Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1bh8t2HGcskF0mOyqaZMpz0ieBU.roa
File:                     1bh8t2HGcskF0mOyqaZMpz0ieBU.roa (raw, json)
Hash identifier:          lQ4tUpZc2f8Yb7I3c/byvQuC0nb8lzYgJAVoxC7JNTc=
Subject key identifier:   D5:B8:7C:B7:61:C6:72:C9:05:D2:63:B2:A9:A6:4C:A7:3D:22:78:15
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018EF6DFE0480090A68A917A96F7F32BCDA2
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1bh8t2HGcskF0mOyqaZMpz0ieBU.roa
Signing time:             Fri 19 Apr 2024 15:00:50 +0000
ROA not before:           Fri 19 Apr 2024 15:00:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/29 maxlen: 36
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3804:e000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3805::/36 maxlen: 36
                          2a09:3805:1000::/36 maxlen: 36
                          2a09:3805:2000::/36 maxlen: 36
                          2a09:3805:3000::/36 maxlen: 36
                          2a09:3805:4000::/36 maxlen: 36
                          2a09:3805:5000::/36 maxlen: 36
                          2a09:3805:6000::/36 maxlen: 36
                          2a09:3805:7000::/36 maxlen: 36
                          2a09:3805:8000::/36 maxlen: 36
                          2a09:3805:9000::/36 maxlen: 36
                          2a09:3805:a000::/36 maxlen: 36
                          2a09:3805:b000::/36 maxlen: 36
                          2a09:3805:c000::/36 maxlen: 36
                          2a09:3805:d000::/36 maxlen: 36
                          2a09:3805:e000::/36 maxlen: 36
                          2a09:3805:f000::/36 maxlen: 36
                          2a09:3806::/32 maxlen: 32
                          2a09:3806::/36 maxlen: 36
                          2a09:3806:1000::/36 maxlen: 36
                          2a09:3806:2000::/36 maxlen: 36
                          2a09:3806:3000::/36 maxlen: 36
                          2a09:3806:4000::/36 maxlen: 36
                          2a09:3806:5000::/36 maxlen: 36
                          2a09:3806:6000::/36 maxlen: 36
                          2a09:3806:7000::/36 maxlen: 36
                          2a09:3806:8000::/36 maxlen: 36
                          2a09:3806:9000::/36 maxlen: 36
                          2a09:3806:a000::/36 maxlen: 36
                          2a09:3806:b000::/36 maxlen: 36
                          2a09:3806:c000::/36 maxlen: 36
                          2a09:3806:d000::/36 maxlen: 36
                          2a09:3806:e000::/36 maxlen: 36
                          2a09:3806:f000::/36 maxlen: 36
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:6f01::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0a:f200::/29 maxlen: 36
                          2a0b:b0c0::/32 maxlen: 32
                          2a0b:b0c1::/32 maxlen: 32
                          2a0b:b0c2::/32 maxlen: 32
                          2a0b:b0c3::/32 maxlen: 32
                          2a0b:b0c4::/32 maxlen: 32
                          2a0b:b0c5::/32 maxlen: 32
                          2a0b:b0c6::/32 maxlen: 32
                          2a0b:b0c7::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107::/36 maxlen: 36
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:2e40::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:c580::/29 maxlen: 36
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:c80:3000::/36 maxlen: 36
