Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/CReJ-422R7k2WTAeGOpYPSoo7QI.roa
File:                     CReJ-422R7k2WTAeGOpYPSoo7QI.roa (raw, json)
Hash identifier:          4mmQsIbsYei5bfHpkNX7dwdU1GdcSs1RuY1002Gze3M=
Subject key identifier:   09:17:89:FB:8D:B6:47:B9:36:59:30:1E:18:EA:58:3D:2A:28:ED:02
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018E2D3E5B85263939D7AD25841B96788BB5
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/CReJ-422R7k2WTAeGOpYPSoo7QI.roa
Signing time:             Mon 11 Mar 2024 11:20:45 +0000
ROA not before:           Mon 11 Mar 2024 11:20:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3500::/32 maxlen: 32
                          2a09:3505:6000::/36 maxlen: 36
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3804:d000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:a4c7:6000::/36 maxlen: 36
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a0f:cc87:9000::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:a83::/32 maxlen: 32
                          2a11:a85::/32 maxlen: 32
                          2a11:a86::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:c80:1000::/36 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a11:af06:a000::/36 maxlen: 36
                          2a12:7c00::/29 maxlen: 36
                          2a12:7c00:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 11:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2d:3e:5b:85:26:39:39:d7:ad:25:84:1b:96:78:8b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 11 11:20:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=091789fb8db647b93659301e18ea583d2a28ed02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:46:72:70:c1:14:c1:be:ac:52:f6:79:4d:
                    8b:69:a8:16:71:ab:ab:67:67:0c:94:02:c7:42:22:
                    f2:4e:e4:30:89:e3:fd:44:8f:ed:82:9e:1c:41:ca:
                    b6:8e:08:ea:57:ee:73:72:17:ce:c0:f9:58:b9:0c:
                    b0:4a:06:9b:32:80:61:fd:ab:d8:e6:ce:1f:1e:ac:
                    1e:3b:d6:01:8b:e4:dd:81:1e:58:28:24:2b:92:b5:
                    79:d4:ec:20:ec:44:f2:82:2e:de:b4:ca:37:9d:e4:
                    68:af:55:aa:84:bc:2e:46:b5:6e:3b:d8:f7:ab:ca:
                    2d:ac:ff:b9:a9:3d:3e:5d:8a:21:36:25:1e:8a:65:
                    62:01:9c:6e:4e:4b:db:1e:94:9a:95:68:d7:c4:b8:
                    12:18:0b:d8:67:26:44:b5:8e:65:30:56:d2:96:bb:
                    7c:5e:c5:6c:d9:89:89:fa:5e:d2:6f:73:9e:d6:da:
                    35:6a:a1:5e:c5:dc:62:77:09:66:1d:cd:8f:f0:01:
                    a8:72:06:7b:c1:e7:d1:4d:d8:ce:c2:85:81:9d:2e:
                    76:15:3a:55:7f:31:db:33:b3:d1:1f:90:38:99:0c:
                    ec:c8:7f:b6:7d:b6:ce:45:59:d3:78:e0:4d:20:22:
                    12:35:0a:cc:21:da:76:be:20:29:c1:dd:06:98:e2:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:17:89:FB:8D:B6:47:B9:36:59:30:1E:18:EA:58:3D:2A:28:ED:02
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/CReJ-422R7k2WTAeGOpYPSoo7QI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3500::/32
                  2a09:3505:6000::/36
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:a4c7:6000::/36
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a0f:cc87:9000::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:c80:1000::/36
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a11:af06:a000::/36
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:09:1e:98:17:96:83:4a:3e:e4:eb:83:41:da:ec:e5:10:cc:
         60:0e:72:06:11:f3:6d:37:96:56:fc:41:d6:9c:a1:04:04:e9:
         12:f1:2a:d0:00:a9:32:92:0c:3a:ab:a9:f1:ac:72:a1:59:4c:
         13:5b:d1:68:ce:3b:7d:92:bc:cf:09:75:b1:0c:e5:72:02:50:
         5e:b3:8c:49:c9:33:34:41:b8:ae:a9:f1:cc:68:2f:8c:57:17:
         ff:ad:a6:d4:b2:54:04:26:b1:e0:8e:05:10:74:c1:49:d5:5a:
         ee:62:24:84:cd:cf:8e:47:dc:22:13:2b:43:51:80:ac:a8:51:
         9a:e7:20:2c:6f:2b:2b:c1:84:a6:6c:b3:ed:c8:09:01:1b:3b:
         7c:6c:5a:46:e1:85:69:a0:2c:0d:eb:03:95:53:87:b4:c3:15:
         6a:26:c6:53:8a:ac:5f:41:14:fa:c4:49:32:d0:24:a3:11:9f:
         03:7c:c9:5b:b1:4c:12:e8:d9:87:b4:30:02:20:8f:da:9e:4b:
         9d:78:7f:72:23:2a:99:1b:49:3c:47:61:61:cf:50:93:e7:16:
         02:5d:b3:25:61:2d:18:41:f6:8a:ba:ea:66:ee:c1:c7:b3:a0:
         60:7a:b4:32:58:93:fd:c1:7a:f8:0d:37:b4:bc:26:e3:ec:31:
         36:42:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org