Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2guJRVNKmc3qnNv1b75Hns-1JKg.roa
File:                     2guJRVNKmc3qnNv1b75Hns-1JKg.roa (raw, json)
Hash identifier:          aerH8iBZen7NQNqDhgH5HXeRm3zYheOynt9HfbN5axg=
Subject key identifier:   DA:0B:89:45:53:4A:99:CD:EA:9C:DB:F5:6F:BE:47:9E:CF:B5:24:A8
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E50AE513B3103DFB7906CE4380AC5F1DE
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2guJRVNKmc3qnNv1b75Hns-1JKg.roa
Signing time:             Mon 18 Mar 2024 08:29:45 +0000
ROA not before:           Mon 18 Mar 2024 08:29:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:401::/32 maxlen: 32
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3505:d000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:2107::/36 maxlen: 36
                          2a0c:2107:6000::/36 maxlen: 36
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:c80:2000::/36 maxlen: 36
                          2a11:c80:3000::/36 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 05:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:50:ae:51:3b:31:03:df:b7:90:6c:e4:38:0a:c5:f1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 18 08:29:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=da0b8945534a99cdea9cdbf56fbe479ecfb524a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:52:9e:6d:b8:41:9c:fb:a3:51:9f:b3:6d:
                    91:63:55:2a:04:25:3f:29:e5:9c:83:cb:9d:22:67:
                    40:8e:73:82:be:78:18:f1:fd:4c:07:3a:1c:ea:bb:
                    69:b9:0b:e1:42:c2:03:bf:de:f0:db:9a:00:5f:3d:
                    7b:3f:e2:36:6c:91:c5:4e:9a:3c:44:e3:02:1e:d9:
                    fe:52:01:83:2a:ec:76:c6:76:18:62:f4:60:86:ca:
                    1e:a0:ea:9b:6c:f0:8b:2d:c2:36:16:62:8a:da:e5:
                    08:dc:b1:bf:50:e0:8a:20:e0:b4:e5:b9:8d:c9:da:
                    6e:d5:ee:09:02:ea:23:da:21:07:15:88:ca:fb:47:
                    6a:5c:0e:92:42:a2:2f:f0:5a:85:a4:c3:69:ea:e9:
                    94:03:4c:da:a0:1a:2b:4b:7f:57:c0:45:2e:5a:98:
                    63:7f:6d:26:15:5d:a5:61:a4:01:96:e1:95:1c:d2:
                    0e:95:8b:73:7a:5f:9e:3d:1c:47:53:04:93:af:be:
                    62:ec:71:54:2c:61:85:94:ae:34:f1:c9:e4:08:d1:
                    01:7b:4c:0e:bc:d5:ca:c4:bb:6e:42:bb:62:5e:5b:
                    a1:f1:d7:ba:22:34:37:77:95:e2:ce:8a:a4:8d:48:
                    22:a4:92:a9:e3:67:c0:b8:ed:ab:63:b6:ff:2e:a3:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0B:89:45:53:4A:99:CD:EA:9C:DB:F5:6F:BE:47:9E:CF:B5:24:A8
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2guJRVNKmc3qnNv1b75Hns-1JKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:401::/32
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3505:d000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2107::/36
                  2a0c:2107:6000::/36
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::-2a11:c80:3fff:ffff:ffff:ffff:ffff:ffff
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:15:24:d8:e5:d4:9d:bd:2b:45:61:4c:8d:5c:66:24:45:92:
         06:68:66:fb:19:5c:6d:3e:00:e4:b8:d0:ee:d8:90:37:cc:bc:
         80:9b:b5:a0:c9:e1:93:5f:bf:4c:1c:40:65:d0:2c:d1:3e:93:
         02:8a:ad:2c:1b:e6:ac:f4:65:be:36:af:7b:eb:24:d1:90:56:
         e0:10:dd:6c:61:20:c3:62:d2:bb:23:d7:5c:26:11:af:26:08:
         6c:dd:e7:eb:7c:2a:f0:c8:a7:32:fe:8c:58:f3:c2:ac:ff:84:
         7f:76:9a:24:5e:13:27:e8:2e:78:4a:4d:e6:ea:27:d7:3e:34:
         ea:d4:73:62:fc:4d:b7:29:02:da:c7:c6:3d:8a:47:98:ce:6c:
         5b:3d:8e:a4:6e:6b:ab:56:98:67:5c:ac:a8:2a:91:e1:d9:bd:
         fb:37:e7:4b:e4:a0:bb:74:a8:cd:7e:51:f3:52:36:58:2f:14:
         19:13:ec:ae:18:95:9b:08:2d:58:1d:90:8e:ed:2f:9f:da:28:
         18:b9:fa:2a:48:48:77:c7:c8:1d:f0:73:a1:5d:87:c7:c9:b4:
         45:06:41:13:a9:79:91:07:37:c6:f8:96:13:55:6f:56:10:9e:
         39:8b:cc:0a:ee:63:c1:56:24:9f:cd:4d:ed:e5:b5:35:64:de:
         c7:a2:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 06:21:42 2024 by rpki-client on console-ams.rpki-client.org