Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/CSttKssOfM_6KBGkqRsQ-Hrhu4A.roa
File:                     CSttKssOfM_6KBGkqRsQ-Hrhu4A.roa (raw, json)
Hash identifier:          +799YfpQKDLvBonOVPHxe58R4odYYAoPWol6s1TWwCY=
Subject key identifier:   09:2B:6D:2A:CB:0E:7C:CF:FA:28:11:A4:A9:1B:10:F8:7A:E1:BB:80
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018DB0AB700F67EF9F60213145DC2CE8A0E3
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/CSttKssOfM_6KBGkqRsQ-Hrhu4A.roa
Signing time:             Fri 16 Feb 2024 06:47:21 +0000
ROA not before:           Fri 16 Feb 2024 06:47:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204916
IP address blocks:        45.142.210.0/24 maxlen: 24
                          45.151.139.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.240.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          83.171.243.0/24 maxlen: 24
                          84.54.36.0/24 maxlen: 24
                          93.183.80.0/22 maxlen: 22
                          95.215.109.0/24 maxlen: 24
                          2a06:d900::/29 maxlen: 29
                          2a09:3505:9000::/36 maxlen: 36
                          2a09:3505:b000::/36 maxlen: 36
                          2a09:3506::/32 maxlen: 32
                          2a09:3800::/32 maxlen: 32
                          2a09:3801::/32 maxlen: 32
                          2a09:3802::/32 maxlen: 32
                          2a09:3804::/36 maxlen: 36
                          2a09:3804:1000::/36 maxlen: 36
                          2a09:3804:2000::/36 maxlen: 36
                          2a09:3804:3000::/36 maxlen: 36
                          2a09:3804:4000::/36 maxlen: 36
                          2a09:3804:5000::/36 maxlen: 36
                          2a09:3804:6000::/36 maxlen: 36
                          2a09:3804:8000::/36 maxlen: 36
                          2a09:3804:9000::/36 maxlen: 36
                          2a09:3804:a000::/36 maxlen: 36
                          2a09:3804:b000::/36 maxlen: 36
                          2a09:3804:c000::/36 maxlen: 36
                          2a09:3805::/32 maxlen: 32
                          2a09:3806::/32 maxlen: 32
                          2a09:3807::/32 maxlen: 32
                          2a09:3b00::/29 maxlen: 29
                          2a09:3d00::/29 maxlen: 36
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a09:4e01:5000::/36 maxlen: 36
                          2a09:4e01:9000::/36 maxlen: 36
                          2a09:4e01:a000::/36 maxlen: 36
                          2a09:4e03::/32 maxlen: 32
                          2a09:6f00::/32 maxlen: 32
                          2a09:b680::/29 maxlen: 36
                          2a09:bd80::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:2104::/32 maxlen: 32
                          2a0c:e8c0::/29 maxlen: 29
                          2a0d:5ec0::/29 maxlen: 36
                          2a0d:5ec5::/32 maxlen: 32
                          2a0d:8b03::/32 maxlen: 32
                          2a0d:8b04::/32 maxlen: 32
                          2a0d:8b07::/32 maxlen: 32
                          2a0f:cc80::/32 maxlen: 32
                          2a0f:cc81::/32 maxlen: 32
                          2a0f:cc87::/36 maxlen: 36
                          2a10:c0c0::/29 maxlen: 32
                          2a10:c0c0::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c5::/32 maxlen: 32
                          2a10:c0c6::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36
                          2a10:c340::/29 maxlen: 36
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:200:5000::/36 maxlen: 36
                          2a11:200:7000::/36 maxlen: 36
                          2a11:200:8000::/36 maxlen: 36
                          2a11:200:9000::/36 maxlen: 36
                          2a11:200:a000::/36 maxlen: 36
                          2a11:200:c000::/36 maxlen: 36
                          2a11:200:d000::/36 maxlen: 36
                          2a11:200:e000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a11:202::/32 maxlen: 32
                          2a11:204::/32 maxlen: 32
                          2a11:205::/32 maxlen: 32
                          2a11:206::/32 maxlen: 32
                          2a11:207::/32 maxlen: 32
                          2a11:780::/29 maxlen: 36
                          2a11:782::/32 maxlen: 32
                          2a11:980::/29 maxlen: 29
                          2a11:a80::/29 maxlen: 29
                          2a11:a80::/32 maxlen: 32
                          2a11:a81::/32 maxlen: 32
                          2a11:b80::/29 maxlen: 36
