:1a:f8:6c:cb:a8:7a:3a:51:95:9f:0b:8b:02:25:23:31:
         97:b8:ae:32:16:5d:1e:9d:60:cf:3d:e1:08:d9:a2:ac:df:79:
         cf:74:c7:54:35:1c:d6:59:ca:6d:82:b1:46:e5:76:b4:e5:f9:
         28:e8:00:5b:46:27:88:73:5c:ef:b9:f6:d8:36:20:7e:2b:03:
         3d:01:4e:b3:99:43:63:18:d7:47:c1:2b:b2:f4:e2:fd:ae:b8:
         2a:3c:8a:45:de:a1:fc:e8:55:5d:58:e3:d9:74:d6:c6:aa:7a:
         19:16:6f:b7:7a:93:c9:45:bd:83:04:c7:a7:95:d2:2f:dd:d2:
         32:b9:75:e0:a5:6c:89:95:eb:f8:ec:a9:ba:bc:1e:46:8c:dc:
         46:5f:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org