Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa
File:                     1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa (raw, json)
Hash identifier:          uk9vsJ5blS4LoVkLlo0lWqpZKyqN2cNvxlX08dqFTi8=
Subject key identifier:   FB:97:AC:C5:86:D3:C3:3F:F3:EC:F5:B6:C0:31:B1:4E:0E:A3:E9:F9
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       018D79AB71FE5C81780FBB11343D9EBCB43B
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa
Signing time:             Mon 05 Feb 2024 14:28:15 +0000
ROA not before:           Mon 05 Feb 2024 14:28:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41221
IP address blocks:        5.56.64.0/18 maxlen: 24
                          37.75.16.0/20 maxlen: 24
                          37.75.64.0/18 maxlen: 24
                          46.55.0.0/17 maxlen: 24
                          85.204.176.0/21 maxlen: 24
                          86.104.196.0/22 maxlen: 24
                          86.105.56.0/21 maxlen: 24
                          86.105.80.0/21 maxlen: 24
                          86.105.172.0/22 maxlen: 24
                          86.105.208.0/22 maxlen: 24
                          86.106.144.0/21 maxlen: 24
                          86.106.208.0/20 maxlen: 24
                          86.107.64.0/22 maxlen: 24
                          86.107.160.0/21 maxlen: 24
                          89.32.56.0/21 maxlen: 24
                          89.32.136.0/21 maxlen: 24
                          89.32.172.0/22 maxlen: 24
                          89.32.252.0/22 maxlen: 24
                          89.34.64.0/21 maxlen: 24
                          89.34.112.0/21 maxlen: 24
                          89.34.192.0/21 maxlen: 24
                          89.34.204.0/22 maxlen: 24
                          89.34.232.0/22 maxlen: 24
                          89.35.8.0/21 maxlen: 24
                          89.35.40.0/21 maxlen: 24
                          89.35.84.0/22 maxlen: 24
                          89.35.200.0/22 maxlen: 24
                          89.36.156.0/22 maxlen: 24
                          89.37.44.0/22 maxlen: 24
                          89.37.104.0/24 maxlen: 24
                          93.116.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 07:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:79:ab:71:fe:5c:81:78:0f:bb:11:34:3d:9e:bc:b4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Feb  5 14:28:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fb97acc586d3c33ff3ecf5b6c031b14e0ea3e9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:ce:e4:be:9e:4b:95:e1:40:47:8e:3f:f4:
                    a8:0d:f4:2e:2f:04:ad:a9:04:0f:27:a9:76:ca:a9:
                    c7:39:56:74:1d:95:ec:25:73:4c:5d:65:ca:2f:d0:
                    77:88:0e:ad:c5:4f:bf:55:8f:18:88:6d:db:33:71:
                    33:0e:18:5c:6d:57:58:59:31:ef:4e:58:e5:cf:2a:
                    f6:f1:6a:57:5f:66:c6:c8:2f:92:8a:a5:ae:f3:90:
                    ec:91:df:ff:fa:ae:9f:f0:d2:b2:1f:72:23:41:96:
                    cf:e0:43:3e:81:8d:2e:a6:9f:03:ec:49:eb:d6:54:
                    76:fe:0e:99:20:51:d6:c5:7c:a4:4f:2f:cc:fc:71:
                    f5:fd:75:8f:ad:91:c4:4c:70:1d:61:ab:07:f0:5f:
                    fc:c3:65:8b:4b:f5:cc:c6:6c:7e:07:a7:fa:bc:65:
                    34:e2:e8:8a:b4:be:61:9f:f7:c0:55:8f:e5:35:c9:
                    31:ec:2b:d4:92:09:2d:c6:08:62:4c:a8:a5:05:3d:
                    83:24:1e:a5:9e:b8:57:97:1d:10:df:90:17:6e:fd:
                    b4:6b:f7:3d:42:cd:2b:16:3e:8d:98:ce:c5:81:1c:
                    7d:52:ef:ee:58:60:71:93:d1:70:02:9c:7a:87:93:
                    f8:65:12:ea:32:e1:b4:9c:93:47:f8:d1:2b:01:fc:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:AC:C5:86:D3:C3:3F:F3:EC:F5:B6:C0:31:B1:4E:0E:A3:E9:F9
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.64.0/18
                  37.75.16.0/20
                  37.75.64.0/18
                  46.55.0.0/17
                  85.204.176.0/21
                  86.104.196.0/22
                  86.105.56.0/21
                  86.105.80.0/21
                  86.105.172.0/22
                  86.105.208.0/22
                  86.106.144.0/21
                  86.106.208.0/20
                  86.107.64.0/22
                  86.107.160.0/21
                  89.32.56.0/21
                  89.32.136.0/21
                  89.32.172.0/22
                  89.32.252.0/22
                  89.34.64.0/21
                  89.34.112.0/21
                  89.34.192.0/21
                  89.34.204.0/22
                  89.34.232.0/22
                  89.35.8.0/21
                  89.35.40.0/21
                  89.35.84.0/22
                  89.35.200.0/22
                  89.36.156.0/22
                  89.37.44.0/22
                  89.37.104.0/24
                  93.116.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:33:43:dc:75:60:ae:6c:3e:ee:1a:17:c6:ae:ea:29:81:73:
         25:3f:d6:48:e5:ce:c5:9d:67:b0:af:22:fc:24:e9:04:6b:19:
         5c:18:78:c2:99:9a:95:7d:28:1e:58:44:83:8f:cb:ba:bb:f9:
         dc:5b:f9:bc:7f:1a:73:1b:d4:64:0e:f5:ea:d0:2b:4b:83:1d:
         58:7c:11:4b:84:40:8f:39:03:8d:ff:70:57:95:5e:01:d9:85:
         3a:22:1e:86:22:07:d5:3e:87:56:d8:3e:a6:36:2d:53:11:7b:
         86:0f:09:15:64:dd:77:e1:b6:04:ac:9c:9d:70:96:9a:f2:ff:
         c7:bb:e4:26:ac:30:d9:74:6e:66:f7:bd:c3:83:40:e2:be:45:
         50:c4:42:73:c6:de:35:7a:7f:3d:b0:8c:49:d6:b1:5e:63:a3:
         52:2c:1b:ea:10:0d:4e:07:59:23:bb:6f:93:14:1d:eb:fe:ea:
         76:ad:f0:88:1c:e2:11:16:c4:80:de:f6:21:34:87:2a:e6:a9:
         18:a4:b1:90:c8:5d:89:e2:52:d5:3b:43:0f:b1:03:21:2f:be:
         21:48:8d:12:22:2d:1a:f7:8d:ab:29:6e:6a:aa:85:5d:fe:d0:
         11:e0:74:de:73:b3:6a:fb:b1:3b:b6:38:12:45:b0:67:01:41:
         d6:78:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org