                          2a11:e82::/32 maxlen: 32
                          2a11:e87:6000::/36 maxlen: 36
                          2a11:af01::/32 maxlen: 32
                          2a11:af02::/32 maxlen: 32
                          2a11:af04::/32 maxlen: 32
                          2a12:7c00::/29 maxlen: 36

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 07:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b0:ab:70:0f:67:ef:9f:60:21:31:45:dc:2c:e8:a0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Feb 16 06:47:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=092b6d2acb0e7ccffa2811a4a91b10f87ae1bb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:30:22:59:71:41:3d:84:0b:5b:95:2a:f3:
                    6f:a7:7b:84:86:2f:09:ba:4d:d2:d4:06:8c:9a:a6:
                    17:fb:37:2d:34:d1:ad:89:26:9f:12:cb:8f:d4:5c:
                    ea:f2:9b:65:8d:1b:b2:7a:61:b2:30:87:f3:00:34:
                    6d:c9:ce:c0:43:0e:cc:72:67:a7:02:c4:be:e0:b2:
                    f6:c6:8d:ea:02:40:c7:dc:8f:b4:65:d4:5d:b7:7e:
                    c1:c6:3c:50:d3:06:6c:ce:d2:53:f7:fa:f0:82:1e:
                    0a:e6:20:c0:f0:33:dd:d3:6b:c7:e4:be:7a:a4:c0:
                    5a:4a:b3:1f:a7:b9:7d:0b:93:bf:4c:1f:5b:4c:47:
                    6e:c1:d9:4a:a6:44:f1:db:89:a6:6b:69:13:37:b2:
                    2b:b8:a8:0b:a6:ec:10:03:6d:5e:64:bf:7e:e1:ca:
                    55:6e:ba:49:c9:ab:cf:33:20:df:f6:e6:ed:2c:1f:
                    aa:8a:ba:8b:ed:f1:34:7a:da:60:fa:2d:d4:05:9f:
                    ce:b0:2c:e6:96:88:de:de:c4:50:34:c9:41:72:26:
                    28:d9:d4:39:a0:d4:08:ed:0f:85:f5:0e:39:62:05:
                    a8:64:a0:89:a6:35:57:9f:c9:fb:fe:30:67:3f:2b:
                    5f:67:bf:92:a1:9c:42:bc:c6:ac:16:8f:1f:09:c7:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:6D:2A:CB:0E:7C:CF:FA:28:11:A4:A9:1B:10:F8:7A:E1:BB:80
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/CSttKssOfM_6KBGkqRsQ-Hrhu4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.210.0/24
                  45.151.139.0/24
                  83.171.240.0/22
                  84.54.36.0/24
                  93.183.80.0/22
                  95.215.109.0/24
                IPv6:
                  2a06:d900::/29
                  2a09:3505:9000::/36
                  2a09:3505:b000::/36
                  2a09:3506::/32
                  2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
                  2a09:3804:8000::-2a09:3804:cfff:ffff:ffff:ffff:ffff:ffff
                  2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:3b00::/29
                  2a09:3d00::/29
                  2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
                  2a09:4e03::/32
                  2a09:6f00::/32
                  2a09:b680::/29
                  2a09:bd80::/32
                  2a0a:4784::/32
                  2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:e8c0::/29
                  2a0d:5ec0::/29
                  2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:8b07::/32
                  2a0f:cc80::/31
                  2a0f:cc87::/36
                  2a10:c0c0::/29
                  2a10:c340::/29
                  2a11:200::/36
                  2a11:200:4000::/35
                  2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
                  2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:204::/30
                  2a11:780::/29
                  2a11:980::/29
                  2a11:a80::/29
                  2a11:b80::/29
                  2a11:e82::/32
                  2a11:e87:6000::/36
                  2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:af04::/32
                  2a12:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:64:47:71:0c:93:fb:53:3b:02:23:f7:bb:bf:16:0d:f1:
         2c:5e:12:01:13:c4:f2:41:76:35:62:d0:08:9b:dd:c2:c3:84:
         54:3b:9d:00:61:d9:d2:e9:0f:eb:aa:bd:8d:90:21:50:fc:1f:
         76:8b:49:42:0d:e6:eb:2f:fd:18:2d:a0:6a:bd:cb:5c:99:85:
         e1:33:76:9c:bc:b8:a1:e1:49:a5:e5:94:eb:de:0c:c2:35:ca:
         0a:ad:9f:e4:50:9e:0e:0f:04:9f:bb:5e:16:41:99:88:3d:91:
         85:0e:83:5b:d5:17:2b:3c:34:1c:82:1c:87:3c:16:39:ef:a2:
         f4:4b:1b:65:58:fe:e2:a6:62:0b:b6:6c:df:90:8f:85:cb:f5:
         86:ea:cf:8d:37:b3:31:6b:58:7a:ac:ba:06:7b:00:67:10:5f:
         cd:6d:4c:67:53:d7:01:03:10:1f:c2:dd:26:4f:fa:65:36:b7:
         b6:dc:f2:8c:48:23:64:96:c9:26:1c:cc:b9:90:5f:d7:85:17:
         66:84:78:98:6e:da:68:62:a6:4e:5c:a2:e7:37:53:38:f2:ce:
         2e:1e:0e:25:78:a0:e4:6b:6d:3e:60:0b:be:60:89:08:8e:14:
         f8:43:65:ec:cd:e0:78:a0:a3:cb:4f:bf:b9:11:4f:7a:c5:82:
         0f:ee:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org