Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2EpqcTyE4jmg4s7IqGjI1WTQtFo.roa
File:                     2EpqcTyE4jmg4s7IqGjI1WTQtFo.roa (raw, json)
Hash identifier:          XoaEkxm4go34BJd5serUwk08n9C/9CcbsyvRY8fmCyE=
Subject key identifier:   D8:4A:6A:71:3C:84:E2:39:A0:E2:CE:C8:A8:68:C8:D5:64:D0:B4:5A
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E67EB69CC2E12163BE2A01C71D98B605F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2EpqcTyE4jmg4s7IqGjI1WTQtFo.roa
Signing time:             Fri 22 Mar 2024 20:47:44 +0000
ROA not before:           Fri 22 Mar 2024 20:47:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3804:e000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:6f01::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0b:b0c0::/32 maxlen: 32
                          2a0b:b0c1::/32 maxlen: 32
                          2a0b:b0c2::/32 maxlen: 32
                          2a0b:b0c3::/32 maxlen: 32
                          2a0b:b0c4::/32 maxlen: 32
                          2a0b:b0c5::/32 maxlen: 32
                          2a0b:b0c6::/32 maxlen: 32
                          2a0b:b0c7::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107::/36 maxlen: 36
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:c80:3000::/36 maxlen: 36
                          2a11:c80:4000::/36 maxlen: 36
                          2a11:c80:5000::/36 maxlen: 36
                          2a11:c80:6000::/36 maxlen: 36
                          2a11:c81::/32 maxlen: 32
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 19:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:67:eb:69:cc:2e:12:16:3b:e2:a0:1c:71:d9:8b:60:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 22 20:47:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d84a6a713c84e239a0e2cec8a868c8d564d0b45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:92:1f:fb:65:d0:42:97:f3:b6:13:2b:19:
                    c0:39:cf:11:88:53:61:69:09:59:11:32:12:e4:be:
                    9d:5b:d1:e8:64:88:d8:2e:6d:2f:45:c5:9e:bd:44:
                    36:7b:8a:ab:52:46:f6:17:de:9a:35:8a:d8:48:aa:
                    e6:43:0e:d7:40:d4:1d:04:49:b6:1e:c7:85:e3:3e:
                    78:92:8f:1d:84:c1:d2:16:c5:0d:1f:b9:20:16:9c:
                    d9:df:d5:0a:9c:42:cd:b2:5d:74:77:3b:58:53:ea:
                    bd:7c:2f:45:f3:d7:25:18:0b:9b:b4:64:fd:8e:8f:
                    de:56:70:e3:b2:e2:54:04:9b:1f:e1:ab:bf:fb:52:
                    9e:bf:ff:07:c7:28:68:af:45:67:0d:59:2d:4e:03:
                    34:bd:a4:68:d1:75:fd:8d:b3:71:53:6b:7b:a8:05:
                    14:22:66:c2:f4:0a:90:28:cb:e1:53:4f:76:69:0b:
                    29:57:ea:8b:5b:de:c4:c8:a2:60:39:37:56:1b:25:
                    e2:5c:e7:bc:39:82:84:17:b6:b1:87:ee:3d:21:73:
                    14:17:47:77:94:8f:a0:6a:fb:94:ef:c3:ef:25:b4:
                    dc:c5:45:88:b3:f1:de:e3:d6:5b:e7:aa:c8:90:c6:
                    2f:9b:a1:b5:02:c7:3a:3f:aa:d3:c2:b4:52:49:33:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4A:6A:71:3C:84:E2:39:A0:E2:CE:C8:A8:68:C8:D5:64:D0:B4:5A
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2EpqcTyE4jmg4s7IqGjI1WTQtFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:efff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/31