                          2a11:c80:4000::/36 maxlen: 36
                          2a11:c80:5000::/36 maxlen: 36
                          2a11:c80:6000::/36 maxlen: 36
                          2a11:c80:b000::/36 maxlen: 36
                          2a11:c80:c000::/36 maxlen: 36
                          2a11:c80:d000::/36 maxlen: 36
                          2a11:c81::/32 maxlen: 32
                          2a11:c83::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 05:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:df:e0:48:00:90:a6:8a:91:7a:96:f7:f3:2b:cd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Apr 19 15:00:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d5b87cb761c672c905d263b2a9a64ca73d227815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:cb:cb:0f:a2:c2:45:92:f5:b1:0b:35:23:
                    86:41:cf:a2:9e:c8:de:61:62:0d:e5:e7:e9:2d:c5:
                    bb:df:d7:3f:e0:8b:b1:65:26:0a:c9:ca:a2:03:02:
                    5d:b9:5c:75:af:83:24:dc:d6:38:8b:d3:dd:fd:5e:
                    8c:a5:a2:7a:55:ef:6d:3e:12:bf:32:08:92:b9:e2:
                    d0:13:7f:eb:a9:03:58:7a:80:51:26:37:15:dd:d7:
                    f3:fe:b9:33:90:ce:29:5a:40:c2:65:df:d7:e0:52:
                    e3:84:f2:ee:80:16:d5:d7:03:32:aa:40:4e:97:93:
                    e3:54:92:39:1a:7c:60:66:c2:21:80:78:80:6a:45:
                    e0:f6:37:23:79:bf:4a:d8:e8:7e:36:77:60:84:3f:
                    b5:56:7f:0f:90:b6:94:a0:40:b1:55:c3:50:1c:15:
                    9d:df:85:db:09:5f:97:b7:2f:64:f7:99:32:72:45:
                    b3:14:4d:bd:47:d4:40:57:f0:fe:ab:2f:b5:6a:9f:
                    50:52:40:df:5a:45:8c:89:a7:92:b4:f9:4b:83:ce:
                    70:16:82:6d:25:0f:6a:27:d4:a6:54:ce:87:04:46:
                    31:c2:6e:82:af:1e:a6:79:5d:53:9e:3d:d5:31:fd:
                    c2:7b:fe:bb:80:6a:e6:a7:a8:0b:5d:64:53:b3:ef:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:7C:B7:61:C6:72:C9:05:D2:63:B2:A9:A6:4C:A7:3D:22:78:15
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1bh8t2HGcskF0mOyqaZMpz0ieBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::/29
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/31
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0a:f200::/29
                  2a0b:b0c0::/29
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107::/36
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:2e40::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:c580::/29
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:90:ff:0d:ba:0a:7a:cc:cf:61:bb:d1:9a:ef:b1:e5:13:b8:
         2b:d6:25:82:a2:de:b5:06:fc:7a:1f:f5:d4:6f:45:bb:af:eb:
         3c:04:b0:a5:a1:e5:be:07:e5:48:75:85:e0:67:ed:db:aa:8a:
         f1:63:ef:be:52:8e:72:69:ae:7f:91:2d:10:71:d4:34:ad:00:
         74:6e:c0:a7:20:14:b9:3c:77:1c:82:d1:82:71:12:2b:97:ba:
         b8:7e:ae:98:6d:86:3c:ae:83:fa:3a:34:d1:00:48:1f:2c:bf:
         06:51:4f:9a:02:6e:35:a4:19:58:3a:05:7f:3b:71:d8:ce:b9:
         47:73:ad:08:18:48:1d:ad:fd:39:03:51:07:5a:c9:6c:4b:68:
         e4:83:44:99:22:e4:cf:2c:37:d4:6b:59:e4:a7:f4:9b:32:e4:
         4c:75:ef:00:82:c4:be:dd:29:cb:79:be:2a:b8:32:f5:6b:3f:
         7d:2b:a9:a8:2f:94:bb:f4:a1:af:8e:c2:9a:06:d0:fd:df:3b:
         97:be:8f:eb:14:e3:7d:e0:52:9d:41:70:67:53:b7:cc:1d:d1:
         79:32:cf:b3:e1:80:8a:37:c6:29:a9:8f:c7:fe:4f:32:21:b4:
         5d:0c:84:05:5d:3d:b1:d9:fa:92:42:37:ef:1a:d8:43:20:64:
         e0:0d:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org