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0b:b0c0::/29
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107::/36
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:ff:c6:d2:db:a6:c7:78:c9:2d:a3:83:09:05:5b:b4:c3:
         49:40:3c:81:ab:87:8d:7a:7e:00:be:64:3e:3c:10:d3:dc:36:
         00:50:b1:13:60:5b:f6:7c:20:cd:ab:3a:67:ec:d7:e4:fe:78:
         c4:da:eb:39:a6:c9:bb:bf:41:c0:9a:a6:70:48:12:3b:5a:5c:
         e3:bf:4e:39:c8:1c:12:50:22:51:14:90:76:e4:24:91:79:91:
         f0:7b:6e:a3:2d:90:85:38:6b:28:e2:de:b8:79:0d:5f:64:df:
         dd:88:aa:de:3f:e9:fa:ae:da:af:87:c8:00:71:43:33:d3:02:
         d1:1d:79:38:25:23:d7:8c:d5:46:96:2f:f4:14:67:72:a7:5a:
         a9:b4:fa:aa:59:9c:1f:a8:85:fa:15:b8:5b:c8:d5:99:b9:cc:
         5d:29:99:e8:5e:05:f4:ea:64:96:b8:3a:47:ad:f2:ad:48:ff:
         e9:75:fc:9b:d6:5e:ef:fa:33:80:3a:2f:5f:63:9c:02:81:70:
         00:63:ad:e9:11:f2:e9:fc:ab:08:82:fc:ba:9f:f7:8e:8a:68:
         39:1c:17:1b:2c:b2:f7:ac:17:02:28:19:31:54:09:04:27:ba:
         f3:2d:8c:34:bb:d9:2e:15:88:25:f1:39:aa:4c:39:dd:73:b7:
         0d:95:1a:f1
-----BEGIN CERTIFICATE-----
MIIHHDCCBgSgAwIBAgISAY5n62nMLhIWO+KgHHHZi2BfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMzIyMjA0NzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODRhNmE3MTNjODRlMjM5YTBlMmNlYzhhODY4YzhkNTY0ZDBiNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMWSH/tl0EKX87YTKxnAOc8RiFNh
aQlZETIS5L6dW9HoZIjYLm0vRcWevUQ2e4qrUkb2F96aNYrYSKrmQw7XQNQdBEm2
HseF4z54ko8dhMHSFsUNH7kgFpzZ39UKnELNsl10dztYU+q9fC9F89clGAubtGT9
jo/eVnDjsuJUBJsf4au/+1Kev/8Hxyhor0VnDVktTgM0vaRo0XX9jbNxU2t7qAUU
ImbC9AqQKMvhU092aQspV+qLW97EyKJgOTdWGyXiXOe8OYKEF7axh+49IXMUF0d3
lI+gavuU78PvJbTcxUWIs/He49Zb56rIkMYvm6G1Asc6P6rTwrRSSTM13QIDAQAB
o4IEKDCCBCQwHQYDVR0OBBYEFNhKanE8hOI5oOLOyKhoyNVk0LRaMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvMkVwcWNUeUU0am1nNHM3SXFHakkxV1RRdEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICPAYIKwYBBQUHAQcBAf8EggIrMIICJzAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtMIIB9wQCAAIwggHvAwUD
KgbZAAMFACoJBAEDBQAqCTUAAwYEKgk1BWADBgQqCTUFkAMGBCoJNQWwAwYEKgk1
BdADBQAqCTUGMA0DBAMqCTgDBQAqCTgCMA8DBQIqCTgEAwYEKgk4BGAwEAMGByoJ
OASAAwYEKgk4BOAwDgMFACoJOAUDBQMqCTgAAwUDKgk7AAMFAyoJPQAwEAMGBCoJ
TgEwAwYFKglOAUAwEAMGBCoJTgGQAwYEKglOAaADBQAqCU4DAwUBKglvAAMGBCoJ
pMdgAwUDKgm2gAMFACoJvYADBQAqCkeEAwUDKguwwDAOAwUAKgwhAwMFACoMIQQD
BgQqDCEHAAMGBCoMIQdgAwUDKgzowAMFAyoNXsAwDgMFACoNiwMDBQAqDYsEAwUA
Kg2LBwMFASoPzIADBgQqD8yHAAMGBCoPzIeQAwUDKhDAwAMFAyoQw0ADBgQqEQIA
AAMGBSoRAgBAMBADBgQqEQIAcAMGBCoRAgCgMBADBgYqEQIAwAMGBCoRAgDgMA4D
BQAqEQIBAwUAKhECAgMFAioRAgQDBQMqEQeAAwUDKhEJgAMFAyoRCoADBQMqEQuA
AwUDKhEMgAMFACoRDoIDBgQqEQ6HYDAOAwUAKhGvAQMFACoRrwIDBQAqEa8EAwYE
KhGvBqADBQMqEnwAMA0GCSqGSIb3DQEBCwUAA4IBAQBaRP/G0tumx3jJLaODCQVb
tMNJQDyBq4eNen4AvmQ+PBDT3DYAULETYFv2fCDNqzpn7Nfk/njE2us5psm7v0HA
mqZwSBI7Wlzjv045yBwSUCJRFJB25CSReZHwe26jLZCFOGso4t64eQ1fZN/diKre
P+n6rtqvh8gAcUMz0wLRHXk4JSPXjNVGli/0FGdyp1qptPqqWZwfqIX6FbhbyNWZ
ucxdKZnoXgX06mSWuDpHrfKtSP/pdfyb1l7v+jOAOi9fY5wCgXAAY63pEfLp/KsI
gvy6n/eOimg5HBcbLLL3rBcCKBkxVAkEJ7rzLYw0u9kuFYgl8TmqTDndc7cNlRrx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org